From 9cec5a0c82330e4cbbec3c77e5a641b11ad73f3d Mon Sep 17 00:00:00 2001
From: pavel balandin <pavelbalandin897@gmail.com>
Date: Mon, 14 Sep 2026 02:54:39 +0300
Subject: [PATCH 01/12] complete lab1

---
 .github/PULL_REQUEST_TEMPLATE.md |  28 ++++++++
 .github/workflows/lab1-smoke.yml |  32 +++++++++
 submissions/lab1.md              | 109 +++++++++++++++++++++++++++++++
 3 files changed, 169 insertions(+)
 create mode 100644 .github/PULL_REQUEST_TEMPLATE.md
 create mode 100644 .github/workflows/lab1-smoke.yml
 create mode 100644 submissions/lab1.md

diff --git a/.github/PULL_REQUEST_TEMPLATE.md b/.github/PULL_REQUEST_TEMPLATE.md
new file mode 100644
index 000000000..ff9bfdc3d
--- /dev/null
+++ b/.github/PULL_REQUEST_TEMPLATE.md
@@ -0,0 +1,28 @@
+## Goal
+
+Set up the Lab 1 workflow and document the local OWASP Juice Shop deployment.
+
+## Changes
+
+- Added the Lab 1 triage report in `submissions/lab1.md`.
+- Added the repository pull request template.
+- Added a GitHub Actions smoke test for OWASP Juice Shop.
+
+## Testing
+
+Commands and observed output:
+
+```text
+# Paste the commands you ran and their outputs here before submitting the PR.
+```
+
+## Artifacts & Screenshots
+
+- Lab report: `submissions/lab1.md`
+- Draft PR auto-filled template: add screenshot or PR link here.
+
+## Checklist
+
+- [ ] PR title follows `feat(labN): <topic>`.
+- [ ] No secrets or large temp files committed.
+- [ ] `submissions/labN.md` exists.
diff --git a/.github/workflows/lab1-smoke.yml b/.github/workflows/lab1-smoke.yml
new file mode 100644
index 000000000..28a1ecb9a
--- /dev/null
+++ b/.github/workflows/lab1-smoke.yml
@@ -0,0 +1,32 @@
+name: Lab 1 Smoke Test
+
+on:
+  pull_request:
+    branches:
+      - main
+
+permissions:
+  contents: read
+
+jobs:
+  juice-shop-smoke:
+    runs-on: ubuntu-latest
+    services:
+      juice-shop:
+        image: bkimminich/juice-shop:v20.0.0
+        ports:
+          - 3000:3000
+    steps:
+      - name: Wait for Juice Shop
+        run: |
+          set -euo pipefail
+          for attempt in $(seq 1 30); do
+            if curl --silent --fail http://localhost:3000/rest/admin/application-version; then
+              echo
+              echo "Juice Shop is ready after attempt ${attempt}."
+              exit 0
+            fi
+            sleep 2
+          done
+          echo "Juice Shop did not become ready within 60 seconds."
+          exit 1
diff --git a/submissions/lab1.md b/submissions/lab1.md
new file mode 100644
index 000000000..02a02cd89
--- /dev/null
+++ b/submissions/lab1.md
@@ -0,0 +1,109 @@
+# Lab 1 Submission
+
+## Triage report
+
+### Asset
+
+- Image tag: `bkimminich/juice-shop:v20.0.0`
+- Image digest: `bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0`
+- Host OS: macOS 26.6.2, build 25G83
+- Docker version: `Docker version 29.1.3, build f52814d`
+
+### Deployment
+
+- Run command:
+
+```bash
+docker run -d --name juice-shop -p 127.0.0.1:3000:3000 bkimminich/juice-shop:v20.0.0
+```
+
+- Access URL: http://127.0.0.1:3000
+- Port binding: localhost only, `127.0.0.1:3000->3000/tcp`. This matters because Juice Shop is intentionally vulnerable; binding to `127.0.0.1` keeps it reachable only from this machine instead of exposing it to the local network.
+- Restart policy: `no`, `MaximumRetryCount: 0`.
+
+### Health
+
+```text
+$ docker ps --filter name=juice-shop --format 'table {{.Names}}\t{{.Status}}\t{{.Ports}}'
+NAMES        STATUS              PORTS
+juice-shop   Up About a minute   127.0.0.1:3000->3000/tcp
+```
+
+```text
+$ curl -s -o /dev/null -w "HTTP %{http_code}\n" http://127.0.0.1:3000
+HTTP 200
+
+$ curl -s http://127.0.0.1:3000/rest/admin/application-version
+{"version":"20.0.0"}
+
+$ curl -s http://127.0.0.1:3000/api/Products | jq '.data | length'
+46
+
+$ docker inspect bkimminich/juice-shop:v20.0.0 --format '{{index .RepoDigests 0}}'
+bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0
+```
+
+### Surface
+
+- Login and registration: the top-right Account menu is visible. Login and registration are exposed as part of the account flow.
+- Products: the main page shows the product catalog with items such as Apple Juice, Apple Pomace, Banana Juice, and Basil Smoothie. The product API returned 46 products.
+- Admin or account area: the page exposes account navigation. The app also makes unauthenticated requests to administrative configuration/version endpoints such as `/rest/admin/application-version` and `/rest/admin/application-configuration`.
+- Console errors: no browser console messages were observed during the automated page load. A request to the unexpected path `/api/Products/1/reviews` returned an Express 500 error page and triggered the Juice Shop Error Handling challenge.
+- Local storage and cookies: localStorage and sessionStorage were empty on first load. Cookies were set for `continueCode` and `language`; both were not `Secure`, and `continueCode` was not `HttpOnly`.
+- Product reviews: `GET /rest/products/1/reviews` returned HTTP 200 without authentication and included review messages and authors.
+
+### Headers
+
+```text
+$ curl -sI http://127.0.0.1:3000 | head -20
+HTTP/1.1 200 OK
+Access-Control-Allow-Origin: *
+X-Content-Type-Options: nosniff
+X-Frame-Options: SAMEORIGIN
+Feature-Policy: payment 'self'
+X-Recruiting: /#/jobs
+Accept-Ranges: bytes
+Cache-Control: public, max-age=0
+Last-Modified: Sun, 13 Sep 2026 23:44:52 GMT
+ETag: W/"26af-1a09d28ce9e"
+Content-Type: text/html; charset=UTF-8
+Content-Length: 9903
+Vary: Accept-Encoding
+Date: Sun, 13 Sep 2026 23:46:30 GMT
+Connection: keep-alive
+Keep-Alive: timeout=5
+```
+
+Header classification:
+
+- `Content-Security-Policy`: missing.
+- `Strict-Transport-Security`: missing.
+- `X-Content-Type-Options`: present, `nosniff`.
+- `X-Frame-Options`: present, `SAMEORIGIN`.
+
+### Top 3 risks
+
+1. **Security headers are incomplete** — The application does not send `Content-Security-Policy` or `Strict-Transport-Security`. Missing hardening headers reduce browser-side protection against script injection impact and insecure transport patterns. OWASP Top 10:2025 category: A02 Security Misconfiguration.
+2. **Unauthenticated product review access** — Product review data is available through `GET /rest/products/1/reviews` without authentication. Even if product reviews are public by design, the endpoint exposes author identifiers and demonstrates a broad public API surface that should be reviewed before production use. OWASP Top 10:2025 category: A01 Broken Access Control.
+3. **Verbose server error page** — Requesting an unexpected API path returned HTTP 500 with an Express error page and stack trace paths. Detailed error output can help attackers map framework internals and route handling behavior. OWASP Top 10:2025 category: A05 Security Logging and Monitoring Failures.
+
+## PR template
+
+- File path: `.github/PULL_REQUEST_TEMPLATE.md`
+- Section names: `Goal`, `Changes`, `Testing`, `Artifacts & Screenshots`, `Checklist`
+- Checklist items:
+  - PR title follows `feat(labN): <topic>`.
+  - No secrets or large temp files committed.
+  - `submissions/labN.md` exists.
+- Draft PR link or screenshot showing the auto-filled description: TODO — create the draft PR after pushing `feature/lab1`, then paste the PR URL here or add a screenshot.
+
+## GitHub community
+
+Stars help open-source maintainers because they show visible interest in a project and make the repository easier for other users to discover. Following the professor, TAs, and classmates helps team projects because it makes people and their repositories easier to find during collaboration and review.
+
+## Bonus: CI smoke test
+
+- Workflow path: `.github/workflows/lab1-smoke.yml`
+- Run URL: TODO — paste the GitHub Actions run URL after opening the PR.
+- Run duration: TODO — paste the duration from the GitHub Actions run after it completes.
+- Curl output excerpt from the job log: TODO — paste the successful polling line from the GitHub Actions job log after the run is green.

From ca31a2f5d470841ee71e608e2fcfdec5599628a7 Mon Sep 17 00:00:00 2001
From: pavel balandin <pavelbalandin897@gmail.com>
Date: Mon, 14 Sep 2026 03:06:44 +0300
Subject: [PATCH 02/12] complete second lab

---
 labs/lab2/threagile-model-auth.yaml   | 437 ++++++++++++++++++++++++++
 labs/lab2/threagile-model-secure.yaml | 401 +++++++++++++++++++++++
 labs/lab2/threagile-model.yaml        |  30 +-
 submissions/lab2.md                   |  87 +++++
 4 files changed, 926 insertions(+), 29 deletions(-)
 create mode 100644 labs/lab2/threagile-model-auth.yaml
 create mode 100644 labs/lab2/threagile-model-secure.yaml
 create mode 100644 submissions/lab2.md

diff --git a/labs/lab2/threagile-model-auth.yaml b/labs/lab2/threagile-model-auth.yaml
new file mode 100644
index 000000000..b17ef9182
--- /dev/null
+++ b/labs/lab2/threagile-model-auth.yaml
@@ -0,0 +1,437 @@
+threagile_version: 1.0.0
+
+title: Juice Shop Login Flow
+date: 2026-09-14
+
+author:
+  name: Student Name
+  homepage: https://example.edu
+
+management_summary_comment: >
+  Small feature-level threat model for the OWASP Juice Shop login path. The model
+  focuses on credentials, JWT issuing, JWT verification and access to the admin endpoint.
+
+business_criticality: important
+
+business_overview:
+  description: >
+    Users authenticate to Juice Shop and receive a JWT token. Admin users can call
+    the admin endpoint only after token verification and authorization checks.
+  images: []
+
+technical_overview:
+  description: >
+    Browser sends credentials to the login endpoint. The login endpoint checks the
+    credential store, asks the token service to issue a JWT signed with a signing key,
+    and later the admin endpoint verifies the token through the authorization check.
+  images: []
+
+questions:
+  Are JWT signing keys rotated?: "No rotation is modeled in this lab."
+  Are admin routes protected server-side?: "Yes, through the authorization check asset."
+
+abuse_cases:
+  Credential stuffing: >
+    An attacker repeatedly submits passwords to the login endpoint.
+  JWT forgery: >
+    An attacker tries to guess or steal the JWT signing key and create admin tokens.
+  Broken access control: >
+    An attacker calls the admin endpoint without a valid admin authorization decision.
+
+security_requirements:
+  Protect JWT signing key: Store the signing key in a managed secret store and rotate it.
+  Enforce authorization: The admin endpoint must trust only server-side authorization decisions.
+  Rate limit login: Apply throttling and lockout for repeated failed login attempts.
+
+tags_available:
+  - browser
+  - login
+  - auth
+  - jwt
+  - admin
+  - secrets
+  - database
+  - endpoint
+  - docker
+
+data_assets:
+
+  User Credentials:
+    id: user-credentials
+    description: "Email and password submitted during login."
+    usage: business
+    tags: ["auth"]
+    origin: user-supplied
+    owner: Lab Owner
+    quantity: many
+    confidentiality: confidential
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Credentials must stay secret and correct to prevent account takeover."
+
+  User Accounts:
+    id: auth-user-accounts
+    description: "Account records with roles and password hashes."
+    usage: business
+    tags: ["auth", "database"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: confidential
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Account and role integrity is required for authentication and authorization."
+
+  JWT Token:
+    id: jwt-token
+    description: "Signed session token returned to the browser."
+    usage: business
+    tags: ["jwt", "auth"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: confidential
+    integrity: critical
+    availability: important
+    justification_cia_rating: "A stolen or modified token can give access to user or admin functions."
+
+  JWT Signing Key:
+    id: jwt-signing-key
+    description: "Secret key used to sign and verify JWT tokens."
+    usage: business
+    tags: ["secrets", "jwt"]
+    origin: application
+    owner: Lab Owner
+    quantity: very-few
+    confidentiality: strictly-confidential
+    integrity: mission-critical
+    availability: important
+    justification_cia_rating: "If this key is leaked or changed, attackers can forge valid tokens."
+
+  Admin Data:
+    id: admin-data
+    description: "Administrative data returned by the admin endpoint."
+    usage: business
+    tags: ["admin"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: restricted
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Admin data should be available only to authorized administrators."
+
+technical_assets:
+
+  User Browser:
+    id: auth-user-browser
+    description: "User's browser used to submit login requests and store the JWT."
+    type: external-entity
+    usage: business
+    used_as_client_by_human: true
+    out_of_scope: false
+    justification_out_of_scope:
+    size: system
+    technology: browser
+    tags: ["browser"]
+    internet: true
+    machine: virtual
+    encryption: none
+    owner: External User
+    confidentiality: public
+    integrity: operational
+    availability: operational
+    justification_cia_rating: "The browser is controlled by the user and can also be controlled by an attacker."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: false
+    data_assets_processed:
+      - user-credentials
+      - jwt-token
+    data_assets_stored:
+      - jwt-token
+    data_formats_accepted:
+      - json
+    communication_links:
+      Submit Login:
+        target: login-endpoint
+        description: "Browser submits credentials to the login endpoint."
+        protocol: https
+        authentication: credentials
+        authorization: enduser-identity-propagation
+        tags: ["login"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - user-credentials
+        data_assets_received:
+          - jwt-token
+      Call Admin Endpoint:
+        target: admin-endpoint
+        description: "Browser calls an admin API with a JWT token."
+        protocol: https
+        authentication: token
+        authorization: enduser-identity-propagation
+        tags: ["admin"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - jwt-token
+        data_assets_received:
+          - admin-data
+
+  Login Endpoint:
+    id: login-endpoint
+    description: "Juice Shop API endpoint that receives login credentials."
+    type: process
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: component
+    technology: web-service-rest
+    tags: ["login", "endpoint"]
+    internet: false
+    machine: container
+    encryption: transparent
+    owner: Lab Owner
+    confidentiality: restricted
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Login endpoint processes credentials and starts authenticated sessions."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: true
+    data_assets_processed:
+      - user-credentials
+      - jwt-token
+    data_assets_stored: []
+    data_formats_accepted:
+      - json
+    communication_links:
+      Check Credentials:
+        target: credential-store
+        description: "Login endpoint checks submitted credentials against stored account records."
+        protocol: sql-access-protocol-encrypted
+        authentication: credentials
+        authorization: technical-user
+        tags: ["database"]
+        vpn: false
+        ip_filtered: false
+        readonly: true
+        usage: business
+        data_assets_sent:
+          - user-credentials
+        data_assets_received:
+          - auth-user-accounts
+      Request JWT:
+        target: token-service
+        description: "Login endpoint requests a signed JWT after successful authentication."
+        protocol: https
+        authentication: token
+        authorization: technical-user
+        tags: ["jwt"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - auth-user-accounts
+        data_assets_received:
+          - jwt-token
+
+  Token Service:
+    id: token-service
+    description: "Component that signs and verifies JWT tokens."
+    type: process
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: component
+    technology: web-service-rest
+    tags: ["jwt", "auth"]
+    internet: false
+    machine: container
+    encryption: transparent
+    owner: Lab Owner
+    confidentiality: restricted
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Token service controls token integrity for the login flow."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: true
+    data_assets_processed:
+      - jwt-token
+      - jwt-signing-key
+    data_assets_stored:
+      - jwt-signing-key
+    data_formats_accepted:
+      - json
+    communication_links:
+      Verify Token:
+        target: authz-check
+        description: "Token service sends verified token claims to authorization check."
+        protocol: https
+        authentication: token
+        authorization: technical-user
+        tags: ["jwt"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - jwt-token
+        data_assets_received:
+          - auth-user-accounts
+
+  Authorization Check:
+    id: authz-check
+    description: "Server-side check that validates token claims and admin role before admin access."
+    type: process
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: component
+    technology: web-service-rest
+    tags: ["auth", "admin"]
+    internet: false
+    machine: container
+    encryption: transparent
+    owner: Lab Owner
+    confidentiality: restricted
+    integrity: critical
+    availability: important
+    justification_cia_rating: "This check decides whether a request can reach the admin endpoint."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: true
+    data_assets_processed:
+      - jwt-token
+      - auth-user-accounts
+    data_assets_stored: []
+    data_formats_accepted:
+      - json
+    communication_links:
+      Authorize Admin Request:
+        target: admin-endpoint
+        description: "Authorization check forwards only authorized admin requests."
+        protocol: https
+        authentication: token
+        authorization: enduser-identity-propagation
+        tags: ["admin"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - jwt-token
+          - auth-user-accounts
+        data_assets_received:
+          - admin-data
+
+  Admin Endpoint:
+    id: admin-endpoint
+    description: "Juice Shop API endpoint for administrative functions."
+    type: process
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: component
+    technology: web-service-rest
+    tags: ["admin", "endpoint"]
+    internet: false
+    machine: container
+    encryption: transparent
+    owner: Lab Owner
+    confidentiality: restricted
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Admin endpoint exposes sensitive actions and data."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: true
+    data_assets_processed:
+      - admin-data
+      - jwt-token
+    data_assets_stored: []
+    data_formats_accepted:
+      - json
+    communication_links: {}
+
+  Credential Store:
+    id: credential-store
+    description: "Database table or SQLite store with accounts, password hashes and roles."
+    type: datastore
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: component
+    technology: database
+    tags: ["database", "auth"]
+    internet: false
+    machine: container
+    encryption: data-with-symmetric-shared-key
+    owner: Lab Owner
+    confidentiality: confidential
+    integrity: critical
+    availability: important
+    justification_cia_rating: "Credential store contains password hashes and role data."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: false
+    data_assets_processed: []
+    data_assets_stored:
+      - auth-user-accounts
+    data_formats_accepted:
+      - json
+    communication_links: {}
+
+trust_boundaries:
+
+  Internet:
+    id: auth-internet
+    description: "Untrusted network containing the browser."
+    type: network-dedicated-hoster
+    tags: []
+    technical_assets_inside:
+      - auth-user-browser
+    trust_boundaries_nested:
+      - auth-container-network
+
+  Container Network:
+    id: auth-container-network
+    description: "Container network with Juice Shop authentication components."
+    type: network-dedicated-hoster
+    tags: []
+    technical_assets_inside:
+      - login-endpoint
+      - token-service
+      - authz-check
+      - admin-endpoint
+      - credential-store
+    trust_boundaries_nested: []
+
+shared_runtimes:
+
+  Juice Shop Container:
+    id: juice-shop-container
+    description: "Shared Juice Shop container runtime for auth components."
+    tags: ["docker"]
+    technical_assets_running:
+      - login-endpoint
+      - token-service
+      - authz-check
+      - admin-endpoint
+      - credential-store
+
+individual_risk_categories: {}
+risk_tracking: {}
diff --git a/labs/lab2/threagile-model-secure.yaml b/labs/lab2/threagile-model-secure.yaml
new file mode 100644
index 000000000..c38f3730b
--- /dev/null
+++ b/labs/lab2/threagile-model-secure.yaml
@@ -0,0 +1,401 @@
+threagile_version: 1.0.0
+
+title: OWASP Juice Shop Threat Model
+date: 2025-09-18
+
+author:
+  name: Student Name
+  homepage: https://example.edu
+
+management_summary_comment: >
+  Threat model for a local OWASP Juice Shop setup. Users access the app  
+  either directly via HTTP on port 3000 or through an optional reverse proxy that  
+  terminates TLS and adds security headers. The app runs in a container  
+  and writes data to a host-mounted volume (for database, uploads, logs).  
+  Optional outbound notifications (e.g., a challenge-solution WebHook) can be configured for integrations.
+
+business_criticality: important
+
+business_overview:
+  description: >
+    Training environment for DevSecOps. This model covers a deliberately vulnerable  
+    web application (OWASP Juice Shop) running locally in a Docker container. The focus is on a minimal architecture, STRIDE threat analysis, and actionable mitigations for the identified risks.
+
+  images:
+
+technical_overview:
+  description: >
+    A user’s web browser connects to the Juice Shop application (Node.js/Express server) either directly on **localhost:3000** (HTTP) or via a **reverse proxy** on ports 80/443 (with HTTPS). The Juice Shop server may issue outbound requests to external services (e.g., a configured **WebHook** for solved challenge notifications). All application data (the SQLite database, file uploads, logs) is stored on the host’s filesystem via a mounted volume. Key trust boundaries include the **Internet** (user & external services) → **Host** (local machine/VM) → **Container Network** (isolated app container).
+  images: []
+
+questions:
+  Do you expose port 3000 beyond localhost?: ""
+  Do you use a reverse proxy with TLS and security headers?: ""
+  Are any outbound integrations (webhooks) configured?: ""
+  Is any sensitive data stored in logs or files?: ""
+
+abuse_cases:
+  Credential Stuffing / Brute Force: >
+    Attackers attempt repeated login attempts to guess credentials or exhaust system resources.
+  Stored XSS via Product Reviews: >
+    Malicious scripts are inserted into product reviews, getting stored and executed in other users’ browsers.
+  SSRF via Outbound Requests: >
+    Server-side requests (e.g. profile image URL fetch or WebHook callback) are abused to access internal network resources.
+
+security_requirements:
+  TLS in transit: Enforce HTTPS for user traffic via a TLS-terminating reverse proxy with strong ciphers and certificate management.
+  AuthZ on sensitive routes: Implement strict server-side authorization checks (role/permission) on admin or sensitive functionalities.
+  Rate limiting & lockouts: Apply rate limiting and account lockout policies to mitigate brute-force and automated attacks on authentication and expensive operations.
+  Secure headers: Add security headers (HSTS, CSP, X-Frame-Options, X-Content-Type-Options, etc.) at the proxy or app to mitigate client-side attacks.
+  Secrets management: Protect secret keys and credentials (JWT signing keys, OAuth client secrets) – keep them out of code repos and avoid logging them.
+
+tags_available:
+  - docker
+  - nodejs
+  - pii
+  - auth
+  - tokens
+  - logs
+  - public
+  - actor
+  - user
+  - optional
+  - proxy
+  - app
+  - storage
+  - volume
+  - saas
+  - webhook
+  - primary
+  - direct
+  - egress
+
+data_assets:
+
+  User Accounts:
+    id: user-accounts
+    description: "User profile data, credential hashes, emails."
+    usage: business
+    tags: ["pii", "auth"]
+    origin: user-supplied
+    owner: Lab Owner
+    quantity: many
+    confidentiality: confidential
+    integrity: critical
+    availability: important
+    justification_cia_rating: >
+      Contains personal identifiers and authentication data. High confidentiality is required to protect user privacy, and integrity is critical to prevent account takeovers.
+
+  Orders:
+    id: orders
+    description: "Order history, addresses, and payment metadata (no raw card numbers)."
+    usage: business
+    tags: ["pii"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: confidential
+    integrity: important
+    availability: important
+    justification_cia_rating: >
+      Contains users’ personal data and business transaction records. Integrity and confidentiality are important to prevent fraud or privacy breaches.
+
+  Product Catalog:
+    id: product-catalog
+    description: "Product information (names, descriptions, prices) available to all users."
+    usage: business
+    tags: ["public"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: public
+    integrity: important
+    availability: important
+    justification_cia_rating: >
+      Product data is intended to be public, but its integrity is important (to avoid defacement or price manipulation that could mislead users).
+
+  Tokens & Sessions:
+    id: tokens-sessions
+    description: "Session identifiers, JWTs for authenticated sessions, CSRF tokens."
+    usage: business
+    tags: ["auth", "tokens"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: confidential
+    integrity: important
+    availability: important
+    justification_cia_rating: >
+      If session tokens are compromised, attackers can hijack user sessions. They must be kept confidential and intact; availability is less critical (tokens can be reissued).
+
+  Logs:
+    id: logs
+    description: "Application and access logs (may inadvertently contain PII or secrets)."
+    usage: devops
+    tags: ["logs"]
+    origin: application
+    owner: Lab Owner
+    quantity: many
+    confidentiality: internal
+    integrity: important
+    availability: important
+    justification_cia_rating: >
+      Logs are for internal use (troubleshooting, monitoring). They should not be exposed publicly, and sensitive data should be sanitized to protect confidentiality.
+
+technical_assets:
+
+  User Browser:
+    id: user-browser
+    description: "End-user web browser (client)."
+    type: external-entity
+    usage: business
+    used_as_client_by_human: true
+    out_of_scope: false
+    justification_out_of_scope:
+    size: system
+    technology: browser
+    tags: ["actor", "user"]
+    internet: true
+    machine: virtual
+    encryption: none
+    owner: External User
+    confidentiality: public
+    integrity: operational
+    availability: operational
+    justification_cia_rating: "Client controlled by end user (potentially an attacker)."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: false
+    data_assets_processed: []
+    data_assets_stored: []
+    data_formats_accepted:
+      - json
+    communication_links:
+      To Reverse Proxy (preferred):
+        target: reverse-proxy
+        description: "User browser to reverse proxy (HTTPS on 443)."
+        protocol: https
+        authentication: session-id
+        authorization: enduser-identity-propagation
+        tags: ["primary"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - tokens-sessions
+        data_assets_received:
+          - product-catalog
+      Direct to App (no proxy):
+        target: juice-shop
+        description: "Direct browser access to app (HTTPS on 3000)."
+        protocol: https
+        authentication: session-id
+        authorization: enduser-identity-propagation
+        tags: ["direct"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - tokens-sessions
+        data_assets_received:
+          - product-catalog
+
+  Reverse Proxy:
+    id: reverse-proxy
+    description: "Optional reverse proxy (e.g., Nginx) for TLS termination and adding security headers."
+    type: process
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: application
+    technology: reverse-proxy
+    tags: ["optional", "proxy"]
+    internet: false
+    machine: virtual
+    encryption: transparent
+    owner: Lab Owner
+    confidentiality: internal
+    integrity: important
+    availability: important
+    justification_cia_rating: "Not exposed to internet directly; improves security of inbound traffic."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: false
+    data_assets_processed:
+      - product-catalog
+      - tokens-sessions
+    data_assets_stored: []
+    data_formats_accepted:
+      - json
+    communication_links:
+      To App:
+        target: juice-shop
+        description: "Proxy forwarding to app (HTTPS on 3000 internally)."
+        protocol: https
+        authentication: client-certificate
+        authorization: technical-user
+        tags: []
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - tokens-sessions
+        data_assets_received:
+          - product-catalog
+
+  Juice Shop Application:
+    id: juice-shop
+    description: "OWASP Juice Shop server (Node.js/Express, v19.0.0)."
+    type: process
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: application
+    technology: web-server
+    tags: ["app", "nodejs"]
+    internet: false
+    machine: container
+    encryption: data-with-symmetric-shared-key
+    owner: Lab Owner
+    confidentiality: internal
+    integrity: important
+    availability: important
+    justification_cia_rating: "In-scope web application (contains all business logic and vulnerabilities by design)."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: true
+    data_assets_processed:
+      - user-accounts
+      - orders
+      - product-catalog
+      - tokens-sessions
+    data_assets_stored:
+      - logs
+    data_formats_accepted:
+      - json
+    communication_links:
+      To Challenge WebHook:
+        target: webhook-endpoint
+        description: "Optional outbound callback (HTTP POST) to external WebHook when a challenge is solved."
+        protocol: https
+        authentication: none
+        authorization: none
+        tags: ["egress"]
+        vpn: false
+        ip_filtered: false
+        readonly: false
+        usage: business
+        data_assets_sent:
+          - orders
+
+  Persistent Storage:
+    id: persistent-storage
+    description: "Host-mounted volume for database, file uploads, and logs."
+    type: datastore
+    usage: devops
+    used_as_client_by_human: false
+    out_of_scope: false
+    justification_out_of_scope:
+    size: component
+    technology: file-server
+    tags: ["storage", "volume"]
+    internet: false
+    machine: virtual
+    encryption: data-with-symmetric-shared-key
+    owner: Lab Owner
+    confidentiality: internal
+    integrity: important
+    availability: important
+    justification_cia_rating: "Local disk storage for the container – not directly exposed, but if compromised it contains sensitive data (database and logs)."
+    multi_tenant: false
+    redundant: false
+    custom_developed_parts: false
+    data_assets_processed: []
+    data_assets_stored:
+      - logs
+      - user-accounts
+      - orders
+      - product-catalog
+    data_formats_accepted:
+      - file
+    communication_links: {}
+
+  Webhook Endpoint:
+    id: webhook-endpoint
+    description: "External WebHook service (3rd-party, if configured for integrations)."
+    type: external-entity
+    usage: business
+    used_as_client_by_human: false
+    out_of_scope: true
+    justification_out_of_scope: "Third-party service to receive notifications (not under our control)."
+    size: system
+    technology: web-service-rest
+    tags: ["saas", "webhook"]
+    internet: true
+    machine: virtual
+    encryption: none
+    owner: Third-Party
+    confidentiality: internal
+    integrity: operational
+    availability: operational
+    justification_cia_rating: "External service that receives data (like order or challenge info). Treated as a trusted integration point but could be abused if misconfigured."
+    multi_tenant: true
+    redundant: true
+    custom_developed_parts: false
+    data_assets_processed:
+      - orders
+    data_assets_stored: []
+    data_formats_accepted:
+      - json
+    communication_links: {}
+
+trust_boundaries:
+
+  Internet:
+    id: internet
+    description: "Untrusted public network (Internet)."
+    type: network-dedicated-hoster
+    tags: []
+    technical_assets_inside:
+      - user-browser
+      - webhook-endpoint
+    trust_boundaries_nested:
+      - host
+
+  Host:
+    id: host
+    description: "Local host machine / VM running the Docker environment."
+    type: network-dedicated-hoster
+    tags: []
+    technical_assets_inside:
+      - reverse-proxy
+      - persistent-storage
+    trust_boundaries_nested:
+      - container-network
+
+  Container Network:
+    id: container-network
+    description: "Docker container network (isolated internal network for containers)."
+    type: network-dedicated-hoster
+    tags: []
+    technical_assets_inside:
+      - juice-shop
+    trust_boundaries_nested: []
+
+shared_runtimes:
+
+  Docker Host:
+    id: docker-host
+    description: "Docker Engine and default bridge network on the host."
+    tags: ["docker"]
+    technical_assets_running:
+      - juice-shop
+
+individual_risk_categories: {}
+
+risk_tracking: {}
diff --git a/labs/lab2/threagile-model.yaml b/labs/lab2/threagile-model.yaml
index 6d7ca4e76..89a4ec7e6 100644
--- a/labs/lab2/threagile-model.yaml
+++ b/labs/lab2/threagile-model.yaml
@@ -14,7 +14,7 @@ management_summary_comment: >
   and writes data to a host-mounted volume (for database, uploads, logs).  
   Optional outbound notifications (e.g., a challenge-solution WebHook) can be configured for integrations.
 
-business_criticality: important  # archive, operational, important, critical, mission-critical
+business_criticality: important
 
 business_overview:
   description: >
@@ -22,7 +22,6 @@ business_overview:
     web application (OWASP Juice Shop) running locally in a Docker container. The focus is on a minimal architecture, STRIDE threat analysis, and actionable mitigations for the identified risks.
 
   images:
-    # - dfd.png: Data Flow Diagram (if exported from the tool)
 
 technical_overview:
   description: >
@@ -51,10 +50,8 @@ security_requirements:
   Secrets management: Protect secret keys and credentials (JWT signing keys, OAuth client secrets) – keep them out of code repos and avoid logging them.
 
 tags_available:
-  # Relevant technologies and environment tags
   - docker
   - nodejs
-  # Data and asset tags
   - pii
   - auth
   - tokens
@@ -69,14 +66,10 @@ tags_available:
   - volume
   - saas
   - webhook
-  # Communication tags
   - primary
   - direct
   - egress
 
-# =========================
-# DATA ASSETS
-# =========================
 data_assets:
 
   User Accounts:
@@ -149,9 +142,6 @@ data_assets:
     justification_cia_rating: >
       Logs are for internal use (troubleshooting, monitoring). They should not be exposed publicly, and sensitive data should be sanitized to protect confidentiality.
 
-# =========================
-# TECHNICAL ASSETS
-# =========================
 technical_assets:
 
   User Browser:
@@ -364,9 +354,6 @@ technical_assets:
       - json
     communication_links: {}
 
-# =========================
-# TRUST BOUNDARIES
-# =========================
 trust_boundaries:
 
   Internet:
@@ -400,9 +387,6 @@ trust_boundaries:
       - juice-shop
     trust_boundaries_nested: []
 
-# =========================
-# SHARED RUNTIMES
-# =========================
 shared_runtimes:
 
   Docker Host:
@@ -411,19 +395,7 @@ shared_runtimes:
     tags: ["docker"]
     technical_assets_running:
       - juice-shop
-      # If the reverse proxy is containerized, include it:
-      # - reverse-proxy
 
-# =========================
-# INDIVIDUAL RISK CATEGORIES (optional)
-# =========================
 individual_risk_categories: {}
 
-# =========================
-# RISK TRACKING (optional)
-# =========================
 risk_tracking: {}
-
-# (Optional diagram layout tweaks can be added here)
-#diagram_tweak_edge_layout: spline
-#diagram_tweak_layout_left_to_right: true
diff --git a/submissions/lab2.md b/submissions/lab2.md
new file mode 100644
index 000000000..3973f822f
--- /dev/null
+++ b/submissions/lab2.md
@@ -0,0 +1,87 @@
+# Lab 2 Submission
+
+## Task 1
+
+### Baseline risk counts
+
+Threagile baseline-модель была запущена для `labs/lab2/threagile-model.yaml`. Всего получилось **23 риска**.
+
+| Severity | Count |
+|---|---:|
+| critical | 0 |
+| high | 0 |
+| elevated | 4 |
+| medium | 14 |
+| low | 5 |
+
+### Top five risks
+
+| # | Severity | Rule ID | Asset | STRIDE | Почему это относится к STRIDE |
+|---:|---|---|---|---|---|
+| 1 | elevated | `unencrypted-communication` | `user-browser` | I — Information Disclosure | Прямой HTTP-доступ к приложению передает session-id/token без шифрования, поэтому их можно перехватить. |
+| 2 | elevated | `unencrypted-communication` | `reverse-proxy` | I — Information Disclosure | Связь от reverse proxy до приложения тоже идет без шифрования, и внутренний трафик с токенами может быть раскрыт. |
+| 3 | elevated | `missing-authentication` | `juice-shop` | S — Spoofing | Если reverse proxy не аутентифицируется перед приложением, другой компонент может притвориться доверенным proxy. |
+| 4 | elevated | `cross-site-scripting` | `juice-shop` | T — Tampering | XSS позволяет внедрить и выполнить чужой скрипт в браузере пользователя, то есть изменить поведение страницы. |
+| 5 | medium | `missing-build-infrastructure` | `juice-shop` | T — Tampering | Без описанного защищенного build pipeline сложнее контролировать, что в контейнер попадает именно ожидаемый код. |
+
+### Trust boundary crossing
+
+Важная стрелка на `data-flow-diagram.png` — **`Direct to App (no proxy)` от `User Browser` к `Juice Shop Application`**. Она пересекает границу доверия от `Internet` к `Container Network` через `Host`, то есть идет от недоверенного клиента к приложению. Для атакующего эта стрелка интересна, потому что по ней передаются данные сессии, а в baseline она использует `http`, поэтому перехват или подмена трафика становится намного проще.
+
+## Task 2
+
+### Secure variant risk diff
+
+В secure-варианте я изменил модель `labs/lab2/threagile-model-secure.yaml`: перевел оба входящих канала к приложению на `https`, добавил `client-certificate` и `technical-user` для связи reverse proxy с приложением, а также включил шифрование at rest для приложения и persistent storage через `data-with-symmetric-shared-key`.
+
+| Severity | Baseline | Secure | Delta |
+|---|---:|---:|---:|
+| critical | 0 | 0 | 0 |
+| high | 0 | 0 | 0 |
+| elevated | 4 | 1 | -3 |
+| medium | 14 | 12 | -2 |
+| low | 5 | 5 | 0 |
+| **Total** | **23** | **18** | **-5** |
+
+### Removed rule IDs
+
+| Removed rule ID | Что изменилось в YAML | Почему правило исчезло |
+|---|---|---|
+| `unencrypted-communication` | `protocol: http` был заменен на `protocol: https` для `Direct to App (no proxy)` и `To App`. | Threagile больше не видит clear text traffic на входящих связях к приложению. |
+| `missing-authentication` | Для `Reverse Proxy -> Juice Shop Application` поставлено `authentication: client-certificate`. | Внутренняя связь теперь явно показывает, как proxy аутентифицируется перед приложением. |
+| `unencrypted-asset` | У `Juice Shop Application` и `Persistent Storage` поставлено `encryption: data-with-symmetric-shared-key`. | Активы больше не описаны как хранящие данные без шифрования. |
+
+### Rules that still fire
+
+| Rule ID | Почему осталось |
+|---|---|
+| `cross-site-scripting` | Шифрование трафика и диска не исправляет уязвимости в обработке пользовательского ввода и выводе HTML/JavaScript. Тут нужны исправления в коде, CSP и валидация/экранирование. |
+| `server-side-request-forgery` | Модель все еще содержит server-side обращения: приложение может ходить к WebHook, а reverse proxy — к приложению. Чтобы закрыть SSRF, нужны allowlist, egress filtering и безопасная обработка URL, а не только смена `protocol`. |
+
+После hardening количество рисков упало с 23 до 18, то есть примерно на пятую часть, но не до нуля. Остались в основном риски уровня приложения и процесса разработки: XSS, SSRF, CSRF, отсутствие WAF, отсутствие vault и build infrastructure. Такие риски нельзя полностью закрыть одной правкой YAML, потому что модель только описывает архитектуру, а не исправляет код Juice Shop и не добавляет реальные защитные сервисы. Например, **XSS в Juice Shop** никакой YAML-правкой не закрыть: нужно менять код приложения, ставить Content Security Policy и проверять пользовательский ввод.
+
+## Bonus
+
+### Auth flow risk counts
+
+Для bonus я сделал отдельную небольшую модель `labs/lab2/threagile-model-auth.yaml` из stub-модели. В ней есть browser, login endpoint, token service, authorization check, admin endpoint и credential store; также отдельно описан data asset `JWT Signing Key`.
+
+Всего получилось **34 риска**.
+
+| Severity | Count |
+|---|---:|
+| critical | 0 |
+| high | 0 |
+| elevated | 5 |
+| medium | 15 |
+| low | 14 |
+
+### Auth-specific risks
+
+| Rule ID | STRIDE | Что показала модель | Mitigation |
+|---|---|---|---|
+| `sql-nosql-injection` | T — Tampering | Login endpoint проверяет credentials через credential store, поэтому SQL/NoSQL injection может изменить логику проверки логина. | Использовать parameterized queries/ORM, валидацию ввода и отдельные тесты на injection в login flow. |
+| `missing-authentication-second-factor` | S — Spoofing | Для входа и вызова admin endpoint есть пароль или token, но нет второго фактора. | Добавить MFA для админов и рискованных операций. |
+| `unguarded-access-from-internet` | E — Elevation of Privilege | Admin endpoint достижим из browser-модели, поэтому важно, чтобы доступ реально проходил через authorization check. | Ограничить прямой доступ к admin endpoint, проверять роль на сервере и покрыть это тестами. |
+
+Feature-level модель показала детали, которых почти не видно в общей architecture-level модели: отдельно появились JWT signing key, token service и authorization check. Из-за этого стало понятнее, где именно может сломаться login/admin flow: при проверке credentials, выпуске JWT или проверке прав администратора.

From 41767f42104f679faa72634884935bc127d1130b Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Sun, 20 Sep 2026 14:48:50 +0300
Subject: [PATCH 03/12] feat(lab3): signed commits and gitleaks pre-commit hook

---
 .pre-commit-config.yaml |  12 +++
 submissions/lab3.md     | 202 ++++++++++++++++++++++++++++++++++++++++
 2 files changed, 214 insertions(+)
 create mode 100644 .pre-commit-config.yaml
 create mode 100644 submissions/lab3.md

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
new file mode 100644
index 000000000..bef15f207
--- /dev/null
+++ b/.pre-commit-config.yaml
@@ -0,0 +1,12 @@
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: detect-private-key
+        exclude: ^labs/lab6/vulnerable-iac/ansible/configure\.yml$
+      - id: check-added-large-files
diff --git a/submissions/lab3.md b/submissions/lab3.md
new file mode 100644
index 000000000..97440070b
--- /dev/null
+++ b/submissions/lab3.md
@@ -0,0 +1,202 @@
+# Lab 3 Submission — Secure Git
+
+## Task 1
+
+### SSH signing configuration
+
+I created a new dedicated SSH key `~/.ssh/github_shnupel_signing.pub` for Git commit signing. The key is intended for the GitHub account `shnupel` and uses the email `ufamail.com2@gmail.com`.
+
+Public key fingerprint:
+
+```text
+SHA256:8Cc9K1L4nIGVHaGxeJjALHhFS3dpHwc81SoOPtMICZY
+```
+
+```text
+$ git config --global --get gpg.format
+ssh
+
+$ git config --global --get user.signingkey
+/Users/pavel/.ssh/github_shnupel_signing.pub
+
+$ git config --global --get commit.gpgsign
+true
+
+$ git config --global --get tag.gpgsign
+true
+```
+
+I also configured `gpg.ssh.allowedSignersFile` as `~/.config/git/allowed_signers`. This file contains my email, the `git` namespace, and the complete SSH public key. It allows Git to verify the signature locally without a network connection.
+
+The signed commit used for this submission is:
+
+```text
+The final signed commit output will be added after the rewritten history is pushed.
+```
+
+A signed commit makes the author claim stronger. Without signing, somebody can set my name and email in the Git configuration and create a commit that looks like it came from me. With SSH signing, GitHub can check that the commit was signed by the registered key and show the **Verified** badge. The badge does not prove that the code is safe, but it gives evidence about which key created the commit and helps with repudiation investigations.
+
+GitHub commit link: to be added after the rewritten branch is pushed.
+
+PR creation link: https://github.com/Shnupel/DevSecOps-Intro/pull/new/feature/lab3
+
+## Task 2
+
+### Pre-commit configuration
+
+I created `.pre-commit-config.yaml` in the repository root:
+
+```yaml
+repos:
+  - repo: https://github.com/gitleaks/gitleaks
+    rev: v8.30.1
+    hooks:
+      - id: gitleaks
+
+  - repo: https://github.com/pre-commit/pre-commit-hooks
+    rev: v5.0.0
+    hooks:
+      - id: detect-private-key
+        exclude: ^labs/lab6/vulnerable-iac/ansible/configure\.yml$
+      - id: check-added-large-files
+```
+
+`v8.30.1` is a real gitleaks 8.x release. The other repository provides checks for private keys and unexpectedly large files. The private-key check has one narrow exclusion because the Lab 6 file is an intentional vulnerable training fixture. It contains a fake private-key block for demonstrating an infrastructure security issue. The exclusion is only for this exact path; it does not disable the check for normal files.
+
+Installed tool versions were:
+
+```text
+pre-commit 4.6.2
+gitleaks 8.30.1
+git-filter-repo a40bce548d2c
+```
+
+The complete scan passed after adding the narrow fixture exclusion:
+
+```text
+Detect hardcoded secrets.................................................Passed
+detect private key.......................................................Passed
+check for added large files..............................................Passed
+```
+
+### Blocked fake secret commit
+
+I created the fake token from the task in `submissions/leak-attempt.txt` and tried to commit it. The commit was rejected with exit status `1`:
+
+```text
+Detect hardcoded secrets.................................................Failed
+- hook id: gitleaks
+- exit code: 1
+
+Finding:     GH_PAT=REDACTED
+Secret:      REDACTED
+RuleID:      github-pat
+Entropy:     4.143943
+File:        submissions/leak-attempt.txt
+Line:        1
+Fingerprint: submissions/leak-attempt.txt:github-pat:1
+
+2:09PM INF 0 commits scanned.
+2:09PM INF scanned ~48 bytes (48 bytes) in 20.4ms
+2:09PM WRN leaks found: 1
+
+detect private key.......................................................Passed
+check for added large files..............................................Passed
+
+--- commit exit status ---
+1
+--- last commit ---
+f667747 Merge pull request #2 from Shnupel/lab2
+```
+
+The last commit stayed the same, so the secret commit was not created. I then removed the staged test file and the working-tree file.
+
+### Tuning options
+
+An `[allowlist]` entry in `.gitleaks.toml` is a rule exception for selected values, files, paths, or regular expressions. It can be useful for a safe example token that is confirmed to be fake, but it becomes unsafe if the value is copied into a real environment or if the rule is too broad and hides real credentials.
+
+A path exclusion for `docs/` tells gitleaks not to scan every file in that directory. It can reduce false positives in documentation, but it becomes unsafe when documentation can contain copied configuration or real credentials, because a real secret in `docs/` will not be detected. A narrow allowlist is usually safer than excluding a whole directory.
+
+## Bonus
+
+### Sandbox before rewriting
+
+I created a separate throwaway repository in `/tmp/lab3-bonus` and planted the same fake GitHub token in `config.txt` and `README.md`.
+
+The history before rewriting was:
+
+```text
+e67e2d3 docs: usage notes
+3e5b01d feat: empty log
+4759713 feat: add config
+10f7b7e init
+```
+
+The token count in the patch history was:
+
+```text
+$ git log -p | grep -c 'ghp_AAAA'
+2
+```
+
+### filter-repo refusal and rewrite
+
+I created the replacement file:
+
+```text
+<the planted fake ghp token from the task>==>[REDACTED]
+```
+
+The first command was:
+
+```text
+$ git filter-repo --replace-text /tmp/replace.txt
+Aborting: Refusing to destructively overwrite repo history since
+this does not look like a fresh clone.
+  (expected at most one entry in the reflog for HEAD)
+Please operate on a fresh clone instead.  If you want to proceed
+anyway, use --force.
+```
+
+The sandbox was newly initialized, but it already had several local commits and reflog entries. I followed the message because this was a throwaway repository and ran:
+
+```text
+git filter-repo --force --replace-text /tmp/replace.txt
+```
+
+The output said:
+
+```text
+Parsed 4 commits
+HEAD is now at 85ab8d0 docs: usage notes
+
+New history written in 0.03 seconds; now repacking/cleaning...
+Repacking your repo and cleaning out old unneeded objects
+Completely finished after 0.12 seconds.
+```
+
+The rewritten history was:
+
+```text
+85ab8d0 docs: usage notes
+5170acb feat: empty log
+b830031 feat: add config
+7a9ef59 init
+```
+
+The final checks were:
+
+```text
+$ git log -p | grep -c 'ghp_AAAA'
+0
+
+$ git log -p | grep -c 'REDACTED'
+2
+```
+
+The commit hashes changed because the commit contents were changed. Rewriting history is only the cleanup step. The incident ends by **rotating or revoking the leaked credential** and then creating a new credential. The old token may already be copied by another person or stored in a remote, cache, fork, or backup, so deleting it from the visible Git history is not enough.
+
+Two things surprised me:
+
+1. `git filter-repo` refused the first run even though I had just created the sandbox. It checks the reflog and requires a fresh-clone-like repository unless `--force` is used.
+2. gitleaks replaced the detected token with `REDACTED` in its output. This is useful because the scanner reports the rule and file without printing the complete secret.

From 675cb550a300f36810fd05d7bdf6890538108957 Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Sun, 20 Sep 2026 14:50:52 +0300
Subject: [PATCH 04/12] docs(lab3): add rewritten signature evidence

---
 submissions/lab3.md | 9 +++++++--
 1 file changed, 7 insertions(+), 2 deletions(-)

diff --git a/submissions/lab3.md b/submissions/lab3.md
index 97440070b..b28ad0750 100644
--- a/submissions/lab3.md
+++ b/submissions/lab3.md
@@ -31,12 +31,17 @@ I also configured `gpg.ssh.allowedSignersFile` as `~/.config/git/allowed_signers
 The signed commit used for this submission is:
 
 ```text
-The final signed commit output will be added after the rewritten history is pushed.
+commit 41767f42104f679faa72634884935bc127d1130b
+Good "git" signature for ufamail.com2@gmail.com with ED25519 key SHA256:<redacted fingerprint>
+Author: shnupel <ufamail.com2@gmail.com>
+Date:   Sun Sep 20 14:48:50 2026 +0300
+
+    feat(lab3): signed commits and gitleaks pre-commit hook
 ```
 
 A signed commit makes the author claim stronger. Without signing, somebody can set my name and email in the Git configuration and create a commit that looks like it came from me. With SSH signing, GitHub can check that the commit was signed by the registered key and show the **Verified** badge. The badge does not prove that the code is safe, but it gives evidence about which key created the commit and helps with repudiation investigations.
 
-GitHub commit link: to be added after the rewritten branch is pushed.
+GitHub commit link: https://github.com/Shnupel/DevSecOps-Intro/commit/41767f42104f679faa72634884935bc127d1130b
 
 PR creation link: https://github.com/Shnupel/DevSecOps-Intro/pull/new/feature/lab3
 

From 1575a885bb4f773ade0725ac04a1270b3c23b83d Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Sun, 20 Sep 2026 14:57:27 +0300
Subject: [PATCH 05/12] docs(lab3): simplify submission report

---
 submissions/lab3.md | 103 ++++++++++----------------------------------
 1 file changed, 23 insertions(+), 80 deletions(-)

diff --git a/submissions/lab3.md b/submissions/lab3.md
index b28ad0750..537b92f7c 100644
--- a/submissions/lab3.md
+++ b/submissions/lab3.md
@@ -2,15 +2,9 @@
 
 ## Task 1
 
-### SSH signing configuration
+### SSH commit signing
 
-I created a new dedicated SSH key `~/.ssh/github_shnupel_signing.pub` for Git commit signing. The key is intended for the GitHub account `shnupel` and uses the email `ufamail.com2@gmail.com`.
-
-Public key fingerprint:
-
-```text
-SHA256:8Cc9K1L4nIGVHaGxeJjALHhFS3dpHwc81SoOPtMICZY
-```
+Git was configured to use SSH signing with the new key and the requested account:
 
 ```text
 $ git config --global --get gpg.format
@@ -21,35 +15,25 @@ $ git config --global --get user.signingkey
 
 $ git config --global --get commit.gpgsign
 true
-
-$ git config --global --get tag.gpgsign
-true
 ```
 
-I also configured `gpg.ssh.allowedSignersFile` as `~/.config/git/allowed_signers`. This file contains my email, the `git` namespace, and the complete SSH public key. It allows Git to verify the signature locally without a network connection.
-
-The signed commit used for this submission is:
+The signed commit verification output was:
 
 ```text
 commit 41767f42104f679faa72634884935bc127d1130b
 Good "git" signature for ufamail.com2@gmail.com with ED25519 key SHA256:<redacted fingerprint>
 Author: shnupel <ufamail.com2@gmail.com>
-Date:   Sun Sep 20 14:48:50 2026 +0300
 
     feat(lab3): signed commits and gitleaks pre-commit hook
 ```
 
-A signed commit makes the author claim stronger. Without signing, somebody can set my name and email in the Git configuration and create a commit that looks like it came from me. With SSH signing, GitHub can check that the commit was signed by the registered key and show the **Verified** badge. The badge does not prove that the code is safe, but it gives evidence about which key created the commit and helps with repudiation investigations.
-
-GitHub commit link: https://github.com/Shnupel/DevSecOps-Intro/commit/41767f42104f679faa72634884935bc127d1130b
+Without a signature, another person can use my name and email in Git and create a commit that looks like it was written by me. SSH signing gives GitHub cryptographic evidence that the commit was created with my signing key, so GitHub can show the **Verified** badge. This helps to investigate repudiation, although it does not prove that the code itself is safe.
 
-PR creation link: https://github.com/Shnupel/DevSecOps-Intro/pull/new/feature/lab3
+Commit link: https://github.com/Shnupel/DevSecOps-Intro/commit/41767f42104f679faa72634884935bc127d1130b
 
 ## Task 2
 
-### Pre-commit configuration
-
-I created `.pre-commit-config.yaml` in the repository root:
+### `.pre-commit-config.yaml`
 
 ```yaml
 repos:
@@ -66,17 +50,9 @@ repos:
       - id: check-added-large-files
 ```
 
-`v8.30.1` is a real gitleaks 8.x release. The other repository provides checks for private keys and unexpectedly large files. The private-key check has one narrow exclusion because the Lab 6 file is an intentional vulnerable training fixture. It contains a fake private-key block for demonstrating an infrastructure security issue. The exclusion is only for this exact path; it does not disable the check for normal files.
+The exclusion is only for the intentional fake private-key fixture in Lab 6. The other files are still checked by `detect-private-key`.
 
-Installed tool versions were:
-
-```text
-pre-commit 4.6.2
-gitleaks 8.30.1
-git-filter-repo a40bce548d2c
-```
-
-The complete scan passed after adding the narrow fixture exclusion:
+The full scan passed:
 
 ```text
 Detect hardcoded secrets.................................................Passed
@@ -84,9 +60,9 @@ detect private key.......................................................Passed
 check for added large files..............................................Passed
 ```
 
-### Blocked fake secret commit
+### Blocked secret commit
 
-I created the fake token from the task in `submissions/leak-attempt.txt` and tried to commit it. The commit was rejected with exit status `1`:
+The fake GitHub token was added to `submissions/leak-attempt.txt`. The commit was rejected with exit status `1`:
 
 ```text
 Detect hardcoded secrets.................................................Failed
@@ -96,17 +72,8 @@ Detect hardcoded secrets.................................................Failed
 Finding:     GH_PAT=REDACTED
 Secret:      REDACTED
 RuleID:      github-pat
-Entropy:     4.143943
 File:        submissions/leak-attempt.txt
 Line:        1
-Fingerprint: submissions/leak-attempt.txt:github-pat:1
-
-2:09PM INF 0 commits scanned.
-2:09PM INF scanned ~48 bytes (48 bytes) in 20.4ms
-2:09PM WRN leaks found: 1
-
-detect private key.......................................................Passed
-check for added large files..............................................Passed
 
 --- commit exit status ---
 1
@@ -114,21 +81,17 @@ check for added large files..............................................Passed
 f667747 Merge pull request #2 from Shnupel/lab2
 ```
 
-The last commit stayed the same, so the secret commit was not created. I then removed the staged test file and the working-tree file.
+The last commit did not change, which proves that the commit containing the secret was blocked. The test file was then removed.
 
-### Tuning options
+An `[allowlist]` entry in `.gitleaks.toml` is appropriate for a specific value that is confirmed to be fake. It becomes unsafe when the value becomes real or when the matching rule is too broad and hides real credentials.
 
-An `[allowlist]` entry in `.gitleaks.toml` is a rule exception for selected values, files, paths, or regular expressions. It can be useful for a safe example token that is confirmed to be fake, but it becomes unsafe if the value is copied into a real environment or if the rule is too broad and hides real credentials.
-
-A path exclusion for `docs/` tells gitleaks not to scan every file in that directory. It can reduce false positives in documentation, but it becomes unsafe when documentation can contain copied configuration or real credentials, because a real secret in `docs/` will not be detected. A narrow allowlist is usually safer than excluding a whole directory.
+A path exclusion for `docs/` disables scanning for the whole directory. It is unsafe when documentation can contain copied configuration or real credentials, because gitleaks will not detect them. A narrow allowlist is safer than excluding a whole directory.
 
 ## Bonus
 
-### Sandbox before rewriting
-
-I created a separate throwaway repository in `/tmp/lab3-bonus` and planted the same fake GitHub token in `config.txt` and `README.md`.
+### History before rewriting
 
-The history before rewriting was:
+The sandbox repository history before rewriting was:
 
 ```text
 e67e2d3 docs: usage notes
@@ -137,22 +100,16 @@ e67e2d3 docs: usage notes
 10f7b7e init
 ```
 
-The token count in the patch history was:
+The fake token appeared two times:
 
 ```text
 $ git log -p | grep -c 'ghp_AAAA'
 2
 ```
 
-### filter-repo refusal and rewrite
-
-I created the replacement file:
-
-```text
-<the planted fake ghp token from the task>==>[REDACTED]
-```
+### `git filter-repo`
 
-The first command was:
+The first command was refused:
 
 ```text
 $ git filter-repo --replace-text /tmp/replace.txt
@@ -163,24 +120,13 @@ Please operate on a fresh clone instead.  If you want to proceed
 anyway, use --force.
 ```
 
-The sandbox was newly initialized, but it already had several local commits and reflog entries. I followed the message because this was a throwaway repository and ran:
+Because this was a throwaway repository, I followed the instruction and ran:
 
 ```text
 git filter-repo --force --replace-text /tmp/replace.txt
 ```
 
-The output said:
-
-```text
-Parsed 4 commits
-HEAD is now at 85ab8d0 docs: usage notes
-
-New history written in 0.03 seconds; now repacking/cleaning...
-Repacking your repo and cleaning out old unneeded objects
-Completely finished after 0.12 seconds.
-```
-
-The rewritten history was:
+The history after rewriting was:
 
 ```text
 85ab8d0 docs: usage notes
@@ -189,7 +135,7 @@ b830031 feat: add config
 7a9ef59 init
 ```
 
-The final checks were:
+The final counts were:
 
 ```text
 $ git log -p | grep -c 'ghp_AAAA'
@@ -199,9 +145,6 @@ $ git log -p | grep -c 'REDACTED'
 2
 ```
 
-The commit hashes changed because the commit contents were changed. Rewriting history is only the cleanup step. The incident ends by **rotating or revoking the leaked credential** and then creating a new credential. The old token may already be copied by another person or stored in a remote, cache, fork, or backup, so deleting it from the visible Git history is not enough.
-
-Two things surprised me:
+Rewriting history is not enough to end the incident. The leaked credential must also be revoked or rotated, because it may already exist in clones, forks, backups, or other copies.
 
-1. `git filter-repo` refused the first run even though I had just created the sandbox. It checks the reflog and requires a fresh-clone-like repository unless `--force` is used.
-2. gitleaks replaced the detected token with `REDACTED` in its output. This is useful because the scanner reports the rule and file without printing the complete secret.
+Two surprises were that `git filter-repo` refused the first run even in a newly initialized sandbox, because it checks reflog entries, and that gitleaks redacted the detected secret in its output instead of printing the full value.

From 0a0d01f0c4026ac0fe906e4a6e0df8020253ec49 Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Sun, 20 Sep 2026 15:26:02 +0300
Subject: [PATCH 06/12] feat(lab4): juice shop sbom and scanner comparison

---
 .pre-commit-config.yaml               |     1 +
 labs/lab4/juice-shop-attestation.json | 92031 ++++++++++++++++++++++++
 labs/lab4/juice-shop.cdx.json         |     1 +
 submissions/lab4.md                   |   114 +
 4 files changed, 92147 insertions(+)
 create mode 100644 labs/lab4/juice-shop-attestation.json
 create mode 100644 labs/lab4/juice-shop.cdx.json
 create mode 100644 submissions/lab4.md

diff --git a/.pre-commit-config.yaml b/.pre-commit-config.yaml
index bef15f207..a7ac46f08 100644
--- a/.pre-commit-config.yaml
+++ b/.pre-commit-config.yaml
@@ -10,3 +10,4 @@ repos:
       - id: detect-private-key
         exclude: ^labs/lab6/vulnerable-iac/ansible/configure\.yml$
       - id: check-added-large-files
+        exclude: ^labs/lab4/(juice-shop\.cdx\.json|juice-shop-attestation\.json)$
diff --git a/labs/lab4/juice-shop-attestation.json b/labs/lab4/juice-shop-attestation.json
new file mode 100644
index 000000000..9ad9af6d5
--- /dev/null
+++ b/labs/lab4/juice-shop-attestation.json
@@ -0,0 +1,92031 @@
+{
+  "_type": "https://in-toto.io/Statement/v0.1",
+  "subject": [
+    {
+      "name": "bkimminich/juice-shop:v20.0.0",
+      "digest": {
+        "sha256": "fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0"
+      }
+    }
+  ],
+  "predicateType": "https://cyclonedx.org/bom",
+  "predicate": {
+    "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
+    "bomFormat": "CycloneDX",
+    "specVersion": "1.7",
+    "serialNumber": "urn:uuid:d0c3bc8c-59cd-404e-ac13-dd325a975583",
+    "version": 1,
+    "metadata": {
+      "timestamp": "2026-09-20T15:16:29+03:00",
+      "tools": {
+        "components": [
+          {
+            "type": "application",
+            "author": "anchore",
+            "name": "syft",
+            "version": "1.52.0"
+          }
+        ]
+      },
+      "component": {
+        "bom-ref": "9a5566eb61b934e9",
+        "type": "container",
+        "name": "bkimminich/juice-shop",
+        "version": "v20.0.0"
+      },
+      "properties": [
+        {
+          "name": "syft:image:labels:maintainer",
+          "value": "Bjoern Kimminich <bjoern.kimminich@owasp.org>"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.authors",
+          "value": "Bjoern Kimminich <bjoern.kimminich@owasp.org>"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.created",
+          "value": "”2026-05-12T21:09:09Z”"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.description",
+          "value": "Probably the most modern and sophisticated insecure web application"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.documentation",
+          "value": "https://help.owasp-juice.shop"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.licenses",
+          "value": "MIT"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.revision",
+          "value": "f356a09"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.source",
+          "value": "https://github.com/juice-shop/juice-shop"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.title",
+          "value": "OWASP Juice Shop"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.url",
+          "value": "https://owasp-juice.shop"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.vendor",
+          "value": "Open Worldwide Application Security Project"
+        },
+        {
+          "name": "syft:image:labels:org.opencontainers.image.version",
+          "value": "20.0.0"
+        }
+      ]
+    },
+    "components": [
+      {
+        "bom-ref": "pkg:npm/1to2@1.0.0?package-id=3cea2309a653e6ed",
+        "type": "library",
+        "author": "Benjamin Byholm <bbyholm@abo.fi> (https://github.com/kkoopa/), Mathias Küsel (https://github.com/mathiask88/)",
+        "name": "1to2",
+        "version": "1.0.0",
+        "description": "NAN 1 -> 2 Migration Script",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/1to2@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/nan.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:1to2:1to2:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/nan/tools/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40adraffy/ens-normalize@1.10.1?package-id=08449108469244be",
+        "type": "library",
+        "author": "raffy.eth <raffy@me.com> (http://raffy.antistupid.com)",
+        "name": "@adraffy/ens-normalize",
+        "version": "1.10.1",
+        "description": "Ethereum Name Service (ENS) Name Normalizer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40adraffy/ens-normalize@1.10.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/adraffy/ens-normalize.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/adraffy/ens-normalize.js#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:adraffy:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:adraffy:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@adraffy/ens-normalize/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40ai-sdk/gateway@3.0.114?package-id=58ba8f899e54409f",
+        "type": "library",
+        "name": "@ai-sdk/gateway",
+        "version": "3.0.114",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@ai-sdk\\/gateway:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40ai-sdk/gateway@3.0.114",
+        "externalReferences": [
+          {
+            "url": "https://github.com/vercel/ai",
+            "type": "distribution"
+          },
+          {
+            "url": "https://ai-sdk.dev/docs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/gateway:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/gateway:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/gateway:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@ai-sdk/gateway/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40ai-sdk/openai-compatible@2.0.47?package-id=7050206931a8a0d7",
+        "type": "library",
+        "name": "@ai-sdk/openai-compatible",
+        "version": "2.0.47",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@ai-sdk\\/openai-compatible:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40ai-sdk/openai-compatible@2.0.47",
+        "externalReferences": [
+          {
+            "url": "https://github.com/vercel/ai",
+            "type": "distribution"
+          },
+          {
+            "url": "https://ai-sdk.dev/docs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/openai-compatible:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/openai_compatible:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/openai_compatible:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/openai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/openai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/openai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/openai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@ai-sdk/openai-compatible/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40ai-sdk/provider@3.0.10?package-id=ddf033d1fcc3a4ce",
+        "type": "library",
+        "name": "@ai-sdk/provider",
+        "version": "3.0.10",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40ai-sdk/provider@3.0.10",
+        "externalReferences": [
+          {
+            "url": "https://github.com/vercel/ai",
+            "type": "distribution"
+          },
+          {
+            "url": "https://ai-sdk.dev/docs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@ai-sdk/provider/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40ai-sdk/provider-utils@4.0.27?package-id=f71eb29e81964317",
+        "type": "library",
+        "name": "@ai-sdk/provider-utils",
+        "version": "4.0.27",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@ai-sdk\\/provider-utils:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40ai-sdk/provider-utils@4.0.27",
+        "externalReferences": [
+          {
+            "url": "https://github.com/vercel/ai",
+            "type": "distribution"
+          },
+          {
+            "url": "https://ai-sdk.dev/docs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/provider-utils:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/provider_utils:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/provider_utils:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vercel:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@ai:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@ai-sdk/provider-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40babel/helper-string-parser@7.27.1?package-id=27b0de0facbfc672",
+        "type": "library",
+        "author": "The Babel Team (https://babel.dev/team)",
+        "name": "@babel/helper-string-parser",
+        "version": "7.27.1",
+        "description": "A utility package to parse strings",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40babel/helper-string-parser@7.27.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/babel/babel.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://babel.dev/docs/en/next/babel-helper-string-parser",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@babel/helper-string-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40babel/helper-validator-identifier@7.28.5?package-id=479dbd661d17b859",
+        "type": "library",
+        "author": "The Babel Team (https://babel.dev/team)",
+        "name": "@babel/helper-validator-identifier",
+        "version": "7.28.5",
+        "description": "Validate identifier/keywords name",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40babel/helper-validator-identifier@7.28.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/babel/babel.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@babel/helper-validator-identifier/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40babel/parser@7.29.3?package-id=f946fdff20133cb6",
+        "type": "library",
+        "author": "The Babel Team (https://babel.dev/team)",
+        "name": "@babel/parser",
+        "version": "7.29.3",
+        "description": "A JavaScript parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.29.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40babel/parser@7.29.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/babel/babel.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://babel.dev/docs/en/next/babel-parser",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:\\@babel\\/parser:7.29.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@babel/parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40babel/types@7.29.0?package-id=b6b729489b959534",
+        "type": "library",
+        "author": "The Babel Team (https://babel.dev/team)",
+        "name": "@babel/types",
+        "version": "7.29.0",
+        "description": "Babel Types is a Lodash-esque utility library for AST nodes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.29.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40babel/types@7.29.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/babel/babel.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://babel.dev/docs/en/next/babel-types",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:\\@babel\\/types:7.29.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@babel/types/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40colors/colors@1.6.0?package-id=2aaa7cc50004f91b",
+        "type": "library",
+        "author": "DABH, DABH (https://github.com/DABH)",
+        "name": "@colors/colors",
+        "version": "1.6.0",
+        "description": "get colors in your node.js console",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40colors/colors@1.6.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/DABH/colors.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DABH/colors.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40colors/colors@1.6.0?package-id=3b8ecc6044fe8e57",
+        "type": "library",
+        "author": "DABH, DABH (https://github.com/DABH)",
+        "name": "@colors/colors",
+        "version": "1.6.0",
+        "description": "get colors in your node.js console",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40colors/colors@1.6.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/DABH/colors.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DABH/colors.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40dabh/diagnostics@2.0.8?package-id=8402a3ee9b2da555",
+        "type": "library",
+        "author": "Arnout Kazemier, Martijn Swaagman (https://github.com/swaagie), Jarrett Cruger (https://github.com/jcrugzz), Sevastos (https://github.com/sevastos)",
+        "name": "@dabh/diagnostics",
+        "version": "2.0.8",
+        "description": "Tools for debugging your node.js modules and event loop",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@dabh\\/diagnostics:\\@dabh\\/diagnostics:2.0.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40dabh/diagnostics@2.0.8",
+        "externalReferences": [
+          {
+            "url": "git://github.com/DABH/diagnostics.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DABH/diagnostics",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DABH:\\@dabh\\/diagnostics:2.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@dabh/diagnostics/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40fontsource/roboto@5.2.10?package-id=f1e3cc681fc66fc0",
+        "type": "library",
+        "author": "Google Inc.",
+        "name": "@fontsource/roboto",
+        "version": "5.2.10",
+        "description": "Self-host the Roboto font in a neatly bundled NPM package.",
+        "licenses": [
+          {
+            "license": {
+              "id": "OFL-1.1"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@fontsource\\/roboto:\\@fontsource\\/roboto:5.2.10:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40fontsource/roboto@5.2.10",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/fontsource/font-files.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://fontsource.org/fonts/roboto",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@fontsource/roboto/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40gar/promisify@1.1.3?package-id=8e41d6aa1fe261a3",
+        "type": "library",
+        "author": "Gar <gar+npm@danger.computer>",
+        "name": "@gar/promisify",
+        "version": "1.1.3",
+        "description": "Promisify an entire class or object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40gar/promisify@1.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/wraithgar/gar-promisify.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wraithgar:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@gar/promisify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40isaacs/cliui@8.0.2?package-id=1b734807f495fb6f",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "@isaacs/cliui",
+        "version": "8.0.2",
+        "description": "easily create complex multi-column command-line-interfaces",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40isaacs/cliui@8.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@isaacs/cliui/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=0ab257647e45f4d4",
+        "type": "library",
+        "author": "Isaac Z. Schlueter",
+        "name": "@isaacs/fs-minipass",
+        "version": "4.0.1",
+        "description": "fs read and write streams based on minipass",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40isaacs/fs-minipass@4.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/fs-minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@isaacs/fs-minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40material/material-color-utilities@0.3.0?package-id=6720a0856054de8d",
+        "type": "library",
+        "author": "Material Eng",
+        "name": "@material/material-color-utilities",
+        "version": "0.3.0",
+        "description": "Algorithms and utilities that power the Material Design 3 (M3) color system, including choosing theme colors from images and creating tones of colors; all in a new color space.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@material\\/material-color-utilities:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40material/material-color-utilities@0.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/material-foundation/material-color-utilities.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/material-foundation/material-color-utilities/tree/main/typescript",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material-color-utilities:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material_color_utilities:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material_color_utilities:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material-color:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material-color:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material_color:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material_color:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material-foundation:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material-foundation:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@material\\/material:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@material/material-color-utilities/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40my-scope/package-a@0.0.0?package-id=e38f30a540597121",
+        "type": "library",
+        "name": "@my-scope/package-a",
+        "version": "0.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40my-scope/package-a@0.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my-scope\\/package-a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package_a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package_a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40my-scope/package-b@0.0.0?package-id=7c30bf5441790ef5",
+        "type": "library",
+        "name": "@my-scope/package-b",
+        "version": "0.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40my-scope/package-b@0.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my-scope\\/package-b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package_b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package_b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@my:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40noble/curves@1.2.0?package-id=2a40db3b54912cbf",
+        "type": "library",
+        "author": "Paul Miller (https://paulmillr.com)",
+        "name": "@noble/curves",
+        "version": "1.2.0",
+        "description": "Audited & minimal JS implementation of elliptic curve cryptography",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40noble/curves@1.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/paulmillr/noble-curves.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://paulmillr.com/noble/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:paulmillr:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@noble/curves/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40noble/hashes@1.3.2?package-id=46670510cb133f58",
+        "type": "library",
+        "author": "Paul Miller (https://paulmillr.com)",
+        "name": "@noble/hashes",
+        "version": "1.3.2",
+        "description": "Audited & minimal 0-dependency JS implementation of SHA2, SHA3, RIPEMD, BLAKE2/3, HMAC, HKDF, PBKDF2, Scrypt",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40noble/hashes@1.3.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/paulmillr/noble-hashes.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://paulmillr.com/noble/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:paulmillr:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@noble/hashes/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40noble/hashes@2.2.0?package-id=f3098e32ab08ad1a",
+        "type": "library",
+        "author": "Paul Miller (https://paulmillr.com)",
+        "name": "@noble/hashes",
+        "version": "2.2.0",
+        "description": "Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40noble/hashes@2.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/paulmillr/noble-hashes.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://paulmillr.com/noble/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/node_modules/@noble/hashes/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40npmcli/agent@3.0.0?package-id=114921a3f2bc9d12",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "@npmcli/agent",
+        "version": "3.0.0",
+        "description": "the http/https agent used by the npm cli",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40npmcli/agent@3.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/agent.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/agent#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@npmcli/agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40npmcli/fs@1.1.1?package-id=644572bbb1e01679",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "@npmcli/fs",
+        "version": "1.1.1",
+        "description": "filesystem utilities for the npm cli",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40npmcli/fs@1.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40npmcli/fs@4.0.0?package-id=2f7974422b4dc793",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "@npmcli/fs",
+        "version": "4.0.0",
+        "description": "filesystem utilities for the npm cli",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40npmcli/fs@4.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/fs.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@npmcli/fs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40npmcli/move-file@1.1.2?package-id=a988a9e98434d4e0",
+        "type": "library",
+        "name": "@npmcli/move-file",
+        "version": "1.1.2",
+        "description": "move a file (fork of move-file)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40npmcli/move-file@1.1.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/move-file",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@npmcli/move-file/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40opentelemetry/api@1.9.1?package-id=cec9eae229b431dd",
+        "type": "library",
+        "author": "OpenTelemetry Authors",
+        "name": "@opentelemetry/api",
+        "version": "1.9.1",
+        "description": "Public API for OpenTelemetry",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@opentelemetry\\/api:\\@opentelemetry\\/api:1.9.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40opentelemetry/api@1.9.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/open-telemetry/opentelemetry-js/tree/main/api",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:open-telemetry:\\@opentelemetry\\/api:1.9.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@opentelemetry/api/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40otplib/core@13.4.0?package-id=cbb29ecdd13a1687",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "@otplib/core",
+        "version": "13.4.0",
+        "description": "Core interfaces, types, and crypto abstraction for otplib",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@otplib\\/core:\\@otplib\\/core:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40otplib/core@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/core/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40otplib/hotp@13.4.0?package-id=9b8148ea6c71fed4",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "@otplib/hotp",
+        "version": "13.4.0",
+        "description": "RFC 4226 HOTP implementation for otplib",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@otplib\\/hotp:\\@otplib\\/hotp:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40otplib/hotp@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/hotp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40otplib/plugin-base32-scure@13.4.0?package-id=a47960048d5c6e0f",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "@otplib/plugin-base32-scure",
+        "version": "13.4.0",
+        "description": "Base32 plugin for otplib using @scure/base",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@otplib\\/plugin-base32-scure:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40otplib/plugin-base32-scure@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin-base32-scure:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_base32_scure:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_base32_scure:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin-base32:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin-base32:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_base32:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_base32:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/plugin-base32-scure/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40otplib/plugin-crypto-noble@13.4.0?package-id=4d1b6166fb37fae8",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "@otplib/plugin-crypto-noble",
+        "version": "13.4.0",
+        "description": "Pure JavaScript crypto implementation using noble-hashes for otplib",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@otplib\\/plugin-crypto-noble:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40otplib/plugin-crypto-noble@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin-crypto-noble:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto_noble:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto_noble:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40otplib/totp@13.4.0?package-id=a1c0314d0d8a9007",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "@otplib/totp",
+        "version": "13.4.0",
+        "description": "RFC 6238 TOTP implementation for otplib",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@otplib\\/totp:\\@otplib\\/totp:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40otplib/totp@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/totp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40otplib/uri@13.4.0?package-id=6133631980d96c3a",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "@otplib/uri",
+        "version": "13.4.0",
+        "description": "otpauth:// URI parsing and generation for otplib",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@otplib\\/uri:\\@otplib\\/uri:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40otplib/uri@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@otplib/uri/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=80ef1a2248d5a920",
+        "type": "library",
+        "name": "@pkgjs/parseargs",
+        "version": "0.11.0",
+        "description": "Polyfill of future proposal for `util.parseArgs()`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40pkgjs/parseargs@0.11.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pkgjs/parseargs#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@pkgjs/parseargs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40scarf/scarf@1.4.0?package-id=19e6077d1014f2df",
+        "type": "library",
+        "author": "Scarf Systems",
+        "name": "@scarf/scarf",
+        "version": "1.4.0",
+        "description": "Scarf is like Google Analytics for your npm packages. Gain insights into how your packages are installed and used, and by which companies.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@scarf\\/scarf:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40scarf/scarf@1.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/scarf-sh/scarf-js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/scarf-sh/scarf-js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:scarf-sh:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@scarf/scarf/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40scure/base@2.2.0?package-id=ee108a8614147fd3",
+        "type": "library",
+        "author": "Paul Miller (https://paulmillr.com)",
+        "name": "@scure/base",
+        "version": "2.2.0",
+        "description": "Secure, audited & 0-dep implementation of base64, bech32, base58, base32 & base16",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@scure\\/base:\\@scure\\/base:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40scure/base@2.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/paulmillr/scure-base.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://paulmillr.com/noble/#scure",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@scure/base/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40sindresorhus/is@0.7.0?package-id=a29ebe9c01a24b05",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "@sindresorhus/is",
+        "version": "0.7.0",
+        "description": "Type check values: `is.string('🦄') //=> true`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:0.7.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40sindresorhus/is@0.7.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@sindresorhus/is/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40so-ric/colorspace@1.1.6?package-id=17777e0ca19ea47c",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "@so-ric/colorspace",
+        "version": "1.1.6",
+        "description": "Generate HEX colors for a given namespace using color v5",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@so-ric\\/colorspace:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40so-ric/colorspace@1.1.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/so-ric/colorspace",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/so-ric/colorspace",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@so-ric\\/colorspace:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@so_ric\\/colorspace:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@so_ric\\/colorspace:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:so-ric:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:so-ric:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@so:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@so:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@so-ric/colorspace/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40standard-schema/spec@1.1.0?package-id=e5e6f6143a3e5536",
+        "type": "library",
+        "author": "Colin McDonnell",
+        "name": "@standard-schema/spec",
+        "version": "1.1.0",
+        "description": "A family of specs for interoperable TypeScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@standard-schema\\/spec:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40standard-schema/spec@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/standard-schema/standard-schema",
+            "type": "distribution"
+          },
+          {
+            "url": "https://standardschema.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@standard-schema\\/spec:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@standard_schema\\/spec:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@standard_schema\\/spec:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:standard-schema:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:standard-schema:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@standard:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@standard:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@standard-schema/spec/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40swc/helpers@0.3.17?package-id=079d0d4fdf762801",
+        "type": "library",
+        "author": "강동윤 <kdy1997.dev@gmail.com>",
+        "name": "@swc/helpers",
+        "version": "0.3.17",
+        "description": "External helpers for the swc project.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.3.17:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40swc/helpers@0.3.17",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/swc-project/swc.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://swc.rs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@swc/helpers/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40tokenizer/token@0.3.0?package-id=43352d2f6855caf1",
+        "type": "library",
+        "author": "Borewit (https://github.com/Borewit)",
+        "name": "@tokenizer/token",
+        "version": "0.3.0",
+        "description": "TypeScript definition for strtok3 token",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@tokenizer\\/token:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40tokenizer/token@0.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Borewit/tokenizer-token.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Borewit:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@tokenizer/token/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40tootallnate/once@1.1.2?package-id=eeeda4243db3c868",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "@tootallnate/once",
+        "version": "1.1.2",
+        "description": "Creates a Promise that waits for a single event",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40tootallnate/once@1.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/once.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@tootallnate/once/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/component-emitter@1.2.14?package-id=ae93160dfc27d07c",
+        "type": "library",
+        "author": "Peter Snider (https://github.com/psnider)",
+        "name": "@types/component-emitter",
+        "version": "1.2.14",
+        "description": "TypeScript definitions for component-emitter",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/component-emitter@1.2.14",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/component-emitter",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/component:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/component:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/component-emitter/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/cookie@0.4.1?package-id=1339467e13b5c752",
+        "type": "library",
+        "author": "Pine Mizune (https://github.com/pine), Piotr Błażejewicz (https://github.com/peterblazejewicz)",
+        "name": "@types/cookie",
+        "version": "0.4.1",
+        "description": "TypeScript definitions for cookie",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/cookie@0.4.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cookie",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/cookie:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/cookie/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/cors@2.8.19?package-id=bc4bb778990d4ea4",
+        "type": "library",
+        "author": "Alan Plum (https://github.com/pluma), Gaurav Sharma (https://github.com/gtpan77), Sebastian Beltran (https://github.com/bjohansebas)",
+        "name": "@types/cors",
+        "version": "2.8.19",
+        "description": "TypeScript definitions for cors",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/cors@2.8.19",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/cors:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/cors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/debug@4.1.13?package-id=b2c0dc194c1425e6",
+        "type": "library",
+        "author": "Seon-Wook Park (https://github.com/swook), Gal Talmor (https://github.com/galtalmor), John McLaughlin (https://github.com/zamb3zi), Brasten Sager (https://github.com/brasten), Nicolas Penin (https://github.com/npenin), Kristian Brünn (https://github.com/kristianmitk), Caleb Gregory (https://github.com/calebgregory)",
+        "name": "@types/debug",
+        "version": "4.1.13",
+        "description": "TypeScript definitions for debug",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/debug:4.1.13:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/debug@4.1.13",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/debug:\\@types\\/debug:4.1.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/ms@2.1.0?package-id=495a18008d72fd0f",
+        "type": "library",
+        "author": "Zhiyuan Wang (https://github.com/danny8002)",
+        "name": "@types/ms",
+        "version": "2.1.0",
+        "description": "TypeScript definitions for ms",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/ms@2.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ms",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/node@20.19.41?package-id=507abdbdc4dc5589",
+        "type": "library",
+        "author": "Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)",
+        "name": "@types/node",
+        "version": "20.19.41",
+        "description": "TypeScript definitions for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:20.19.41:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/node@20.19.41",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:20.19.41:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/node/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/node@22.7.5?package-id=6fe716e8b0927a9d",
+        "type": "library",
+        "author": "Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)",
+        "name": "@types/node",
+        "version": "22.7.5",
+        "description": "TypeScript definitions for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:DefinitelyTyped:\\@types\\/node:22.7.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/node@22.7.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.7.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ethers/node_modules/@types/node/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/triple-beam@1.3.5?package-id=3e3be5c397de8382",
+        "type": "library",
+        "author": "Daniel Byrne (https://github.com/danwbyrne)",
+        "name": "@types/triple-beam",
+        "version": "1.3.5",
+        "description": "TypeScript definitions for triple-beam",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/triple-beam@1.3.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/triple-beam",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/triple:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:\\@types\\/triple:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/triple-beam/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40types/validator@13.15.10?package-id=361105c50aa24065",
+        "type": "library",
+        "author": "tgfjt (https://github.com/tgfjt), Ilya Mochalov (https://github.com/chrootsu), Ayman Nedjmeddine (https://github.com/IOAyman), Louay Alakkad (https://github.com/louy), Bonggyun Lee (https://github.com/deptno), Naoto Yokoyama (https://github.com/builtinnya), Philipp Katz (https://github.com/qqilihq), Jace Warren (https://github.com/keatz55), Vlad Poluch (https://github.com/vlapo), Piotr Błażejewicz (https://github.com/peterblazejewicz), Matteo Nista (https://github.com/Mattewn99), Daniel Freire (https://github.com/dcfreire), Rik Smale (https://github.com/WikiRik)",
+        "name": "@types/validator",
+        "version": "13.15.10",
+        "description": "TypeScript definitions for validator",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.15.10:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40types/validator@13.15.10",
+        "externalReferences": [
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/validator",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:DefinitelyTyped:\\@types\\/validator:13.15.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@types/validator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/%40vercel/oidc@3.2.0?package-id=aa9ae944ca729d3f",
+        "type": "library",
+        "name": "@vercel/oidc",
+        "version": "3.2.0",
+        "description": "Runtime OIDC helpers intended for use with Vercel Functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:\\@vercel\\/oidc:\\@vercel\\/oidc:3.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/%40vercel/oidc@3.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/vercel/vercel.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://vercel.com",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@vercel/oidc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/abbrev@1.1.1?package-id=7797aed52ef29847",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me>",
+        "name": "abbrev",
+        "version": "1.1.1",
+        "description": "Like ruby's abbrev module, but in js",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/abbrev@1.1.1",
+        "externalReferences": [
+          {
+            "url": "http://github.com/isaacs/abbrev-js",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:abbrev:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/abbrev/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/abbrev@3.0.1?package-id=bfcf5eaa5daa3133",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "abbrev",
+        "version": "3.0.1",
+        "description": "Like ruby's abbrev module, but in js",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/abbrev@3.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/abbrev-js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/abort-controller@3.0.0?package-id=7832aa1cacf310b2",
+        "type": "library",
+        "author": "Toru Nagashima (https://github.com/mysticatea)",
+        "name": "abort-controller",
+        "version": "3.0.0",
+        "description": "An implementation of WHATWG AbortController interface.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/abort-controller@3.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/mysticatea/abort-controller.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mysticatea/abort-controller#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:abort-controller:abort_controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:abort_controller:abort-controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:abort_controller:abort_controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mysticatea:abort-controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mysticatea:abort_controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:abort:abort-controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:abort:abort_controller:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/abort-controller/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/accepts@1.3.8?package-id=fe1f2ff03fb9475c",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "accepts",
+        "version": "1.3.8",
+        "description": "Higher-level content negotiation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/accepts@1.3.8",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/accepts/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/acorn@7.4.1?package-id=c0f7127acbceb420",
+        "type": "library",
+        "author": "Marijn Haverbeke <marijnh@gmail.com>, Ingvar Stepanyan <me@rreverser.com>, Adrian Heine",
+        "name": "acorn",
+        "version": "7.4.1",
+        "description": "ECMAScript parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:acornjs:acorn:7.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/acorn@7.4.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/acornjs/acorn.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/acornjs/acorn",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:acorn:acorn:7.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-expression/node_modules/acorn/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/aes-js@4.0.0-beta.5?package-id=6ad4b0036eebc3a0",
+        "type": "library",
+        "author": "Richard Moore <me@ricmoo.com>",
+        "name": "aes-js",
+        "version": "4.0.0-beta.5",
+        "description": "A pure JavaScript implementation of the AES block cipher and all common modes of operation.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:aes-js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/aes-js@4.0.0-beta.5",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ricmoo/aes-js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aes-js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aes_js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aes_js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ricmoo:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ricmoo:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aes:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aes:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/aes-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/agent-base@6.0.2?package-id=51a9723b91dc3bb1",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "agent-base",
+        "version": "6.0.2",
+        "description": "Turn a function into an `http.Agent` instance",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/agent-base@6.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/node-agent-base.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:agent_base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/agent-base/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/agent-base@7.1.4?package-id=0dfda7c3870cf8f4",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "agent-base",
+        "version": "7.1.4",
+        "description": "Turn a function into an `http.Agent` instance",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/agent-base@7.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/TooTallNate/proxy-agents.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/agent-base/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/agentkeepalive@4.6.0?package-id=c6a7724321f5beae",
+        "type": "library",
+        "author": "fengmk2 <fengmk2@gmail.com> (https://github.com/fengmk2)",
+        "name": "agentkeepalive",
+        "version": "4.6.0",
+        "description": "Missing keepalive http.Agent",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:agentkeepalive:agentkeepalive:4.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/agentkeepalive@4.6.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/node-modules/agentkeepalive.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-modules:agentkeepalive:4.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/agentkeepalive/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/aggregate-error@3.1.0?package-id=7cedce27af4fa8d6",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "aggregate-error",
+        "version": "3.1.0",
+        "description": "Create an error from multiple errors",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/aggregate-error@3.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aggregate-error:aggregate_error:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aggregate_error:aggregate-error:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aggregate_error:aggregate_error:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aggregate:aggregate-error:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:aggregate:aggregate_error:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/aggregate-error/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ai@6.0.180?package-id=46d6f2a266f873e3",
+        "type": "library",
+        "name": "ai",
+        "version": "6.0.180",
+        "description": "AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ai:6.0.180:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ai@6.0.180",
+        "externalReferences": [
+          {
+            "url": "https://github.com/vercel/ai",
+            "type": "distribution"
+          },
+          {
+            "url": "https://ai-sdk.dev/docs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ai:ai:6.0.180:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ai/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=ba5607392e56dee9",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)",
+        "name": "ansi-regex",
+        "version": "2.1.1",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@2.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=2b280fc78a93d0b1",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)",
+        "name": "ansi-regex",
+        "version": "2.1.1",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@2.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@2.1.1?package-id=b93db3f55b850b14",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)",
+        "name": "ansi-regex",
+        "version": "2.1.1",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@2.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@3.0.1?package-id=dddd120589f7009b",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "ansi-regex",
+        "version": "3.0.1",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@3.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@5.0.1?package-id=215b7da2acde9858",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "ansi-regex",
+        "version": "5.0.1",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@5.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=836bae2338a59355",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "ansi-regex",
+        "version": "6.2.2",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@6.2.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-regex@6.2.2?package-id=02cdd6725ca2a358",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "ansi-regex",
+        "version": "6.2.2",
+        "description": "Regular expression for matching ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ansi-regex@6.2.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-styles@2.2.1?package-id=65b4c3eb14b71ee6",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com)",
+        "name": "ansi-styles",
+        "version": "2.2.1",
+        "description": "ANSI escape codes for styling strings in the terminal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ansi-styles@2.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi-styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi-styles:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi-styles:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi_styles:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-styles@3.2.1?package-id=f879ff424c2ec284",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "ansi-styles",
+        "version": "3.2.1",
+        "description": "ANSI escape codes for styling strings in the terminal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ansi-styles@3.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ansi-styles/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=c3f3679aac65318b",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "ansi-styles",
+        "version": "4.3.0",
+        "description": "ANSI escape codes for styling strings in the terminal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ansi-styles@4.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=c365b03d53f8ca80",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "ansi-styles",
+        "version": "4.3.0",
+        "description": "ANSI escape codes for styling strings in the terminal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ansi-styles@4.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-styles@4.3.0?package-id=f3dee5a49bb85e72",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "ansi-styles",
+        "version": "4.3.0",
+        "description": "ANSI escape codes for styling strings in the terminal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ansi-styles@4.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ansi-styles@6.2.3?package-id=c9c45ead032034a0",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "ansi-styles",
+        "version": "6.2.3",
+        "description": "ANSI escape codes for styling strings in the terminal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ansi-styles@6.2.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/append-field@1.0.0?package-id=40d1f9967f309c48",
+        "type": "library",
+        "author": "Linus Unnebäck <linus@folkdatorn.se>",
+        "name": "append-field",
+        "version": "1.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/append-field@1.0.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/LinusU/node-append-field.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:append-field:append_field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:append_field:append-field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:append_field:append_field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:LinusU:append-field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:LinusU:append_field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:append:append-field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:append:append_field:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/append-field/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/aproba@1.2.0?package-id=81de4b22dbb401d0",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org>",
+        "name": "aproba",
+        "version": "1.2.0",
+        "description": "A ridiculously light-weight argument validator (now browser friendly)",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/aproba@1.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/aproba",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/aproba",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:aproba:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/aproba/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/archive-type@4.0.0?package-id=3fb8ce78823b4311",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "archive-type",
+        "version": "4.0.0",
+        "description": "Detect the archive type of a Buffer/Uint8Array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:archive-type:archive-type:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/archive-type@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archive-type:archive_type:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archive_type:archive-type:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archive_type:archive_type:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archive:archive-type:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archive:archive_type:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archive-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/archiver@1.3.0?package-id=dec4b5088a113d49",
+        "type": "library",
+        "author": "Chris Talkington (http://christalkington.com/)",
+        "name": "archiver",
+        "version": "1.3.0",
+        "description": "a streaming interface for archive generation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:archiverjs:archiver:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/archiver@1.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/archiverjs/node-archiver.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/archiverjs/node-archiver",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiver:archiver:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archiver/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/archiver-utils@1.3.0?package-id=35ab1a4a9ad1f907",
+        "type": "library",
+        "author": "Chris Talkington (http://christalkington.com/)",
+        "name": "archiver-utils",
+        "version": "1.3.0",
+        "description": "utility functions for archiver",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:archiver-utils:archiver-utils:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/archiver-utils@1.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/archiverjs/archiver-utils.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/archiverjs/archiver-utils#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiver-utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiver_utils:archiver-utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiver_utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:archiver-utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:archiver_utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiver:archiver-utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiver:archiver_utils:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archiver-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/are-we-there-yet@1.1.7?package-id=38e39a5c3788e5c4",
+        "type": "library",
+        "author": "Rebecca Turner (http://re-becca.org)",
+        "name": "are-we-there-yet",
+        "version": "1.1.7",
+        "description": "Keep track of the overall completion of many disparate processes",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/are-we-there-yet@1.1.7",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/are-we-there-yet.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/are-we-there-yet",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we-there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we-there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/are-we-there-yet/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/are-we-there-yet@3.0.1?package-id=a1e5dbdcb445cc0b",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "are-we-there-yet",
+        "version": "3.0.1",
+        "description": "Keep track of the overall completion of many disparate processes",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/are-we-there-yet@3.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/are-we-there-yet.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/are-we-there-yet",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we-there-yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there_yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there_yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we-there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we-there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we_there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are-we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are_we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:are:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/argparse@1.0.10?package-id=d60313d70eaae47d",
+        "type": "library",
+        "author": "Eugene Shkuropat, Paul Jacobson",
+        "name": "argparse",
+        "version": "1.0.10",
+        "description": "Very powerful CLI arguments parser. Native port of argparse - python's options parsing library",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/argparse@1.0.10",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/argparse/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/array-buffer-byte-length@1.0.2?package-id=f2867470e7b27597",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "array-buffer-byte-length",
+        "version": "1.0.2",
+        "description": "Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:array-buffer-byte-length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/array-buffer-byte-length@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/array-buffer-byte-length.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/array-buffer-byte-length#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-buffer-byte-length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_buffer_byte_length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_buffer_byte_length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-buffer-byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-buffer-byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_buffer_byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_buffer_byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/array-buffer-byte-length/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/array-each@1.0.1?package-id=7aadb2fc6095104c",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "array-each",
+        "version": "1.0.1",
+        "description": "Loop over each item in an array and call the given function on every element.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:array-each:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/array-each@1.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/array-each",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:array_each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-each:array-each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-each:array_each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_each:array-each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_each:array_each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array-each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array_each:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/array-each/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/array-flatten@1.1.1?package-id=5041c141565d0833",
+        "type": "library",
+        "author": "Blake Embrey <hello@blakeembrey.com> (http://blakeembrey.me)",
+        "name": "array-flatten",
+        "version": "1.1.1",
+        "description": "Flatten an array of nested arrays into a single flat array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/array-flatten@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/blakeembrey/array-flatten.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/blakeembrey/array-flatten",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:blakeembrey:array-flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:blakeembrey:array_flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/array-flatten/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/array-slice@1.1.0?package-id=a261f10f751ab469",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "array-slice",
+        "version": "1.1.0",
+        "description": "Array-slice method. Slices `array` from the `start` index up to, but not including, the `end` index.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:array-slice:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/array-slice@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/array-slice",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:array_slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-slice:array-slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array-slice:array_slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_slice:array-slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array_slice:array_slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array-slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:array:array_slice:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/array-slice/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/asap@2.0.6?package-id=1c54e38011c51e5b",
+        "type": "library",
+        "name": "asap",
+        "version": "2.0.6",
+        "description": "High-priority task queue for Node.js and browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/asap@2.0.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/kriskowal/asap.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/asap/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/assert-never@1.4.0?package-id=e57cc97cb7061a4e",
+        "type": "library",
+        "author": "Daniel Lytkin <dan.lytkin@gmail.com>",
+        "name": "assert-never",
+        "version": "1.4.0",
+        "description": "Helper function for exhaustive checks of discriminated unions in TypeScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:assert-never:assert-never:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/assert-never@1.4.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:assert-never:assert_never:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:assert_never:assert-never:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:assert_never:assert_never:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:assert:assert-never:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:assert:assert_never:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/assert-never/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/async@2.6.4?package-id=50f2f4c26ff2ccab",
+        "type": "library",
+        "author": "Caolan McMahon",
+        "name": "async",
+        "version": "2.6.4",
+        "description": "Higher-order functions and common patterns for asynchronous code",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/async@2.6.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/caolan/async.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://caolan.github.io/async/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archiver/node_modules/async/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/async@2.6.4?package-id=5aa21ddd678e2c5a",
+        "type": "library",
+        "author": "Caolan McMahon",
+        "name": "async",
+        "version": "2.6.4",
+        "description": "Higher-order functions and common patterns for asynchronous code",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/async@2.6.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/caolan/async.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://caolan.github.io/async/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/portscanner/node_modules/async/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/async@3.2.6?package-id=6753e2a5837ba461",
+        "type": "library",
+        "author": "Caolan McMahon",
+        "name": "async",
+        "version": "3.2.6",
+        "description": "Higher-order functions and common patterns for asynchronous code",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:caolan:async:3.2.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/async@3.2.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/caolan/async.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://caolan.github.io/async/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:async:async:3.2.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/async/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/at-least-node@1.0.0?package-id=dd9e19320bbf0929",
+        "type": "library",
+        "author": "Ryan Zimmerman <opensrc@ryanzim.com>",
+        "name": "at-least-node",
+        "version": "1.0.0",
+        "description": "Lightweight Node.js version sniffing/comparison",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/at-least-node@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/RyanZim/at-least-node.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/RyanZim/at-least-node#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at-least-node:at_least_node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at_least_node:at-least-node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at_least_node:at_least_node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at-least:at-least-node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at-least:at_least_node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at_least:at-least-node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at_least:at_least_node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:RyanZim:at-least-node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:RyanZim:at_least_node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at:at-least-node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:at:at_least_node:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/at-least-node/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/available-typed-arrays@1.0.7?package-id=91c13e4c18804052",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "available-typed-arrays",
+        "version": "1.0.7",
+        "description": "Returns an array of Typed Array names that are available in the current environment",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/available-typed-arrays@1.0.7",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/available-typed-arrays.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/available-typed-arrays#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available-typed-arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available_typed_arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available_typed_arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available-typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available-typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available_typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available_typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:available:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/available-typed-arrays/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/babel-walk@3.0.0-canary-5?package-id=716281520579424d",
+        "type": "library",
+        "author": "Timothy Gu <timothygu99@gmail.com>",
+        "name": "babel-walk",
+        "version": "3.0.0-canary-5",
+        "description": "Lightweight Babel AST traversal",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:babel-walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/babel-walk@3.0.0-canary-5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/babel-walk.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel-walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel_walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel_walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:babel:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/babel-walk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/balanced-match@1.0.2?package-id=956658d078dc7d57",
+        "type": "library",
+        "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
+        "name": "balanced-match",
+        "version": "1.0.2",
+        "description": "Match balanced character pairs, like \"{\" and \"}\"",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/balanced-match@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/juliangruber/balanced-match.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/juliangruber/balanced-match",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/balanced-match/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/base-files@13.8%2Bdeb13u4?arch=arm64&distro=debian-13.4&package-id=f8b3c51eba0a9b91",
+        "type": "library",
+        "publisher": "Santiago Vila <sanvila@debian.org>",
+        "name": "base-files",
+        "version": "13.8+deb13u4",
+        "licenses": [
+          {
+            "license": {
+              "id": "GPL-2.0-or-later"
+            }
+          },
+          {
+            "license": {
+              "name": "GPL"
+            }
+          },
+          {
+            "license": {
+              "name": "verbatim"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:base-files:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/base-files@13.8%2Bdeb13u4?arch=arm64&distro=debian-13.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base-files:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base_files:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base_files:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:9b08b42cbe9b17150d47303e371925824ba20b40210c774af877ce56690b0b8d"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/base-files"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:9b08b42cbe9b17150d47303e371925824ba20b40210c774af877ce56690b0b8d"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/base-files/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:9b08b42cbe9b17150d47303e371925824ba20b40210c774af877ce56690b0b8d"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/base-files.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "348"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/base64-arraybuffer@0.1.4?package-id=7b4063d10599bfae",
+        "type": "library",
+        "author": "Niklas von Hertzen <niklasvh@gmail.com> (http://hertzen.com)",
+        "name": "base64-arraybuffer",
+        "version": "0.1.4",
+        "description": "Encode/decode base64 data into ArrayBuffers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/base64-arraybuffer@0.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/niklasvh/base64-arraybuffer",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/niklasvh/base64-arraybuffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:niklasvh:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:niklasvh:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/base64-arraybuffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/base64-js@0.0.8?package-id=6f1f1a7796cb63d0",
+        "type": "library",
+        "author": "T. Jameson Little <t.jameson.little@gmail.com>",
+        "name": "base64-js",
+        "version": "0.0.8",
+        "description": "Base64 encoding/decoding in pure JS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:beatgammit:base64-js:0.0.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/base64-js@0.0.8",
+        "externalReferences": [
+          {
+            "url": "git://github.com/beatgammit/base64-js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beatgammit:base64_js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/base64-js@1.5.1?package-id=c493a9a41b36da0b",
+        "type": "library",
+        "author": "T. Jameson Little <t.jameson.little@gmail.com>",
+        "name": "base64-js",
+        "version": "1.5.1",
+        "description": "Base64 encoding/decoding in pure JS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/base64-js@1.5.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/beatgammit/base64-js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/beatgammit/base64-js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beatgammit:base64_js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/base64-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/base64id@2.0.0?package-id=d1750eb90689f1a4",
+        "type": "library",
+        "author": "Kristian Faeldt <faeldt_kristian@cyberagent.co.jp>",
+        "name": "base64id",
+        "version": "2.0.0",
+        "description": "Generates a base64 id",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:base64id:base64id:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/base64id@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/faeldt/base64id.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:faeldt:base64id:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/base64id/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/base64url@0.0.6?package-id=2f8a9d6c7656ba10",
+        "type": "library",
+        "author": "Brian J Brennan",
+        "name": "base64url",
+        "version": "0.0.6",
+        "description": "For encoding to/from base64urls",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:brianloveswords:base64url:0.0.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/base64url@0.0.6",
+        "externalReferences": [
+          {
+            "url": "git://github.com/brianloveswords/base64url.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:base64url:base64url:0.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/base64url/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/basic-auth@2.0.1?package-id=0ed4c1f07b04e9ef",
+        "type": "library",
+        "name": "basic-auth",
+        "version": "2.0.1",
+        "description": "node.js basic auth parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/basic-auth@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/basic-auth/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/batch@0.6.1?package-id=344c43aaf43bb8dc",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>",
+        "name": "batch",
+        "version": "0.6.1",
+        "description": "Simple async batch with concurrency control and progress reporting.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:visionmedia:batch:0.6.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/batch@0.6.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/visionmedia/batch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/batch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/baz?package-id=99a08ef6ddd74ba7",
+        "type": "library",
+        "name": "baz",
+        "version": "UNKNOWN",
+        "cpe": "cpe:2.3:a:baz:baz:*:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/baz",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/baz/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/beep-boop@1.2.3?package-id=ac8f35c9bc6d4edc",
+        "type": "library",
+        "name": "beep-boop",
+        "version": "1.2.3",
+        "cpe": "cpe:2.3:a:beep-boop:beep-boop:1.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/beep-boop@1.2.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beep-boop:beep_boop:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beep_boop:beep-boop:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beep_boop:beep_boop:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beep:beep-boop:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:beep:beep_boop:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/github-from-package/example/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/beercss@4.0.21?package-id=22ede90a702de103",
+        "type": "library",
+        "author": "Everton and Leonardo",
+        "name": "beercss",
+        "version": "4.0.21",
+        "description": "Build material design interfaces in record time... without stress for devs.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:beercss:beercss:4.0.21:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/beercss@4.0.21",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/beercss/beercss.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://www.beercss.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/beercss/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/big-integer@1.6.52?package-id=6efaee3d2e9117ff",
+        "type": "library",
+        "author": "Peter Olson <peter.e.c.olson+npm@gmail.com>",
+        "name": "big-integer",
+        "version": "1.6.52",
+        "description": "An arbitrary length integer library for Javascript",
+        "licenses": [
+          {
+            "license": {
+              "id": "Unlicense"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:big-integer:big-integer:1.6.52:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/big-integer@1.6.52",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:big-integer:big_integer:1.6.52:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:big_integer:big-integer:1.6.52:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:big_integer:big_integer:1.6.52:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:big:big-integer:1.6.52:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:big:big_integer:1.6.52:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/big-integer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/binary@0.3.0?package-id=aac28aacec14e6f2",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "binary",
+        "version": "0.3.0",
+        "description": "Unpack multibyte binary values from buffers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:substack:binary:0.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/binary@0.3.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/substack/node-binary.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/binary/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bindings@1.5.0?package-id=848e919a5348c76e",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
+        "name": "bindings",
+        "version": "1.5.0",
+        "description": "Helper module for loading your native module's .node file",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:TooTallNate:bindings:1.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/bindings@1.5.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/node-bindings.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/TooTallNate/node-bindings",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/bindings/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bintrees@1.0.2?package-id=db53f4ebaee4e2cf",
+        "type": "library",
+        "author": "Vadim Graboys <dimva13@gmail.com>",
+        "name": "bintrees",
+        "version": "1.0.2",
+        "description": "Binary Search Trees",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:bintrees:bintrees:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/bintrees@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/vadimg/js_bintrees.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vadimg:bintrees:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/bintrees/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bl@1.2.3?package-id=1d71c68896a44c86",
+        "type": "library",
+        "author": "Rod Vagg <rod@vagg.org> (https://github.com/rvagg), Matteo Collina <matteo.collina@gmail.com> (https://github.com/mcollina), Jarett Cruger <jcrugzz@gmail.com> (https://github.com/jcrugzz)",
+        "name": "bl",
+        "version": "1.2.3",
+        "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:rvagg:bl:1.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/bl@1.2.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/rvagg/bl.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/rvagg/bl",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:bl:bl:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/bl/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bl@4.1.0?package-id=846a0edd607229fd",
+        "type": "library",
+        "author": "Rod Vagg <rod@vagg.org> (https://github.com/rvagg), Matteo Collina <matteo.collina@gmail.com> (https://github.com/mcollina), Jarett Cruger <jcrugzz@gmail.com> (https://github.com/jcrugzz)",
+        "name": "bl",
+        "version": "4.1.0",
+        "description": "Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:rvagg:bl:4.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/bl@4.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/rvagg/bl.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/rvagg/bl",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar-fs/node_modules/bl/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bluebird@3.4.7?package-id=441b568aa058ddd4",
+        "type": "library",
+        "author": "Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)",
+        "name": "bluebird",
+        "version": "3.4.7",
+        "description": "Full featured Promises/A+ implementation with exceptionally good performance",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:bluebirdjs:bluebird:3.4.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/bluebird@3.4.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/petkaantonov/bluebird.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/petkaantonov/bluebird",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bluebird@3.7.2?package-id=45ec017cc93f373c",
+        "type": "library",
+        "author": "Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)",
+        "name": "bluebird",
+        "version": "3.7.2",
+        "description": "Full featured Promises/A+ implementation with exceptionally good performance",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:bluebirdjs:bluebird:3.7.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/bluebird@3.7.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/petkaantonov/bluebird.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/petkaantonov/bluebird",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/bluebird/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/body-parser@1.20.5?package-id=ddc8c87ed1c65da3",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "body-parser",
+        "version": "1.20.5",
+        "description": "Node.js body parsing middleware",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:openjsf:body-parser:1.20.5:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/body-parser@1.20.5",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/body-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/brace-expansion@1.1.14?package-id=0255070021979c9b",
+        "type": "library",
+        "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
+        "name": "brace-expansion",
+        "version": "1.1.14",
+        "description": "Brace expansion as known from sh/bash",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juliangruber:brace-expansion:1.1.14:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/brace-expansion@1.1.14",
+        "externalReferences": [
+          {
+            "url": "git://github.com/juliangruber/brace-expansion.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/juliangruber/brace-expansion",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/brace-expansion/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/brace-expansion@2.1.0?package-id=93130034832e0228",
+        "type": "library",
+        "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
+        "name": "brace-expansion",
+        "version": "2.1.0",
+        "description": "Brace expansion as known from sh/bash",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juliangruber:brace-expansion:2.1.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/brace-expansion@2.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/juliangruber/brace-expansion.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/juliangruber/brace-expansion",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/glob/node_modules/brace-expansion/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/braces@3.0.3?package-id=b57d894966249598",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)",
+        "name": "braces",
+        "version": "3.0.3",
+        "description": "Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/braces@3.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/micromatch/braces",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/braces/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/brotli@1.3.3?package-id=470bc485996d4bbe",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "brotli",
+        "version": "1.3.3",
+        "description": "A port of the Brotli compression algorithm as used in WOFF2",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:devongovett:brotli:1.3.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/brotli@1.3.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/devongovett/brotli.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/brotli.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/brotli/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/browser_field?package-id=0ec800aec91252a5",
+        "type": "library",
+        "name": "browser_field",
+        "version": "UNKNOWN",
+        "cpe": "cpe:2.3:a:browser-field:browser-field:*:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/browser_field",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browser-field:browser_field:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browser_field:browser-field:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browser_field:browser_field:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browser:browser-field:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browser:browser_field:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/browserify-zlib@0.2.0?package-id=b5aa99aae4fb60df",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "browserify-zlib",
+        "version": "0.2.0",
+        "description": "Full zlib module for the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:browserify-zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/browserify-zlib@0.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/devongovett/browserify-zlib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/browserify-zlib",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browserify-zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browserify_zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browserify_zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:browserify-zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:browserify_zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browserify:browserify-zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browserify:browserify_zlib:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/browserify-zlib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer@5.7.1?package-id=8160d61272f16fc2",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>, James Halliday <mail@substack.net>",
+        "name": "buffer",
+        "version": "5.7.1",
+        "description": "Node.js Buffer API, for the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer@5.7.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:buffer:5.7.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer@6.0.3?package-id=b34920cb2184e6ad",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>, James Halliday <mail@substack.net>",
+        "name": "buffer",
+        "version": "6.0.3",
+        "description": "Node.js Buffer API, for the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer:buffer:6.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer@6.0.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:buffer:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer-alloc@1.2.0?package-id=0215db4a4aa6cd05",
+        "type": "library",
+        "name": "buffer-alloc",
+        "version": "1.2.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer-alloc@1.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer-alloc:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer_alloc:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer-alloc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=72525885a05217f9",
+        "type": "library",
+        "name": "buffer-alloc-unsafe",
+        "version": "1.1.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer-alloc-unsafe@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-alloc-unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_alloc_unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_alloc_unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer-alloc-unsafe/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer-crc32@0.2.13?package-id=018e707480d9a394",
+        "type": "library",
+        "author": "Brian J. Brennan <brianloveswords@gmail.com>, Vladimir Kuznetsov",
+        "name": "buffer-crc32",
+        "version": "0.2.13",
+        "description": "A pure javascript CRC32 algorithm that plays nice with binary data",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer-crc32@0.2.13",
+        "externalReferences": [
+          {
+            "url": "git://github.com/brianloveswords/buffer-crc32.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/brianloveswords/buffer-crc32",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:brianloveswords:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer-crc32/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer-fill@1.0.0?package-id=b5b4b05d23ef0590",
+        "type": "library",
+        "name": "buffer-fill",
+        "version": "1.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer-fill@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_fill:buffer-fill:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer-fill:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer_fill:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer-fill/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer-from@1.1.2?package-id=d2869a97005ddd30",
+        "type": "library",
+        "name": "buffer-from",
+        "version": "1.1.2",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer-from@1.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer-from/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffer-indexof-polyfill@1.0.2?package-id=08bc6bd9a895200f",
+        "type": "library",
+        "author": "https://github.com/sarosia",
+        "name": "buffer-indexof-polyfill",
+        "version": "1.0.2",
+        "description": "This is a polyfill for Buffer#indexOf introduced in NodeJS 4.0.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffer-indexof-polyfill@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/sarosia/buffer-indexof-polyfill.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/sarosia/buffer-indexof-polyfill#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-indexof-polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_indexof_polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_indexof_polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer-indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer_indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sarosia:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sarosia:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffer:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffer-indexof-polyfill/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/buffers@0.1.1?package-id=fd60bbd17e6803d8",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "buffers",
+        "version": "0.1.1",
+        "description": "Treat a collection of Buffers as a single contiguous partially mutable Buffer.",
+        "cpe": "cpe:2.3:a:substack:buffers:0.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/buffers@0.1.1",
+        "externalReferences": [
+          {
+            "url": "http://github.com/substack/node-buffers.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/buffers/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/busboy@1.6.0?package-id=72b84630ff8aade7",
+        "type": "library",
+        "author": "Brian White <mscdex@mscdex.net>",
+        "name": "busboy",
+        "version": "1.6.0",
+        "description": "A streaming parser for HTML form data for node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:busboy:busboy:1.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/busboy@1.6.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/mscdex/busboy.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mscdex:busboy:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/busboy/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/bytes@3.1.2?package-id=1d0cce2090c4dc09",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Jed Watson <jed.watson@me.com>, Théo FIDRY <theo.fidry@gmail.com>",
+        "name": "bytes",
+        "version": "3.1.2",
+        "description": "Utility to parse a string bytes to bytes and vice-versa",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/bytes@3.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/bytes/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cacache@15.3.0?package-id=f5c0681a2e946e2d",
+        "type": "library",
+        "name": "cacache",
+        "version": "15.3.0",
+        "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cacache:cacache:15.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cacache@15.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/cacache",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:cacache:15.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cacache@19.0.1?package-id=ace0af3ce948f36b",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "cacache",
+        "version": "19.0.1",
+        "description": "Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cacache@19.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/cacache.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cacache/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cacheable-request@2.1.4?package-id=346e1627c1f72870",
+        "type": "library",
+        "author": "Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)",
+        "name": "cacheable-request",
+        "version": "2.1.4",
+        "description": "Wrap native HTTP requests with RFC compliant cache support",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cacheable-request:cacheable-request:2.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cacheable-request@2.1.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/lukechilds/cacheable-request.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/lukechilds/cacheable-request",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cacheable-request:cacheable_request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cacheable_request:cacheable-request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cacheable_request:cacheable_request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lukechilds:cacheable-request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lukechilds:cacheable_request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cacheable:cacheable-request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cacheable:cacheable_request:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cacheable-request/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/call-bind@1.0.9?package-id=dbc99e7ef70e6653",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "call-bind",
+        "version": "1.0.9",
+        "description": "Robustly `.call.bind()` a function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:call-bind:call-bind:1.0.9:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/call-bind@1.0.9",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/call-bind.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/call-bind#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bind:call_bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind:call-bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind:call_bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:call-bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:call_bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call:call-bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call:call_bind:1.0.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/call-bind/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/call-bind-apply-helpers@1.0.2?package-id=0d18b02f5378691f",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "call-bind-apply-helpers",
+        "version": "1.0.2",
+        "description": "Helper functions around Function call/apply/bind, for use in `call-bind`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/call-bind-apply-helpers@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/call-bind-apply-helpers.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/call-bind-apply-helpers#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/call-bind-apply-helpers/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/call-bound@1.0.4?package-id=44af6e189fe32d87",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "call-bound",
+        "version": "1.0.4",
+        "description": "Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/call-bound@1.0.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/call-bound.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/call-bound#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:call-bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:call_bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/call-bound/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/camelcase@5.3.1?package-id=92e4f8e8e365d6ef",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "camelcase",
+        "version": "5.3.1",
+        "description": "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/camelcase@5.3.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/camelcase/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chainsaw@0.1.0?package-id=6e4c3d3622249d54",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "chainsaw",
+        "version": "0.1.0",
+        "description": "Build chainable fluent interfaces the easy way... with a freakin' chainsaw!",
+        "licenses": [
+          {
+            "license": {
+              "name": "MIT/X11"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chainsaw@0.1.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/substack/node-chainsaw.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:substack:chainsaw:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/chainsaw/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chalk@1.1.3?package-id=af9826c69b6847f8",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)",
+        "name": "chalk",
+        "version": "1.1.3",
+        "description": "Terminal string styling done right. Much color.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chalk@1.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chalk@2.4.2?package-id=015bdd0e54562d25",
+        "type": "library",
+        "name": "chalk",
+        "version": "2.4.2",
+        "description": "Terminal string styling done right",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chalk@2.4.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/chalk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chalk@4.1.2?package-id=7fe24d7225fc8b9a",
+        "type": "library",
+        "name": "chalk",
+        "version": "4.1.2",
+        "description": "Terminal string styling done right",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chalk@4.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/character-parser@2.2.0?package-id=34bd9ccc72e70b6f",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "character-parser",
+        "version": "2.2.0",
+        "description": "Parse JavaScript one character at a time to look for snippets in Templates.  This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:character-parser:character-parser:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/character-parser@2.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ForbesLindesay/character-parser.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:character-parser:character_parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:character_parser:character-parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:character_parser:character_parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ForbesLindesay:character-parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ForbesLindesay:character_parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:character:character-parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:character:character_parser:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/character-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/check-dependencies@2.0.0?package-id=3b4717bda67c27ad",
+        "type": "library",
+        "author": "Michał Gołębiowski-Owczarek <m.goleb@gmail.com>",
+        "name": "check-dependencies",
+        "version": "2.0.0",
+        "description": "Checks if currently installed npm dependencies are installed in the exact same versions that are specified in package.json",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:check-dependencies:check-dependencies:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/check-dependencies@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mgol/check-dependencies.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mgol/check-dependencies",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check-dependencies:check_dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check_dependencies:check-dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check_dependencies:check_dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check:check-dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check:check_dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mgol:check-dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mgol:check_dependencies:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/check-dependencies/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/check-types@6.0.0?package-id=85b9eff83ffcd831",
+        "type": "library",
+        "author": "Phil Booth <pmbooth@gmail.com> (https://github.com/philbooth)",
+        "name": "check-types",
+        "version": "6.0.0",
+        "description": "A little library for asserting types and values.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:check-types:check-types:6.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/check-types@6.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/philbooth/check-types.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/philbooth/check-types.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check-types:check_types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check_types:check-types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check_types:check_types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:philbooth:check-types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:philbooth:check_types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check:check-types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:check:check_types:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/check-types/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chownr@1.1.4?package-id=7ebcfb2902378122",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "chownr",
+        "version": "1.1.4",
+        "description": "like `chown -R`",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chownr@1.1.4",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/chownr.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chownr@1.1.4?package-id=671f64716b19d5fb",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "chownr",
+        "version": "1.1.4",
+        "description": "like `chown -R`",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chownr@1.1.4",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/chownr.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chownr@2.0.0?package-id=3189617deb2bc884",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "chownr",
+        "version": "2.0.0",
+        "description": "like `chown -R`",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chownr@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/chownr.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:chownr:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/chownr@3.0.0?package-id=fffff6468e7930c0",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "chownr",
+        "version": "3.0.0",
+        "description": "like `chown -R`",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/chownr@3.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/chownr.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/chownr/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/clarinet@0.12.6?package-id=6cef1d3c36e6024e",
+        "type": "library",
+        "author": "Nuno Job <nunojobpinto@gmail.com> (http://nunojob.com/), Jann Horn (https://github.com/thejh), Justin Makeig <jmpublic+github@makeig.com> (http://www.audiblepop.com), Roly Fentanes (http://about.me/roly), John Lancaster (http://jlank.com)",
+        "name": "clarinet",
+        "version": "0.12.6",
+        "description": "SAX based evented streaming JSON parser in JavaScript (browser and node)",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:clarinet:clarinet:0.12.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/clarinet@0.12.6",
+        "externalReferences": [
+          {
+            "url": "http://github.com/dscape/clarinet.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/dscape/clarinet",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dscape:clarinet:0.12.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/clarinet/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/clean-stack@2.2.0?package-id=08eaf1d1a1378cc5",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "clean-stack",
+        "version": "2.2.0",
+        "description": "Clean up error stack traces",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/clean-stack@2.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clean-stack:clean_stack:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clean_stack:clean-stack:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clean_stack:clean_stack:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clean:clean-stack:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clean:clean_stack:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/clean-stack/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cliui@6.0.0?package-id=6fb115e3b5d5d3f2",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "cliui",
+        "version": "6.0.0",
+        "description": "easily create complex multi-column command-line-interfaces",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cliui@6.0.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/yargs/cliui.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yargs:cliui:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/cliui/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/clone@2.1.2?package-id=080e255664d33bc7",
+        "type": "library",
+        "author": "Paul Vorbach <paul@vorba.ch> (http://paul.vorba.ch/), Blake Miner <miner.blake@gmail.com> (http://www.blakeminer.com/), Tian You <axqd001@gmail.com> (http://blog.axqd.net/), George Stagas <gstagas@gmail.com> (http://stagas.com/), Tobiasz Cudnik <tobiasz.cudnik@gmail.com> (https://github.com/TobiaszCudnik), Pavel Lang <langpavel@phpskelet.org> (https://github.com/langpavel), Dan MacTough (http://yabfog.com/), w1nk (https://github.com/w1nk), Hugh Kennedy (http://twitter.com/hughskennedy), Dustin Diaz (http://dustindiaz.com), Ilya Shaisultanov (https://github.com/diversario), Nathan MacInnes <nathan@macinn.es> (http://macinn.es/), Benjamin E. Coe <ben@npmjs.com> (https://twitter.com/benjamincoe), Nathan Zadoks (https://github.com/nathan7), Róbert Oroszi <robert+gh@oroszi.net> (https://github.com/oroce), Aurélio A. Heckert (http://softwarelivre.org/aurium), Guy Ellis (http://www.guyellisrocks.com/), fscherwi (https://fscherwi.github.io), rictic (https://github.com/rictic), Martin Jurča (https://github.com/jurca), Misery Lee <miserylee@foxmail.com> (https://github.com/miserylee), Clemens Wolff (https://github.com/c-w)",
+        "name": "clone",
+        "version": "2.1.2",
+        "description": "deep cloning of objects and arrays",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/clone@2.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/pvorb/node-clone.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pvorb:clone:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/clone/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/clone-response@1.0.2?package-id=1ca687973f79cd5a",
+        "type": "library",
+        "author": "Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)",
+        "name": "clone-response",
+        "version": "1.0.2",
+        "description": "Clone a Node.js HTTP response stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:clone-response:clone-response:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/clone-response@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/lukechilds/clone-response.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/lukechilds/clone-response",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clone-response:clone_response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clone_response:clone-response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clone_response:clone_response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lukechilds:clone-response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lukechilds:clone_response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clone:clone-response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:clone:clone_response:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/clone-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/code-point-at@1.1.0?package-id=15db8f5283662b54",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "code-point-at",
+        "version": "1.1.0",
+        "description": "ES2015 `String#codePointAt()` ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/code-point-at@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/code-point-at/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color@5.0.3?package-id=3402b3c6598fe1f0",
+        "type": "library",
+        "author": "Josh Junon <josh@junon.me>, Heather Arthur <fayearthur@gmail.com>, Maxime Thirouin",
+        "name": "color",
+        "version": "5.0.3",
+        "description": "Color conversion and manipulation with CSS string support",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color:color:5.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color@5.0.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-convert@1.9.3?package-id=832fbb197a382df6",
+        "type": "library",
+        "author": "Heather Arthur <fayearthur@gmail.com>",
+        "name": "color-convert",
+        "version": "1.9.3",
+        "description": "Plain color conversion functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-convert@1.9.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color-convert/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=ad73ceb607fdd321",
+        "type": "library",
+        "author": "Heather Arthur <fayearthur@gmail.com>",
+        "name": "color-convert",
+        "version": "2.0.1",
+        "description": "Plain color conversion functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-convert@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=c216a258a2dd7fdf",
+        "type": "library",
+        "author": "Heather Arthur <fayearthur@gmail.com>",
+        "name": "color-convert",
+        "version": "2.0.1",
+        "description": "Plain color conversion functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-convert@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/color-convert/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-convert@2.0.1?package-id=d7906a8074d4b4f9",
+        "type": "library",
+        "author": "Heather Arthur <fayearthur@gmail.com>",
+        "name": "color-convert",
+        "version": "2.0.1",
+        "description": "Plain color conversion functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-convert@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-convert@3.1.3?package-id=77239f07f827fd54",
+        "type": "library",
+        "author": "Josh Junon <josh@junon.me>, Heather Arthur <fayearthur@gmail.com>",
+        "name": "color-convert",
+        "version": "3.1.3",
+        "description": "Plain color conversion functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-convert:color-convert:3.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-convert@3.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-convert:color_convert:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color-convert:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_convert:color_convert:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-convert:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_convert:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color/node_modules/color-convert/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-name@1.1.3?package-id=92662d8a3adbe0c9",
+        "type": "library",
+        "author": "DY <dfcreative@gmail.com>",
+        "name": "color-name",
+        "version": "1.1.3",
+        "description": "A list of color names and its values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-name@1.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/dfcreative/color-name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dfcreative:color-name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dfcreative:color_name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-name@1.1.4?package-id=a184510682ce4734",
+        "type": "library",
+        "author": "DY <dfcreative@gmail.com>",
+        "name": "color-name",
+        "version": "1.1.4",
+        "description": "A list of color names and its values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-name@1.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/colorjs/color-name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-name@1.1.4?package-id=a80b99ad61e48555",
+        "type": "library",
+        "author": "DY <dfcreative@gmail.com>",
+        "name": "color-name",
+        "version": "1.1.4",
+        "description": "A list of color names and its values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-name@1.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/colorjs/color-name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/color-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-name@1.1.4?package-id=01c750f52978cfc6",
+        "type": "library",
+        "author": "DY <dfcreative@gmail.com>",
+        "name": "color-name",
+        "version": "1.1.4",
+        "description": "A list of color names and its values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-name@1.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/colorjs/color-name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-name@2.1.0?package-id=c912833a0dc0f66b",
+        "type": "library",
+        "author": "Dmitry Iv <dfcreative@gmail.com>",
+        "name": "color-name",
+        "version": "2.1.0",
+        "description": "A list of color names and its values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-name@2.1.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/colorjs/color-name.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/colorjs/color-name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color-name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color-string/node_modules/color-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-name@2.1.0?package-id=ccb5c4e0781c9f6b",
+        "type": "library",
+        "author": "Dmitry Iv <dfcreative@gmail.com>",
+        "name": "color-name",
+        "version": "2.1.0",
+        "description": "A list of color names and its values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-name@2.1.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/colorjs/color-name.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/colorjs/color-name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color-name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:colorjs:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color/node_modules/color-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-string@2.1.4?package-id=fd7a5e418139965b",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), Maxime Thirouin, Dyma Ywanov <dfcreative@gmail.com>, Heather Arthur <fayearthur@gmail.com>, LitoMore (https://github.com/LitoMore)",
+        "name": "color-string",
+        "version": "2.1.4",
+        "description": "Parser and generator for CSS color strings",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-string_project:color-string:2.1.4:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/color-string@2.1.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color-string/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/color-support@1.1.3?package-id=a1e232528ce637f4",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "color-support",
+        "version": "1.1.3",
+        "description": "A module which will endeavor to guess your terminal's level of color support.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/color-support@1.1.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/color-support.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color-support:color_support:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_support:color-support:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color_support:color_support:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color-support:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:color:color_support:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/color-support/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/colors@1.1.2?package-id=774e316934f12a96",
+        "type": "library",
+        "author": "Marak Squires",
+        "name": "colors",
+        "version": "1.1.2",
+        "description": "get colors in your node.js console",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/colors@1.1.2",
+        "externalReferences": [
+          {
+            "url": "http://github.com/Marak/colors.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Marak/colors.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Marak:colors:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/colors@1.4.0?package-id=ba9f99e8572f2682",
+        "type": "library",
+        "author": "Marak Squires, DABH (https://github.com/DABH)",
+        "name": "colors",
+        "version": "1.4.0",
+        "description": "get colors in your node.js console",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:colors:colors:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/colors@1.4.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/Marak/colors.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Marak/colors.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Marak:colors:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/colors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/commander@2.20.3?package-id=23da7748c749bc68",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>",
+        "name": "commander",
+        "version": "2.20.3",
+        "description": "the complete solution for node.js command-line programs",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/commander@2.20.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/tj/commander.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/commander@2.20.3?package-id=3facda85b5f59f2a",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>",
+        "name": "commander",
+        "version": "2.20.3",
+        "description": "the complete solution for node.js command-line programs",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/commander@2.20.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/tj/commander.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/component-emitter@1.3.1?package-id=ebc8491ac18b63ae",
+        "type": "library",
+        "name": "component-emitter",
+        "version": "1.3.1",
+        "description": "Event emitter",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:component-emitter:component-emitter:1.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/component-emitter@1.3.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/sindresorhus/component-emitter.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component-emitter:component_emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component_emitter:component-emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component_emitter:component_emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sindresorhus:component-emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sindresorhus:component_emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component:component-emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component:component_emitter:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/component-emitter/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/component-type@1.2.1?package-id=e91a1227114ad372",
+        "type": "library",
+        "name": "component-type",
+        "version": "1.2.1",
+        "description": "Cross-browser type assertions (less broken typeof)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:component-type:component-type:1.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/component-type@1.2.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/component/type.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component-type:component_type:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component_type:component-type:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component_type:component_type:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component:component-type:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:component:component_type:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/component-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/compress-commons@1.2.2?package-id=798bc97add5e6f68",
+        "type": "library",
+        "author": "Chris Talkington (http://christalkington.com/)",
+        "name": "compress-commons",
+        "version": "1.2.2",
+        "description": "a library that defines a common interface for working with archive formats within node",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:compress-commons:compress-commons:1.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/compress-commons@1.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/archiverjs/node-compress-commons.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/archiverjs/node-compress-commons",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:compress-commons:compress_commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:compress_commons:compress-commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:compress_commons:compress_commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:compress-commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:compress_commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:compress:compress-commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:compress:compress_commons:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/compress-commons/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/compressible@2.0.18?package-id=d33659b98b525c44",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su)",
+        "name": "compressible",
+        "version": "2.0.18",
+        "description": "Compressible Content-Type / mime checking",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/compressible@2.0.18",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/compressible/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/compression@1.8.1?package-id=828f0284d303f177",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "compression",
+        "version": "1.8.1",
+        "description": "Node.js compression middleware",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:compression:compression:1.8.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/compression@1.8.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/compression/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/concat-map@0.0.1?package-id=e899cd35e0ecfcf6",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "concat-map",
+        "version": "0.0.1",
+        "description": "concatenative mapdashery",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/concat-map@0.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/substack/node-concat-map.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/concat-map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/concat-stream@1.6.2?package-id=3cf686e52af98b9c",
+        "type": "library",
+        "author": "Max Ogden <max@maxogden.com>",
+        "name": "concat-stream",
+        "version": "1.6.2",
+        "description": "writable stream that concatenates strings or binary data and calls a callback with the result",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/concat-stream@1.6.2",
+        "externalReferences": [
+          {
+            "url": "http://github.com/maxogden/concat-stream.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:maxogden:concat-stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:maxogden:concat_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/concat-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/config@3.3.12?package-id=f5d30e88e089520d",
+        "type": "library",
+        "author": "Loren West <open_source@lorenwest.com>",
+        "name": "config",
+        "version": "3.3.12",
+        "description": "Configuration control for production node deployments",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-config:config:3.3.12:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/config@3.3.12",
+        "externalReferences": [
+          {
+            "url": "http://github.com/node-config/node-config.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://github.com/node-config/node-config.git",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:config:config:3.3.12:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/config/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/console-control-strings@1.1.0?package-id=62af6322c8da5d46",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)",
+        "name": "console-control-strings",
+        "version": "1.1.0",
+        "description": "A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning.  This is a subset of both ansi and vt100.  All control codes included work on both Windows & Unix-like OSes, except where noted.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/console-control-strings@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/console-control-strings",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:console-control-strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:console_control_strings:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/console-control-strings/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/constantinople@4.0.1?package-id=64ecabe801d13657",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "constantinople",
+        "version": "4.0.1",
+        "description": "Determine whether a JavaScript expression evaluates to a constant",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ForbesLindesay:constantinople:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/constantinople@4.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ForbesLindesay/constantinople.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:constantinople:constantinople:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/constantinople/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/content-disposition@0.5.4?package-id=6d99ffbaf9a3dbf2",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "content-disposition",
+        "version": "0.5.4",
+        "description": "Create and parse Content-Disposition header",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/content-disposition@0.5.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/content-disposition/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/content-type@1.0.5?package-id=1e680466175b93f0",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "content-type",
+        "version": "1.0.5",
+        "description": "Create and parse HTTP Content-Type header",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/content-type@1.0.5",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/content-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cookie@0.4.2?package-id=299182936c2fe78a",
+        "type": "library",
+        "author": "Roman Shtylman <shtylman@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "cookie",
+        "version": "0.4.2",
+        "description": "HTTP server cookie parsing and serialization",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cookie@0.4.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/engine.io/node_modules/cookie/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cookie@0.7.2?package-id=f30613fbb68ad643",
+        "type": "library",
+        "author": "Roman Shtylman <shtylman@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "cookie",
+        "version": "0.7.2",
+        "description": "HTTP server cookie parsing and serialization",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cookie@0.7.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cookie/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cookie-parser@1.4.7?package-id=52b0adc8ff09f017",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "cookie-parser",
+        "version": "1.4.7",
+        "description": "Parse HTTP request cookies",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cookie-parser:cookie-parser:1.4.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cookie-parser@1.4.7",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cookie-parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cookie_parser:cookie-parser:1.4.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cookie_parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cookie:cookie-parser:1.4.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cookie:cookie_parser:1.4.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cookie-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cookie-signature@1.0.6?package-id=f7961879936cc1c0",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@learnboost.com>",
+        "name": "cookie-signature",
+        "version": "1.0.6",
+        "description": "Sign and unsign cookies",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/cookie-signature@1.0.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/visionmedia/node-cookie-signature.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cookie-signature/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cookieconsent@3.1.1?package-id=bb40a8bd1a8c4f47",
+        "type": "library",
+        "author": "Osano, Inc., a Public Benefit Corporation",
+        "name": "cookieconsent",
+        "version": "3.1.1",
+        "description": "Osano cookie consent tool.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cookieconsent:cookieconsent:3.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cookieconsent@3.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/osano/cookieconsent.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://cookieconsent.osano.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:osano:cookieconsent:3.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cookieconsent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/core-util-is@1.0.2?package-id=36ced86f8d381680",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "core-util-is",
+        "version": "1.0.2",
+        "description": "The `util.is*` functions introduced in Node v0.12.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/core-util-is@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/core-util-is",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:core-util-is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:core_util_is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/core-util-is/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cors@2.8.6?package-id=28cd483ddf972fcf",
+        "type": "library",
+        "author": "Troy Goode <troygoode@gmail.com> (https://github.com/troygoode/)",
+        "name": "cors",
+        "version": "2.8.6",
+        "description": "Node.js CORS middleware",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cors:cors:2.8.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cors@2.8.6",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/crc@3.8.0?package-id=5e060917a7b152aa",
+        "type": "library",
+        "author": "Alex Gorbatchev (https://github.com/alexgorbatchev)",
+        "name": "crc",
+        "version": "3.8.0",
+        "description": "Module for calculating Cyclic Redundancy Check (CRC) for Node.js and the Browser.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:alexgorbatchev:crc:3.8.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/crc@3.8.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/alexgorbatchev/node-crc.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/alexgorbatchev/node-crc",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crc:crc:3.8.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/crc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/crc32-stream@2.0.0?package-id=828196a2c6a9e027",
+        "type": "library",
+        "author": "Chris Talkington (http://christalkington.com/)",
+        "name": "crc32-stream",
+        "version": "2.0.0",
+        "description": "a streaming CRC32 checksumer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:crc32-stream:crc32-stream:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/crc32-stream@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/archiverjs/node-crc32-stream.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/archiverjs/node-crc32-stream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crc32-stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crc32_stream:crc32-stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crc32_stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:crc32-stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:crc32_stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crc32:crc32-stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crc32:crc32_stream:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/crc32-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/cross-spawn@7.0.6?package-id=1b99c2dc3022043f",
+        "type": "library",
+        "author": "André Cruz <andre@moxy.studio>",
+        "name": "cross-spawn",
+        "version": "7.0.6",
+        "description": "Cross platform child_process#spawn and child_process#spawnSync",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/cross-spawn@7.0.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/moxystudio/node-cross-spawn",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cross-spawn/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/crypto-js@3.3.0?package-id=c00a8b8b043aae72",
+        "type": "library",
+        "author": "Evan Vosberg (http://github.com/evanvosberg)",
+        "name": "crypto-js",
+        "version": "3.3.0",
+        "description": "JavaScript library of crypto standards.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:crypto-js:crypto-js:3.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/crypto-js@3.3.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/brix/crypto-js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://github.com/brix/crypto-js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crypto-js:crypto_js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crypto_js:crypto-js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crypto_js:crypto_js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crypto:crypto-js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:crypto:crypto_js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:brix:crypto-js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:brix:crypto_js:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/crypto-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/dateformat@4.6.3?package-id=a64626d34d414995",
+        "type": "library",
+        "author": "Steven Levithan, Steven Levithan, Felix Geisendörfer <felix@debuggable.com>, Christoph Tavan <dev@tavan.de>, Jon Schlinkert (https://github.com/jonschlinkert), Felix Geisendörfer <felix@debuggable.com>",
+        "name": "dateformat",
+        "version": "4.6.3",
+        "description": "A node.js package for Steven Levithan's excellent dateFormat() function.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:dateformat:dateformat:4.6.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/dateformat@4.6.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/felixge/node-dateformat.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/felixge/node-dateformat",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:felixge:dateformat:4.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/dateformat/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@2.6.9?package-id=10669af3063683d1",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "2.6.9",
+        "description": "small debugging utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@2.6.9",
+        "externalReferences": [
+          {
+            "url": "git://github.com/visionmedia/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@3.2.7?package-id=264ab504b40249b9",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "3.2.7",
+        "description": "small debugging utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:3.2.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@3.2.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/visionmedia/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/needle/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.3.7?package-id=22ca8deef5f297f6",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.3.7",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.3.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/engine.io/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.3.7?package-id=e7f20fd9a328a043",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.3.7",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.3.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io-parser/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.3.7?package-id=6d203381ab9d6e72",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.3.7",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.3.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.4.3?package-id=96a05aabc0ed29ae",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.4.3",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.4.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/http-proxy-agent/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.4.3?package-id=5f2bc8a7a1df0ac9",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.4.3",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.4.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/https-proxy-agent/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.4.3?package-id=147dc5d482c47542",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.4.3",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.4.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sequelize/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.4.3?package-id=e66299331a6f8bdf",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.4.3",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.4.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socks-proxy-agent/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/debug@4.4.3?package-id=fa51368f69175110",
+        "type": "library",
+        "author": "Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>",
+        "name": "debug",
+        "version": "4.4.3",
+        "description": "Lightweight debugging utility for Node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/debug@4.4.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/debug-js/debug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/debug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decamelize@1.2.0?package-id=0373f8c69a364fc0",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "decamelize",
+        "version": "1.2.0",
+        "description": "Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decamelize@1.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decamelize/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decode-uri-component@0.2.2?package-id=74df95998cf0457f",
+        "type": "library",
+        "author": "Sam Verschueren <sam.verschueren@gmail.com> (github.com/SamVerschueren)",
+        "name": "decode-uri-component",
+        "version": "0.2.2",
+        "description": "A better decodeURIComponent",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decode-uri-component_project:decode-uri-component:0.2.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/decode-uri-component@0.2.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decode-uri-component/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress@4.2.1?package-id=6b277cfffb36ff6b",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
+        "name": "decompress",
+        "version": "4.2.1",
+        "description": "Extracting archives made easy",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress_project:decompress:4.2.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/decompress@4.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-response@3.3.0?package-id=677d9609cb5a01bc",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)",
+        "name": "decompress-response",
+        "version": "3.3.0",
+        "description": "Decompress a HTTP response if needed",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-response:decompress-response:3.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-response@3.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-response:decompress_response:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress-response:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress_response:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-response:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_response:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-response@4.2.1?package-id=a1d858a92cd4e324",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "decompress-response",
+        "version": "4.2.1",
+        "description": "Decompress a HTTP response if needed",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-response:decompress-response:4.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-response@4.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-response:decompress_response:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress-response:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress_response:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-response:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_response:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=4181e152e271bc83",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "decompress-response",
+        "version": "6.0.0",
+        "description": "Decompress a HTTP response if needed",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-response@6.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-response@6.0.0?package-id=ab3ad7acc2109685",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "decompress-response",
+        "version": "6.0.0",
+        "description": "Decompress a HTTP response if needed",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-response@6.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-tar@4.1.1?package-id=1935244d7cb90f17",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "decompress-tar",
+        "version": "4.1.1",
+        "description": "decompress tar plugin",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-tar:decompress-tar:4.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-tar@4.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-tar:decompress_tar:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_tar:decompress-tar:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_tar:decompress_tar:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-tar:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_tar:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-tar/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-tarbz2@4.1.1?package-id=ebabda097779037b",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
+        "name": "decompress-tarbz2",
+        "version": "4.1.1",
+        "description": "decompress tar.bz2 plugin",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-tarbz2@4.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-tarbz2/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-targz@4.1.1?package-id=9dc81698c9e5e345",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "decompress-targz",
+        "version": "4.1.1",
+        "description": "decompress tar.gz plugin",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-targz:decompress-targz:4.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-targz@4.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-targz:decompress_targz:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_targz:decompress-targz:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_targz:decompress_targz:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-targz:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_targz:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-targz/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/decompress-unzip@4.0.1?package-id=8979cd9c25111673",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "decompress-unzip",
+        "version": "4.0.1",
+        "description": "decompress zip plugin",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:decompress-unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/decompress-unzip@4.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress-unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress_unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress-unzip:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:decompress:decompress_unzip:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-unzip/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/deep-equal@2.2.3?package-id=ddff5e641b501fb1",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net), James Halliday <mail@substack.net> (https://substack.net), Jordan Harband <ljharb@gmail.com>",
+        "name": "deep-equal",
+        "version": "2.2.3",
+        "description": "node's assert.deepEqual algorithm",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:deep-equal:deep-equal:2.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/deep-equal@2.2.3",
+        "externalReferences": [
+          {
+            "url": "http://github.com/inspect-js/node-deep-equal.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:deep-equal:deep_equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:deep_equal:deep-equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:deep_equal:deep_equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:deep-equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:deep_equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:deep:deep-equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:deep:deep_equal:2.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/deep-equal/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/deep-extend@0.6.0?package-id=8b13bde9c77e7706",
+        "type": "library",
+        "author": "Viacheslav Lotsmanov <lotsmanov89@gmail.com>, Romain Prieto (https://github.com/rprieto), Max Maximov (https://github.com/maxmaximov), Marshall Bowers (https://github.com/maxdeviant), Misha Wakerman (https://github.com/mwakerman)",
+        "name": "deep-extend",
+        "version": "0.6.0",
+        "description": "Recursive object extending",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:deep_extend_project:deep_extend:0.6.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/deep-extend@0.6.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/unclechu/node-deep-extend.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/unclechu/node-deep-extend",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/deep-extend/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/define-data-property@1.1.4?package-id=1cebccf42426559d",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "define-data-property",
+        "version": "1.1.4",
+        "description": "Define a data property on an object. Will fall back to assignment in an engine without descriptors.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:define-data-property:define-data-property:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/define-data-property@1.1.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/define-data-property.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/define-data-property#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define-data-property:define_data_property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define_data_property:define-data-property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define_data_property:define_data_property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define-data:define-data-property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define-data:define_data_property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define_data:define-data-property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define_data:define_data_property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define:define-data-property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define:define_data_property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:define-data-property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:define_data_property:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/define-data-property/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/define-properties@1.2.1?package-id=c3e457ef9955cb09",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "define-properties",
+        "version": "1.2.1",
+        "description": "Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:define-properties:define-properties:1.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/define-properties@1.2.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ljharb/define-properties.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define-properties:define_properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define_properties:define-properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define_properties:define_properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define:define-properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:define:define_properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:define-properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:define_properties:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/define-properties/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/delegates@1.0.0?package-id=36ba8b211a3558dd",
+        "type": "library",
+        "name": "delegates",
+        "version": "1.0.0",
+        "description": "delegate methods and accessors to another property",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/delegates@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/delegates/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/depd@1.1.2?package-id=d03c5ad5ccf7e9e9",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "depd",
+        "version": "1.1.2",
+        "description": "Deprecate all the things",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/depd@1.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/serve-index/node_modules/depd/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/depd@2.0.0?package-id=bdc1789d5398f38c",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "depd",
+        "version": "2.0.0",
+        "description": "Deprecate all the things",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/depd@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/depd/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/destroy@1.2.0?package-id=a84307f7c46d36c4",
+        "type": "library",
+        "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "destroy",
+        "version": "1.2.0",
+        "description": "destroy a stream if possible",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:destroy:destroy:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/destroy@1.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/destroy/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/detect-file@1.0.0?package-id=7900e478eb751255",
+        "type": "library",
+        "author": "Brian Woodward (https://github.com/doowb)",
+        "name": "detect-file",
+        "version": "1.0.0",
+        "description": "Detects if a file exists and returns the resolved filepath.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:detect-file:detect-file:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/detect-file@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/doowb/detect-file",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect-file:detect_file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_file:detect-file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_file:detect_file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect-file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect_file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:doowb:detect-file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:doowb:detect_file:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/detect-file/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/detect-libc@1.0.3?package-id=f7f8634dce77a9d4",
+        "type": "library",
+        "author": "Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>",
+        "name": "detect-libc",
+        "version": "1.0.3",
+        "description": "Node.js module to detect the C standard library (libc) implementation family and version",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:detect-libc:detect-libc:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/detect-libc@1.0.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/lovell/detect-libc",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect-libc:detect_libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_libc:detect-libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_libc:detect_libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect-libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect_libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lovell:detect-libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lovell:detect_libc:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/detect-libc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/detect-libc@2.1.2?package-id=2c10f1616cf4c3dd",
+        "type": "library",
+        "author": "Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>, Vinícius Lourenço <vinyygamerlol@gmail.com>",
+        "name": "detect-libc",
+        "version": "2.1.2",
+        "description": "Node.js module to detect the C standard library (libc) implementation family and version",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/detect-libc@2.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/lovell/detect-libc.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/detect-libc@2.1.2?package-id=6d778b0d97d5f5f2",
+        "type": "library",
+        "author": "Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>, Vinícius Lourenço <vinyygamerlol@gmail.com>",
+        "name": "detect-libc",
+        "version": "2.1.2",
+        "description": "Node.js module to detect the C standard library (libc) implementation family and version",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/detect-libc@2.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/lovell/detect-libc.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/dfa@1.2.0?package-id=bf5c1ed7af4e574c",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "dfa",
+        "version": "1.2.0",
+        "description": "A state machine compiler",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:devongovett:dfa:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/dfa@1.2.0",
+        "externalReferences": [
+          {
+            "url": "git+ssh://git@github.com/devongovett/dfa.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/dfa#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dfa:dfa:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/dfa/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/doctypes@1.1.0?package-id=3f4ef5f1be454910",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "doctypes",
+        "version": "1.1.0",
+        "description": "Shorthands for commonly used doctypes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:doctypes:doctypes:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/doctypes@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/doctypes.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:doctypes:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/doctypes/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/domelementtype@1.3.1?package-id=0d6ad87159c99050",
+        "type": "library",
+        "author": "Felix Boehm <me@feedic.com>",
+        "name": "domelementtype",
+        "version": "1.3.1",
+        "description": "all the types of nodes in htmlparser2's dom",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:domelementtype:domelementtype:1.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/domelementtype@1.3.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/fb55/domelementtype.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fb55:domelementtype:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/domhandler@2.1.0?package-id=a2a50cc71f9f1510",
+        "type": "library",
+        "author": "Felix Boehm <me@feedic.com>",
+        "name": "domhandler",
+        "version": "2.1.0",
+        "description": "handler for htmlparser2 that turns pages into a dom",
+        "licenses": [
+          {
+            "license": {
+              "name": "sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:domhandler:domhandler:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/domhandler@2.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/fb55/domhandler.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fb55:domhandler:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/domutils@1.1.6?package-id=66e2979442791477",
+        "type": "library",
+        "author": "Felix Boehm <me@feedic.com>",
+        "name": "domutils",
+        "version": "1.1.6",
+        "description": "utilities for working with htmlparser2's dom",
+        "licenses": [
+          {
+            "license": {
+              "name": "sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:domutils:domutils:1.1.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/domutils@1.1.6",
+        "externalReferences": [
+          {
+            "url": "git://github.com/FB55/domutils.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:FB55:domutils:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/dottie@2.0.7?package-id=4d0527c1ef4f6b69",
+        "type": "library",
+        "author": "Mick Hansen <maker@mhansen.io>",
+        "name": "dottie",
+        "version": "2.0.7",
+        "description": "Fast and safe nested object access and manipulation in JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:dottie_project:dottie:2.0.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/dottie@2.0.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/mickhansen/dottie.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/dottie/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/double-ended-queue@0.9.7?package-id=5725c7f9e5544384",
+        "type": "library",
+        "author": "Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)",
+        "name": "double-ended-queue",
+        "version": "0.9.7",
+        "description": "Extremely fast double-ended queue implementation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:double-ended-queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/double-ended-queue@0.9.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/petkaantonov/deque.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/petkaantonov/deque",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double-ended-queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double_ended_queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double_ended_queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double-ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double-ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double_ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double_ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:petkaantonov:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:petkaantonov:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double:double-ended-queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:double:double_ended_queue:0.9.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/double-ended-queue/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/download@8.0.0?package-id=303671788db63ed8",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
+        "name": "download",
+        "version": "8.0.0",
+        "description": "Download and extract files",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:download:download:8.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/download@8.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/download/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/dunder-proto@1.0.1?package-id=c93aa5bde2f41455",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "dunder-proto",
+        "version": "1.0.1",
+        "description": "If available, the `Object.prototype.__proto__` accessor and mutator, call-bound",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/dunder-proto@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/es-shims/dunder-proto.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/es-shims/dunder-proto#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:dunder-proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:dunder_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/dunder-proto/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/duplexer2@0.1.4?package-id=937130df2f15286c",
+        "type": "library",
+        "author": "Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)",
+        "name": "duplexer2",
+        "version": "0.1.4",
+        "description": "Like duplexer but using streams3",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/duplexer2@0.1.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/duplexer2/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/duplexer3@0.1.5?package-id=48435aec46970511",
+        "type": "library",
+        "name": "duplexer3",
+        "version": "0.1.5",
+        "description": "Like duplexer but using streams3",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:duplexer3:duplexer3:0.1.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/duplexer3@0.1.5",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/duplexer3/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/eastasianwidth@0.2.0?package-id=ea06a962daee959b",
+        "type": "library",
+        "author": "Masaki Komagata",
+        "name": "eastasianwidth",
+        "version": "0.2.0",
+        "description": "Get East Asian Width from a character.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/eastasianwidth@0.2.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/komagata/eastasianwidth.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/eastasianwidth/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ee-first@1.1.1?package-id=5a203220d6135893",
+        "type": "library",
+        "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "ee-first",
+        "version": "1.1.1",
+        "description": "return the first event in a set of ee/event pairs",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ee-first@1.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ee-first/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/eivindfjeldstad-dot@0.0.1?package-id=11589b7a5b7cc74d",
+        "type": "library",
+        "name": "eivindfjeldstad-dot",
+        "version": "0.0.1",
+        "description": "Get and set object properties with dot notation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/eivindfjeldstad-dot@0.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/eivindfjeldstad/dot.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/eivindfjeldstad/dot",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eivindfjeldstad:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eivindfjeldstad:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/eivindfjeldstad-dot/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/emoji-regex@8.0.0?package-id=1acb6377c4d1be44",
+        "type": "library",
+        "author": "Mathias Bynens (https://mathiasbynens.be/)",
+        "name": "emoji-regex",
+        "version": "8.0.0",
+        "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/emoji-regex@8.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mathiasbynens/emoji-regex.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://mths.be/emoji-regex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/emoji-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=01b12619eb310009",
+        "type": "library",
+        "author": "Mathias Bynens (https://mathiasbynens.be/)",
+        "name": "emoji-regex",
+        "version": "9.2.2",
+        "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/emoji-regex@9.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mathiasbynens/emoji-regex.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://mths.be/emoji-regex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/emoji-regex@9.2.2?package-id=28604ba4f35e223d",
+        "type": "library",
+        "author": "Mathias Bynens (https://mathiasbynens.be/)",
+        "name": "emoji-regex",
+        "version": "9.2.2",
+        "description": "A regular expression to match all Emoji-only symbols as per the Unicode Standard.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/emoji-regex@9.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mathiasbynens/emoji-regex.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://mths.be/emoji-regex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/enabled@2.0.0?package-id=4d6bcacb368fa08d",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "enabled",
+        "version": "2.0.0",
+        "description": "Check if a certain debug flag is enabled.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:3rd-Eden:enabled:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/enabled@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/3rd-Eden/enabled.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:enabled:enabled:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/enabled/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/encodeurl@2.0.0?package-id=b55917a42e374d3b",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "encodeurl",
+        "version": "2.0.0",
+        "description": "Encode a URL to a percent-encoded form, excluding already-encoded sequences",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:encodeurl:encodeurl:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/encodeurl@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/encodeurl/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/encoding@0.1.13?package-id=6edb52dab3ea3e2a",
+        "type": "library",
+        "author": "Andris Reinman",
+        "name": "encoding",
+        "version": "0.1.13",
+        "description": "Convert encodings, uses iconv-lite",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/encoding@0.1.13",
+        "externalReferences": [
+          {
+            "url": "https://github.com/andris9/encoding.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/encoding/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/end-of-stream@1.4.5?package-id=b935e39bff7e678c",
+        "type": "library",
+        "author": "Mathias Buus <mathiasbuus@gmail.com>",
+        "name": "end-of-stream",
+        "version": "1.4.5",
+        "description": "Call a callback when a readable/writable/duplex stream has completed or failed.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:end-of-stream:end-of-stream:1.4.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/end-of-stream@1.4.5",
+        "externalReferences": [
+          {
+            "url": "git://github.com/mafintosh/end-of-stream.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mafintosh/end-of-stream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end-of-stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end_of_stream:end-of-stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end_of_stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:end-of-stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:end_of_stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end-of:end-of-stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end-of:end_of_stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end_of:end-of-stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end_of:end_of_stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end:end-of-stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:end:end_of_stream:1.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/end-of-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/engine.io@4.1.2?package-id=8c4af4f22e5de7e4",
+        "type": "library",
+        "author": "Guillermo Rauch <guillermo@learnboost.com>, Eugen Dueck, Afshin Mehrabani, Christoph Dorn, Mark Mokryn <mokesmokes@gmail.com>",
+        "name": "engine.io",
+        "version": "4.1.2",
+        "description": "The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:socket:engine.io:4.1.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/engine.io@4.1.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/socketio/engine.io",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/engine.io/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/engine.io-parser@4.0.3?package-id=1c0c027153be229a",
+        "type": "library",
+        "name": "engine.io-parser",
+        "version": "4.0.3",
+        "description": "Parser for the client for the realtime Engine",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:engine.io-parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/engine.io-parser@4.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/socketio/engine.io-parser",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:engine.io-parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:engine.io_parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:engine.io_parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:engine.io:engine.io-parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:engine.io:engine.io_parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socketio:engine.io-parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socketio:engine.io_parser:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/engine.io-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/env-paths@2.2.1?package-id=8a04a7a9aa4f21f3",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "env-paths",
+        "version": "2.2.1",
+        "description": "Get paths for storing things like data, config, cache, etc",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/env-paths@2.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/env-paths/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/err-code@2.0.3?package-id=eb67f19cafbd6c3f",
+        "type": "library",
+        "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
+        "name": "err-code",
+        "version": "2.0.3",
+        "description": "Create an error with a code",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/err-code@2.0.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/IndigoUnited/js-err-code.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/err-code/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/errorhandler@1.5.2?package-id=8ed65ca95e3bdfd3",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "errorhandler",
+        "version": "1.5.2",
+        "description": "Development-only error handler middleware",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:errorhandler:errorhandler:1.5.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/errorhandler@1.5.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/errorhandler/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/es-define-property@1.0.1?package-id=cbcde0a9a6111387",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "es-define-property",
+        "version": "1.0.1",
+        "description": "`Object.defineProperty`, but not IE 8's broken one.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/es-define-property@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/es-define-property.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/es-define-property#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es-define-property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es_define_property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/es-define-property/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/es-errors@1.3.0?package-id=b80402f3b1ddfc9d",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "es-errors",
+        "version": "1.3.0",
+        "description": "A simple cache for a few of the JS Error constructors.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/es-errors@1.3.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/es-errors.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/es-errors#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es-errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es_errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/es-errors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/es-get-iterator@1.1.3?package-id=916d823925222e15",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "es-get-iterator",
+        "version": "1.1.3",
+        "description": "Get an iterator for any JS language value. Works robustly across all environments, all versions.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:es-get-iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/es-get-iterator@1.1.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/es-get-iterator.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/es-get-iterator#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-get-iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_get_iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_get_iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es-get-iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es_get_iterator:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/es-get-iterator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/es-object-atoms@1.1.1?package-id=2d8cc620cca5c55e",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "es-object-atoms",
+        "version": "1.1.1",
+        "description": "ES Object-related atoms: Object, ToObject, RequireObjectCoercible",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/es-object-atoms@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/es-object-atoms.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/es-object-atoms#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/es-object-atoms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/escape-html@1.0.3?package-id=9f83c2eadc36cf52",
+        "type": "library",
+        "name": "escape-html",
+        "version": "1.0.3",
+        "description": "Escape string for use in HTML",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/escape-html@1.0.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/escape-html/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/escape-string-regexp@1.0.5?package-id=6ec01e61f077601f",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Boy Nicolai Appelman <joshua@jbna.nl> (jbna.nl)",
+        "name": "escape-string-regexp",
+        "version": "1.0.5",
+        "description": "Escape RegExp special characters",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/escape-string-regexp@1.0.5",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape-string-regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape_string_regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape_string_regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape-string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape-string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape_string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape_string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:escape:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/escape-string-regexp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/esprima@1.0.4?package-id=6ca86a7d5c3b7019",
+        "type": "library",
+        "author": "Ariya Hidayat <ariya.hidayat@gmail.com>",
+        "name": "esprima",
+        "version": "1.0.4",
+        "description": "ECMAScript parsing infrastructure for multipurpose analysis",
+        "licenses": [
+          {
+            "license": {
+              "name": "BSD"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:esprima:esprima:1.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/esprima@1.0.4",
+        "externalReferences": [
+          {
+            "url": "http://github.com/ariya/esprima.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://esprima.org",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ariya:esprima:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/notevil/node_modules/esprima/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/esprima@4.0.1?package-id=d77e18bbba704dde",
+        "type": "library",
+        "author": "Ariya Hidayat <ariya.hidayat@gmail.com>, Ariya Hidayat <ariya.hidayat@gmail.com>",
+        "name": "esprima",
+        "version": "4.0.1",
+        "description": "ECMAScript parsing infrastructure for multipurpose analysis",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/esprima@4.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jquery/esprima.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://esprima.org",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jquery:esprima:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/esprima/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/etag@1.8.1?package-id=5bf7a215d5351e40",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, David Björklund <david.bjorklund@gmail.com>",
+        "name": "etag",
+        "version": "1.8.1",
+        "description": "Create simple HTTP ETags",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/etag@1.8.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/etag/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ethers@6.16.0?package-id=086cdac5ff7442ec",
+        "type": "library",
+        "author": "Richard Moore <me@ricmoo.com>",
+        "name": "ethers",
+        "version": "6.16.0",
+        "description": "A complete and compact Ethereum library, for dapps, wallets and any other tools.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ethers-io:ethers:6.16.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ethers@6.16.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ethers-io/ethers.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://ethers.org",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ethers:ethers:6.16.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ethers/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/event-target-shim@5.0.1?package-id=38d2981e57e00f35",
+        "type": "library",
+        "author": "Toru Nagashima",
+        "name": "event-target-shim",
+        "version": "5.0.1",
+        "description": "An implementation of WHATWG EventTarget interface.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:event-target-shim:event-target-shim:5.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/event-target-shim@5.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mysticatea/event-target-shim.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mysticatea/event-target-shim",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event-target-shim:event_target_shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event_target_shim:event-target-shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event_target_shim:event_target_shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event-target:event-target-shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event-target:event_target_shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event_target:event-target-shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event_target:event_target_shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mysticatea:event-target-shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mysticatea:event_target_shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event:event-target-shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:event:event_target_shim:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/event-target-shim/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/eventemitter2@0.4.14?package-id=f97beb76cff278cb",
+        "type": "library",
+        "author": "Eric Elliott, , , , ",
+        "name": "eventemitter2",
+        "version": "0.4.14",
+        "description": "A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:eventemitter2:eventemitter2:0.4.14:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/eventemitter2@0.4.14",
+        "externalReferences": [
+          {
+            "url": "git://github.com/hij1nx/EventEmitter2.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hij1nx:eventemitter2:0.4.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/eventemitter3@1.1.1?package-id=26888713cea7d58a",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "eventemitter3",
+        "version": "1.1.1",
+        "description": "EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:eventemitter3:eventemitter3:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/eventemitter3@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/primus/eventemitter3.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:primus:eventemitter3:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/eventemitter3/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/events@3.3.0?package-id=a91d0202fa8ea285",
+        "type": "library",
+        "author": "Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)",
+        "name": "events",
+        "version": "3.3.0",
+        "description": "Node's event emitter for all engines.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:Gozala:events:3.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/events@3.3.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/Gozala/events.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:events:events:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/events/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/eventsource-parser@3.0.8?package-id=eb00f4505da970a6",
+        "type": "library",
+        "author": "Espen Hovlandsdal <espen@hovlandsdal.com>",
+        "name": "eventsource-parser",
+        "version": "3.0.8",
+        "description": "Streaming, source-agnostic EventSource/Server-Sent Events parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:eventsource-parser:eventsource-parser:3.0.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/eventsource-parser@3.0.8",
+        "externalReferences": [
+          {
+            "url": "git+ssh://git@github.com/rexxars/eventsource-parser.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/rexxars/eventsource-parser#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eventsource-parser:eventsource_parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eventsource_parser:eventsource-parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eventsource_parser:eventsource_parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eventsource:eventsource-parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eventsource:eventsource_parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rexxars:eventsource-parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rexxars:eventsource_parser:3.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/eventsource-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/exit@0.1.2?package-id=8803d0f682f78ae8",
+        "type": "library",
+        "author": "\"Cowboy\" Ben Alman (http://benalman.com/)",
+        "name": "exit",
+        "version": "0.1.2",
+        "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cowboy:exit:0.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/exit@0.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/cowboy/node-exit.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/cowboy/node-exit",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit:exit:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/exit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/exit-x@0.2.2?package-id=d351e530d5e62171",
+        "type": "library",
+        "author": "Grunt Development Team (https://gruntjs.com/development-team)",
+        "name": "exit-x",
+        "version": "0.2.2",
+        "description": "A replacement for process.exit that ensures stdio are fully drained before exiting.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:gruntjs:exit-x:0.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/exit-x@0.2.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/gruntjs/node-exit-x.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/gruntjs/node-exit-x",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:exit_x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit-x:exit-x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit-x:exit_x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit_x:exit-x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit_x:exit_x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit:exit-x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exit:exit_x:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/exit-x/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/expand-template@2.0.3?package-id=1308274036073bda",
+        "type": "library",
+        "author": "LM <ralphtheninja@riseup.net>",
+        "name": "expand-template",
+        "version": "2.0.3",
+        "description": "Expand placeholders in a template string",
+        "licenses": [
+          {
+            "expression": "MIT OR WTFPL"
+          }
+        ],
+        "cpe": "cpe:2.3:a:expand-template:expand-template:2.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/expand-template@2.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ralphtheninja/expand-template.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ralphtheninja/expand-template",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand-template:expand_template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand_template:expand-template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand_template:expand_template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ralphtheninja:expand-template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ralphtheninja:expand_template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand:expand-template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand:expand_template:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/expand-template/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/expand-tilde@2.0.2?package-id=bbefedd1ec4b8ed7",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "expand-tilde",
+        "version": "2.0.2",
+        "description": "Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:expand-tilde:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/expand-tilde@2.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/expand-tilde",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:expand_tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand-tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand-tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand_tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand_tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand:expand-tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:expand:expand_tilde:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/expand-tilde/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/exponential-backoff@3.1.3?package-id=88fb48899d371526",
+        "type": "library",
+        "author": "Sami Sayegh",
+        "name": "exponential-backoff",
+        "version": "3.1.3",
+        "description": "A utility that allows retrying a function with an exponential delay between attempts.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/exponential-backoff@3.1.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/coveooss/exponential-backoff.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/coveooss/exponential-backoff#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:coveooss:exponential-backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:coveooss:exponential_backoff:3.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/exponential-backoff/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/express@4.22.2?package-id=99208581103e7228",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>, Aaron Heckmann <aaron.heckmann+github@gmail.com>, Ciaran Jessup <ciaranj@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>, Guillermo Rauch <rauchg@gmail.com>, Jonathan Ong <me@jongleberry.com>, Roman Shtylman <shtylman+expressjs@gmail.com>, Young Jae Sim <hanul@hanul.me>",
+        "name": "express",
+        "version": "4.22.2",
+        "description": "Fast, unopinionated, minimalist web framework",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:openjsf:express:4.22.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/express@4.22.2",
+        "externalReferences": [
+          {
+            "url": "http://expressjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/express-ipfilter@1.4.0?package-id=7bce23118d035582",
+        "type": "library",
+        "author": "jetersen",
+        "name": "express-ipfilter",
+        "version": "1.4.0",
+        "description": "A light-weight IP address based filtering system",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:express-ipfilter:express-ipfilter:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/express-ipfilter@1.4.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jetersen/express-ipfilter",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express-ipfilter:express_ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_ipfilter:express-ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_ipfilter:express_ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jetersen:express-ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jetersen:express_ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express:express-ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express:express_ipfilter:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-ipfilter/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/express-jwt@0.1.3?package-id=b057e452c5702954",
+        "type": "library",
+        "author": "Matias Woloski <matias@auth0.com> (https://www.auth0.com/)",
+        "name": "express-jwt",
+        "version": "0.1.3",
+        "description": "JWT authentication middleware.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:auth0:express-jwt:0.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/express-jwt@0.1.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/auth0/express-jwt.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-jwt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/express-rate-limit@7.5.1?package-id=7b3c60ae93ab123f",
+        "type": "library",
+        "author": "Nathan Friedly (http://nfriedly.com/)",
+        "name": "express-rate-limit",
+        "version": "7.5.1",
+        "description": "Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:express-rate-limit:express-rate-limit:7.5.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/express-rate-limit@7.5.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/express-rate-limit/express-rate-limit.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/express-rate-limit/express-rate-limit",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-rate-limit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/express-robots-txt@0.5.0?package-id=fc0608b65fd469f7",
+        "type": "library",
+        "author": "modosc (http://github.com/modosc), ashaffer (http://github.com/ashaffer), ",
+        "name": "express-robots-txt",
+        "version": "0.5.0",
+        "description": "Express middleware to serve and generate robots.txt",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:express-robots-txt:express-robots-txt:0.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/express-robots-txt@0.5.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/modosc/express-robots-txt",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/modosc/express-robots-txt",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express-robots-txt:express_robots_txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_robots_txt:express-robots-txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_robots_txt:express_robots_txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express-robots:express-robots-txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express-robots:express_robots_txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_robots:express-robots-txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_robots:express_robots_txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express:express-robots-txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express:express_robots_txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:modosc:express-robots-txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:modosc:express_robots_txt:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-robots-txt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/express-security.txt@2.0.0?package-id=a5e9507bd21efb6e",
+        "type": "library",
+        "name": "express-security.txt",
+        "version": "2.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:express-security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/express-security.txt@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/gergelyke/express-security.txt.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/gergelyke/express-security.txt#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express-security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express_security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gergelyke:express-security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gergelyke:express_security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express:express-security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:express:express_security.txt:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-security.txt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ext-list@2.2.2?package-id=42eb35c00aa55cff",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "ext-list",
+        "version": "2.2.2",
+        "description": "List of known file extensions and their MIME types",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ext-list:ext-list:2.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ext-list@2.2.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext-list:ext_list:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext_list:ext-list:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext_list:ext_list:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext:ext-list:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext:ext_list:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ext-list/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ext-name@5.0.0?package-id=738d43aeb5b7acf8",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "ext-name",
+        "version": "5.0.0",
+        "description": "Get the file extension and MIME type from a file",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ext-name:ext-name:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ext-name@5.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext-name:ext_name:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext_name:ext-name:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext_name:ext_name:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext:ext-name:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ext:ext_name:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ext-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/extend@3.0.2?package-id=68ec8b67c7986d90",
+        "type": "library",
+        "author": "Stefan Thomas <justmoon@members.fsf.org> (http://www.justmoon.net), Jordan Harband (https://github.com/ljharb)",
+        "name": "extend",
+        "version": "3.0.2",
+        "description": "Port of jQuery.extend for node.js and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/extend@3.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/justmoon/node-extend.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/extend/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/false_main?package-id=3d00c14a77d4b177",
+        "type": "library",
+        "name": "false_main",
+        "version": "UNKNOWN",
+        "cpe": "cpe:2.3:a:false-main:false-main:*:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/false_main",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:false-main:false_main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:false_main:false-main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:false_main:false_main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:false:false-main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:false:false_main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/false_main/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fast.js@0.1.1?package-id=097fffa0302024b5",
+        "type": "library",
+        "author": "Charles Pick <charles@codemix.com>",
+        "name": "fast.js",
+        "version": "0.1.1",
+        "description": "Faster user-land reimplementations of native functions with extra helpers.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:codemix:fast.js:0.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fast.js@0.1.1",
+        "externalReferences": [
+          {
+            "url": "http://github.com/codemix/fast.js",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/codemix/fast.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fast.js:fast.js:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fast.js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fd-slicer@1.1.0?package-id=b27ace599789b7aa",
+        "type": "library",
+        "author": "Andrew Kelley <superjoe30@gmail.com>",
+        "name": "fd-slicer",
+        "version": "1.1.0",
+        "description": "safely create multiple ReadStream or WriteStream objects from the same file descriptor",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fd-slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fd-slicer@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/andrewrk/node-fd-slicer.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fd-slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fd_slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fd_slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:andrewrk:fd-slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:andrewrk:fd_slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fd:fd-slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fd:fd_slicer:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fd-slicer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fdir@6.5.0?package-id=153d959dba8cb29c",
+        "type": "library",
+        "author": "thecodrr <thecodrr@protonmail.com>",
+        "name": "fdir",
+        "version": "6.5.0",
+        "description": "The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fdir@6.5.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/thecodrr/fdir.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/thecodrr/fdir#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/feature-policy@0.6.0?package-id=d157c8b5d6cc7dce",
+        "type": "library",
+        "author": "Evan Hahn <me@evanhahn.com> (https://evanhahn.com)",
+        "name": "feature-policy",
+        "version": "0.6.0",
+        "description": "Middleware to set the Feature-Policy HTTP header",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:feature-policy:feature-policy:0.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/feature-policy@0.6.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/helmetjs/feature-policy.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/helmetjs/feature-policy",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feature-policy:feature_policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feature_policy:feature-policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feature_policy:feature_policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:helmetjs:feature-policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:helmetjs:feature_policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feature:feature-policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feature:feature_policy:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/feature-policy/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fecha@4.2.3?package-id=4c7f9896237220f1",
+        "type": "library",
+        "author": "Taylor Hakes",
+        "name": "fecha",
+        "version": "4.2.3",
+        "description": "Date formatting and parsing",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:taylorhakes:fecha:4.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fecha@4.2.3",
+        "externalReferences": [
+          {
+            "url": "https://taylorhakes@github.com/taylorhakes/fecha.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/taylorhakes/fecha",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fecha:fecha:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fecha/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-stream-rotator@1.0.0?package-id=15f34f70f0b92af7",
+        "type": "library",
+        "author": "Roger Castells",
+        "name": "file-stream-rotator",
+        "version": "1.0.0",
+        "description": "Automated stream rotation useful for log files",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:file-stream-rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/file-stream-rotator@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/rogerc/file-stream-rotator.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-stream-rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_stream_rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_stream_rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rogerc:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rogerc:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/file-stream-rotator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@11.1.0?package-id=67d7e8ff46ed8cb6",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "file-type",
+        "version": "11.1.0",
+        "description": "Detect the file type of a Buffer/Uint8Array/ArrayBuffer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:11.1.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@11.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/download/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@16.5.4?package-id=e880d91c1999c011",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "file-type",
+        "version": "16.5.4",
+        "description": "Detect the file type of a Buffer/Uint8Array/ArrayBuffer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:16.5.4:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@16.5.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@3.9.0?package-id=2fb960c1da2a5460",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "file-type",
+        "version": "3.9.0",
+        "description": "Detect the file type of a Buffer/Uint8Array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:3.9.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@3.9.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@4.4.0?package-id=e058a6a6b902e7b6",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "file-type",
+        "version": "4.4.0",
+        "description": "Detect the file type of a Buffer/Uint8Array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:4.4.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@4.4.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archive-type/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@5.2.0?package-id=fe078f258a41aa0a",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "file-type",
+        "version": "5.2.0",
+        "description": "Detect the file type of a Buffer/Uint8Array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:5.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@5.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@5.2.0?package-id=fe9dadf27623df81",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "file-type",
+        "version": "5.2.0",
+        "description": "Detect the file type of a Buffer/Uint8Array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:5.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@5.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-type@6.2.0?package-id=ac71d0dd845ff856",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "file-type",
+        "version": "6.2.0",
+        "description": "Detect the file type of a Buffer/Uint8Array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sindresorhus:file-type:6.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/file-type@6.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/file-uri-to-path@1.0.0?package-id=8e20623301b2c459",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "file-uri-to-path",
+        "version": "1.0.0",
+        "description": "Convert a file: URI to a file path",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/file-uri-to-path@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/file-uri-to-path.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/TooTallNate/file-uri-to-path",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-uri-to-path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_uri_to_path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_uri_to_path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-uri-to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-uri-to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_uri_to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_uri_to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file-uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file_uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:file:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/file-uri-to-path/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/filename-reserved-regex@2.0.0?package-id=9f4d2bdf1bb829e5",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "filename-reserved-regex",
+        "version": "2.0.0",
+        "description": "Regular expression for matching reserved filename characters",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:filename-reserved-regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/filename-reserved-regex@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename-reserved-regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename_reserved_regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename_reserved_regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename-reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename-reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename_reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename_reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:filename:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/filename-reserved-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/filenamify@3.0.0?package-id=14ccb7336c2a219a",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "filenamify",
+        "version": "3.0.0",
+        "description": "Convert a string to a valid safe filename",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:filenamify:filenamify:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/filenamify@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/filenamify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fill-range@7.1.1?package-id=cc2dfc20694f22cb",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com), Rouven Weßling (www.rouvenwessling.de), ",
+        "name": "fill-range",
+        "version": "7.1.1",
+        "description": "Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:fill-range:7.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fill-range@7.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/fill-range",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:fill_range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fill-range/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/finale-rest@1.2.2?package-id=0081831c03dd4ad6",
+        "type": "library",
+        "author": "Tom Juszczyk <tomkj4@gmail.com>, Matt Broadstone <mbroadst@gmail.com>, David Chester <dchester@shutterstock.com>, Renzo Rozza Gonzalez <renzo.rozza@gmail.com>",
+        "name": "finale-rest",
+        "version": "1.2.2",
+        "description": "Create REST resources and controllers with Sequelize and Express or Restify",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tommybananas:finale-rest:1.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/finale-rest@1.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/tommybananas/finale.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tommybananas:finale_rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:finale-rest:finale-rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:finale-rest:finale_rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:finale_rest:finale-rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:finale_rest:finale_rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:finale:finale-rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:finale:finale_rest:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/finale-rest/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/finalhandler@1.3.2?package-id=6905017da79206c8",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "finalhandler",
+        "version": "1.3.2",
+        "description": "Node.js final http responder",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:finalhandler:finalhandler:1.3.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/finalhandler@1.3.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/finalhandler/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/find-up@4.1.0?package-id=3413282984ba957b",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "find-up",
+        "version": "4.1.0",
+        "description": "Find a file or directory by walking up parent directories",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/find-up@4.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:find-up:find_up:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:find_up:find-up:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:find_up:find_up:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:find:find-up:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:find:find_up:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/find-up/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/findup-sync@4.0.0?package-id=6a5e9cbc54d4e98e",
+        "type": "library",
+        "author": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/), Ben Alman <cowboy@rj3.net>, Tyler Kellen <tyler@sleekcode.net>, Jon Schlinkert <jon.schlinkert@sellside.com>, Blaine Bublitz <blaine.bublitz@gmail.com>",
+        "name": "findup-sync",
+        "version": "4.0.0",
+        "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:findup-sync:findup-sync:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/findup-sync@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup-sync:findup_sync:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup_sync:findup-sync:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup_sync:findup_sync:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup:findup-sync:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup:findup_sync:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/findup-sync@5.0.0?package-id=0c79bed4d968f86a",
+        "type": "library",
+        "author": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/), Ben Alman <cowboy@rj3.net>, Tyler Kellen <tyler@sleekcode.net>, Jon Schlinkert <jon.schlinkert@sellside.com>, Blaine Bublitz <blaine.bublitz@gmail.com>",
+        "name": "findup-sync",
+        "version": "5.0.0",
+        "description": "Find the first file matching a given pattern in the current directory or the nearest ancestor directory.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:findup-sync:findup-sync:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/findup-sync@5.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup-sync:findup_sync:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup_sync:findup-sync:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup_sync:findup_sync:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup:findup-sync:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:findup:findup_sync:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/findup-sync/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fined@1.2.0?package-id=d4103ef83c6d123b",
+        "type": "library",
+        "author": "Gulp Team <team@gulpjs.com> (http://gulpjs.com/), Takayuki Sato <sttk.xslet@gmail.com>, Blaine Bublitz <blaine.bublitz@gmail.com>",
+        "name": "fined",
+        "version": "1.2.0",
+        "description": "Find a file given a declaration of locations.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fined:fined:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fined@1.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fined/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/flagged-respawn@1.0.1?package-id=cb10ed4f13e99eda",
+        "type": "library",
+        "author": "Gulp Team <team@gulpjs.com> (http://gulpjs.com/), Takayuki Sato <sttk.xslet@gmail.com>, Bertrand Marron <bertrand.marron@ionisx.com>, Tyler Kellen <tyler@sleekcode.net>, Blaine Bublitz <blaine.bublitz@gmail.com>",
+        "name": "flagged-respawn",
+        "version": "1.0.1",
+        "description": "A tool for respawning node binaries when special flags are present.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:flagged-respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/flagged-respawn@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:flagged-respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:flagged_respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:flagged_respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:flagged:flagged-respawn:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:flagged:flagged_respawn:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/flagged-respawn/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fn.name@1.1.0?package-id=b0ab3f38f00f9e67",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "fn.name",
+        "version": "1.1.0",
+        "description": "Extract names from functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:3rd-Eden:fn.name:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fn.name@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/3rd-Eden/fn.name",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/3rd-Eden/fn.name",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fn.name:fn.name:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fn.name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fontkit@1.9.0?package-id=4d71c5f55dc211a8",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "fontkit",
+        "version": "1.9.0",
+        "description": "An advanced font engine for Node and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:foliojs:fontkit:1.9.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fontkit@1.9.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/foliojs/fontkit.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fontkit:fontkit:1.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fontkit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/for-each@0.3.5?package-id=a555afc10b78c8e9",
+        "type": "library",
+        "author": "Raynos <raynos2@gmail.com>, Jake Verbaten, Jordan Harband (https://github.com/ljharb)",
+        "name": "for-each",
+        "version": "0.3.5",
+        "description": "A better forEach",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:for-each:for-each:0.3.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/for-each@0.3.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Raynos/for-each.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Raynos/for-each",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for-each:for_each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for_each:for-each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for_each:for_each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Raynos:for-each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Raynos:for_each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for:for-each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for:for_each:0.3.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/for-each/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/for-in@1.0.2?package-id=967e44e4af521888",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert), Paul Irish (http://paulirish.com)",
+        "name": "for-in",
+        "version": "1.0.2",
+        "description": "Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:for-in:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/for-in@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/for-in",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:for_in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for-in:for-in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for-in:for_in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for_in:for-in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for_in:for_in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for:for-in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for:for_in:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/for-in/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/for-own@1.0.0?package-id=411a3440348fb71b",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Javier Cejudo <javier@javiercejudo.com> (https://www.javiercejudo.com), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert)",
+        "name": "for-own",
+        "version": "1.0.0",
+        "description": "Iterate over the own enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:for-own:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/for-own@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/for-own",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:for_own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for-own:for-own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for-own:for_own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for_own:for-own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for_own:for_own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for:for-own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:for:for_own:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/for-own/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/foreachasync@3.0.0?package-id=386d38aff1a706fc",
+        "type": "library",
+        "author": "AJ ONeal <coolaj86@gmail.com> (http://coolaj86.com/)",
+        "name": "foreachasync",
+        "version": "3.0.0",
+        "description": "A node- and browser-ready async counterpart of Array.prototype.forEach",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:foreachasync:foreachasync:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/foreachasync@3.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/FuturesJS/forEachAsync.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/FuturesJS/forEachAsync",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:FuturesJS:foreachasync:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/foreachasync/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/foreground-child@3.3.1?package-id=49b05c8a83bc898e",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "foreground-child",
+        "version": "3.3.1",
+        "description": "Run a child as if it's the foreground process. Give it stdio. Exit when it exits.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/foreground-child@3.3.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/tapjs/foreground-child.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/foreground-child/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/forwarded@0.2.0?package-id=cf9f575adc30e843",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "forwarded",
+        "version": "0.2.0",
+        "description": "Parse HTTP X-Forwarded-For header",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/forwarded@0.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/forwarded/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fresh@0.5.2?package-id=c33f6af8ffbc3ffd",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "fresh",
+        "version": "0.5.2",
+        "description": "HTTP response freshness testing",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/fresh@0.5.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fresh/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/from2@2.3.0?package-id=f049b24706a2c914",
+        "type": "library",
+        "author": "Hugh Kennedy <hughskennedy@gmail.com> (http://hughsk.io/), Mathias Buus <mathiasbuus@gmail.com>",
+        "name": "from2",
+        "version": "2.3.0",
+        "description": "Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/from2@2.3.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/hughsk/from2",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/hughsk/from2",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:from2:from2:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/from2/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/frontend@20.0.0?package-id=820ce7954665253b",
+        "type": "library",
+        "name": "frontend",
+        "version": "20.0.0",
+        "cpe": "cpe:2.3:a:frontend:frontend:20.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/frontend@20.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/frontend/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fs-constants@1.0.0?package-id=702abc5d79be7e46",
+        "type": "library",
+        "author": "Mathias Buus (@mafintosh)",
+        "name": "fs-constants",
+        "version": "1.0.0",
+        "description": "Require constants across node and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fs-constants@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mafintosh/fs-constants.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mafintosh/fs-constants",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs-constants:fs_constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_constants:fs-constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_constants:fs_constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:fs-constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:fs_constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs-constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs_constants:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fs-constants/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fs-extra@9.1.0?package-id=59256da7fb4a7586",
+        "type": "library",
+        "author": "JP Richardson <jprichardson@gmail.com>",
+        "name": "fs-extra",
+        "version": "9.1.0",
+        "description": "fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jprichardson:fs-extra:9.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fs-extra@9.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jprichardson/node-fs-extra",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/jprichardson/node-fs-extra",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jprichardson:fs_extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs-extra:fs-extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs-extra:fs_extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_extra:fs-extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_extra:fs_extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs-extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs_extra:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fs-extra/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fs-minipass@1.2.7?package-id=d8cf35e6758fddb2",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "fs-minipass",
+        "version": "1.2.7",
+        "description": "fs read and write streams based on minipass",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fs-minipass@1.2.7",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/fs-minipass.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/fs-minipass#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs-minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fs-minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fs_minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs-minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs_minipass:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fs-minipass@2.1.0?package-id=34b0337b00752017",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "fs-minipass",
+        "version": "2.1.0",
+        "description": "fs read and write streams based on minipass",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fs-minipass@2.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/fs-minipass.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/fs-minipass#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs-minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fs-minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fs_minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs-minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs_minipass:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fs-minipass@3.0.3?package-id=ddb32fc1590fd08c",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "fs-minipass",
+        "version": "3.0.3",
+        "description": "fs read and write streams based on minipass",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fs-minipass@3.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/fs-minipass.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/fs-minipass#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fs-minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fs.realpath@1.0.0?package-id=5215a4272ae071b5",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "fs.realpath",
+        "version": "1.0.0",
+        "description": "Use node's fs.realpath, but fall back to the JS implementation if the native one fails",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fs.realpath@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/fs.realpath.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fs.realpath/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/fstream@1.0.12?package-id=a2282a5fe21d6573",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "fstream",
+        "version": "1.0.12",
+        "description": "Advanced file system stream things",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/fstream@1.0.12",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/fstream.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:fstream:1.0.12:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/fstream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/function-bind@1.1.2?package-id=e034b9e16a017cc2",
+        "type": "library",
+        "author": "Raynos <raynos2@gmail.com>, Raynos, Jordan Harband (https://github.com/ljharb)",
+        "name": "function-bind",
+        "version": "1.1.2",
+        "description": "Implementation of Function.prototype.bind",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/function-bind@1.1.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Raynos/function-bind.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Raynos/function-bind",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Raynos:function-bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Raynos:function_bind:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/function-bind/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/functions-have-names@1.2.3?package-id=b2e38e0035342c0b",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "functions-have-names",
+        "version": "1.2.3",
+        "description": "Does this JS environment support the `name` property on functions?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:functions-have-names:functions-have-names:1.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/functions-have-names@1.2.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/functions-have-names.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/functions-have-names#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions-have-names:functions_have_names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions_have_names:functions-have-names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions_have_names:functions_have_names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions-have:functions-have-names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions-have:functions_have_names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions_have:functions-have-names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions_have:functions_have_names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:functions-have-names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:functions_have_names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions:functions-have-names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:functions:functions_have_names:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/functions-have-names/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/gauge@2.7.4?package-id=d33d667d43d843b2",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org>",
+        "name": "gauge",
+        "version": "2.7.4",
+        "description": "A terminal based horizontal guage",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/gauge@2.7.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/gauge",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/gauge",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:gauge:2.7.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/gauge/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/gauge@4.0.4?package-id=3ebce6a81a69f49f",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "gauge",
+        "version": "4.0.4",
+        "description": "A terminal based horizontal gauge",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/gauge@4.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/gauge.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/gauge",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:gauge:4.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14",
+        "type": "library",
+        "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
+        "name": "gcc-14-base",
+        "version": "14.2.0-19",
+        "licenses": [
+          {
+            "license": {
+              "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:gcc-14-base:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc-14-base:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc_14_base:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc_14_base:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc-14:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc-14:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc_14:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc_14:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gcc:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/gcc-14-base"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/gcc-14-base/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/gcc-14-base.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "112"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "gcc-14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/geojson-utils@1.1.0?package-id=ad6fe893f4863fc3",
+        "type": "library",
+        "author": "Max Ogden",
+        "name": "geojson-utils",
+        "version": "1.1.0",
+        "description": "GeoJSON Utilities for JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:geojson-utils:geojson-utils:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/geojson-utils@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/maxogden/geojson-js-utils.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:geojson-utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:geojson_utils:geojson-utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:geojson_utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:maxogden:geojson-utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:maxogden:geojson_utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:geojson:geojson-utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:geojson:geojson_utils:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/geojson-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-caller-file@2.0.5?package-id=546d53bc24510f43",
+        "type": "library",
+        "author": "Stefan Penner",
+        "name": "get-caller-file",
+        "version": "2.0.5",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-caller-file@2.0.5",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/stefanpenner/get-caller-file.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/stefanpenner/get-caller-file#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-caller-file:get_caller_file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_caller_file:get-caller-file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_caller_file:get_caller_file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stefanpenner:get-caller-file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stefanpenner:get_caller_file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-caller-file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_caller_file:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/get-caller-file/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-intrinsic@1.3.0?package-id=fd30384e3e731beb",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "get-intrinsic",
+        "version": "1.3.0",
+        "description": "Get and robustly cache all JS language-level intrinsics at first require time",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-intrinsic@1.3.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/get-intrinsic.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/get-intrinsic#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/get-intrinsic/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-proto@1.0.1?package-id=f140446776201e12",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "get-proto",
+        "version": "1.0.1",
+        "description": "Robustly get the [[Prototype]] of an object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-proto@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/get-proto.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/get-proto#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:get-proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:get_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/get-proto/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-stream@2.3.1?package-id=2cd76cc08fac13f8",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "get-stream",
+        "version": "2.3.1",
+        "description": "Get a stream as a string, buffer, or array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-stream:get-stream:2.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-stream@2.3.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-stream:get_stream:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get-stream:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get_stream:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-stream:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_stream:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=529f1c9fb766b433",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "get-stream",
+        "version": "3.0.0",
+        "description": "Get a stream as a string, buffer, or array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-stream@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-stream@3.0.0?package-id=a688b423aa001971",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "get-stream",
+        "version": "3.0.0",
+        "description": "Get a stream as a string, buffer, or array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-stream@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/got/node_modules/get-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/get-stream@4.1.0?package-id=09ae98551bcf5cd8",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "get-stream",
+        "version": "4.1.0",
+        "description": "Get a stream as a string, buffer, or array",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:get-stream:get-stream:4.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/get-stream@4.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get-stream:get_stream:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get-stream:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get_stream:get_stream:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get-stream:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:get:get_stream:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/get-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/getobject@1.0.2?package-id=206b7d3d675e4f94",
+        "type": "library",
+        "author": "\"Cowboy\" Ben Alman (http://benalman.com/)",
+        "name": "getobject",
+        "version": "1.0.2",
+        "description": "get.and.set.deep.objects.easily = true",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:getobject_project:getobject:1.0.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/getobject@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/cowboy/node-getobject.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/cowboy/node-getobject",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/getobject/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/github-from-package@0.0.0?package-id=9021b88a5ab51ee3",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "github-from-package",
+        "version": "0.0.0",
+        "description": "return the github url from a package.json file",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/github-from-package@0.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/substack/github-from-package.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/substack/github-from-package",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github-from-package:github_from_package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github_from_package:github-from-package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github_from_package:github_from_package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github-from:github-from-package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github-from:github_from_package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github_from:github-from-package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github_from:github_from_package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:substack:github-from-package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:substack:github_from_package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github:github-from-package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:github:github_from_package:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/github-from-package/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@10.5.0?package-id=d3e87b073555ed11",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)",
+        "name": "glob",
+        "version": "10.5.0",
+        "description": "the most correct and second fastest glob implementation in JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:10.5.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@10.5.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@7.1.7?package-id=0ff063b9149f88f9",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "glob",
+        "version": "7.1.7",
+        "description": "a little globber",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:7.1.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@7.1.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@7.2.3?package-id=ffb7ca9150502f5a",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "glob",
+        "version": "7.2.3",
+        "description": "a little globber",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@7.2.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@npmcli/move-file/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@7.2.3?package-id=cb1579e0fac84290",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "glob",
+        "version": "7.2.3",
+        "description": "a little globber",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@7.2.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@7.2.3?package-id=e2fd343720beab4f",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "glob",
+        "version": "7.2.3",
+        "description": "a little globber",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@7.2.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/archiver/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@7.2.3?package-id=acbfd4a89a1d4104",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "glob",
+        "version": "7.2.3",
+        "description": "a little globber",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@7.2.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/rimraf/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/glob@7.2.3?package-id=48e2cd171ff40be3",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "glob",
+        "version": "7.2.3",
+        "description": "a little globber",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/glob@7.2.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-glob.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/global-modules@1.0.0?package-id=e51c05cfa6a53954",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Kiko Beats (https://kikobeats.com)",
+        "name": "global-modules",
+        "version": "1.0.0",
+        "description": "The directory used by npm for globally installed npm modules.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:global-modules:global-modules:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/global-modules@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/global-modules",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global-modules:global_modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global_modules:global-modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global_modules:global_modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:global-modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:global_modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global:global-modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global:global_modules:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/global-modules/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/global-prefix@1.0.2?package-id=214a6e1e9476a5ef",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Alexandr Bogachev (https://github.com/rmbaad), Brian Woodward (https://twitter.com/doowb), Charlike Mike Reagent (https://i.am.charlike.online), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Jorrit Schippers (https://www.ncode.nl), Mathias Rasmussen (chrome://dino), Ross Fenning (http://rossfenning.co.uk)",
+        "name": "global-prefix",
+        "version": "1.0.2",
+        "description": "Get the npm global path prefix.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:global-prefix:global-prefix:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/global-prefix@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/global-prefix",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global-prefix:global_prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global_prefix:global-prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global_prefix:global_prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:global-prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:global_prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global:global-prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:global:global_prefix:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/global-prefix/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/gopd@1.2.0?package-id=83baf5c5b6922e77",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "gopd",
+        "version": "1.2.0",
+        "description": "`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ljharb:gopd:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/gopd@1.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/gopd.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/gopd#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/gopd/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/got@8.3.2?package-id=5bd1b0995776246c",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop), Alexander Tesfamichael <alex.tesfamichael@gmail.com> (alextes.me)",
+        "name": "got",
+        "version": "8.3.2",
+        "description": "Simplified HTTP requests",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:got:got:8.3.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/got@8.3.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/got/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/graceful-fs@4.2.11?package-id=efbe6f20b1abe3a8",
+        "type": "library",
+        "name": "graceful-fs",
+        "version": "4.2.11",
+        "description": "A drop-in replacement for fs, making various improvements.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/graceful-fs@4.2.11",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/node-graceful-fs",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/graceful-fs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt@1.6.2?package-id=51e33e1c59426225",
+        "type": "library",
+        "author": "Grunt Development Team (https://gruntjs.com/development-team)",
+        "name": "grunt",
+        "version": "1.6.2",
+        "description": "The JavaScript Task Runner",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:gruntjs:grunt:1.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt@1.6.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/gruntjs/grunt.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://gruntjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-cli@1.5.0?package-id=97f188b93d04dfa6",
+        "type": "library",
+        "author": "Grunt Development Team (http://gruntjs.com/development-team)",
+        "name": "grunt-cli",
+        "version": "1.5.0",
+        "description": "The grunt command line interface",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-cli:grunt-cli:1.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-cli@1.5.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-cli:grunt_cli:1.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_cli:grunt-cli:1.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_cli:grunt_cli:1.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-cli:1.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_cli:1.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-cli/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-contrib-compress@1.6.0?package-id=96ee58510e0b9ecc",
+        "type": "library",
+        "author": "Grunt Team (http://gruntjs.com/)",
+        "name": "grunt-contrib-compress",
+        "version": "1.6.0",
+        "description": "Compress files and folders",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-contrib-compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-contrib-compress@1.6.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-contrib-compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_contrib_compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_contrib_compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-known-options@2.0.0?package-id=91f0ef5736e3a948",
+        "type": "library",
+        "author": "Grunt Development Team (http://gruntjs.com/development-team)",
+        "name": "grunt-known-options",
+        "version": "2.0.0",
+        "description": "The known options used in Grunt",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-known-options:grunt-known-options:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-known-options@2.0.0",
+        "externalReferences": [
+          {
+            "url": "http://gruntjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-known-options:grunt_known_options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_known_options:grunt-known-options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_known_options:grunt_known_options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-known:grunt-known-options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-known:grunt_known_options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_known:grunt-known-options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_known:grunt_known_options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-known-options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_known_options:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-known-options/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-legacy-log@3.0.1?package-id=9d59ea0b5bec4707",
+        "type": "library",
+        "author": "\"Cowboy\" Ben Alman (http://benalman.com/)",
+        "name": "grunt-legacy-log",
+        "version": "3.0.1",
+        "description": "The Grunt 0.4.x logger.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-legacy-log:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-legacy-log@3.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/gruntjs/grunt-legacy-log.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://gruntjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy-log:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_log:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_log:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-legacy-log-utils@2.1.3?package-id=df0bb8b3f95a0d4e",
+        "type": "library",
+        "author": "\"Cowboy\" Ben Alman (http://benalman.com/)",
+        "name": "grunt-legacy-log-utils",
+        "version": "2.1.3",
+        "description": "Static methods for the Grunt 0.4.x logger.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-legacy-log-utils:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-legacy-log-utils@2.1.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/gruntjs/grunt-legacy-log-utils.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://gruntjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy-log-utils:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_log_utils:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_log_utils:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy-log:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy-log:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_log:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_log:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-legacy-util@2.0.2?package-id=953128f9ed466782",
+        "type": "library",
+        "author": "Grunt Development Team (https://gruntjs.com/development-team)",
+        "name": "grunt-legacy-util",
+        "version": "2.0.2",
+        "description": "Some old grunt utils provided for backwards compatibility.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-legacy-util:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-legacy-util@2.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/gruntjs/grunt-legacy-util.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://gruntjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy-util:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_util:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy_util:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-legacy:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_legacy:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:gruntjs:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-util/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/grunt-replace-json@0.1.0?package-id=33dc445c60254c99",
+        "type": "library",
+        "author": "Agustin Croce <agustinc@exo.com.ar>",
+        "name": "grunt-replace-json",
+        "version": "0.1.0",
+        "description": "Updates attributes of json files.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:grunt-replace-json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/grunt-replace-json@0.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/exo-dev/grunt-replace-json.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/exo-dev/grunt-replace-json",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-replace-json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_replace_json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_replace_json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt-replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt_replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exo-dev:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:exo-dev:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:grunt:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-replace-json/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/handlebars@4.7.9?package-id=f8594aa67de6f0a7",
+        "type": "library",
+        "author": "Yehuda Katz",
+        "name": "handlebars",
+        "version": "4.7.9",
+        "description": "Handlebars provides the power necessary to let you build semantic templates effectively with no frustration",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:handlebars.js_project:handlebars.js:4.7.9:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/handlebars@4.7.9",
+        "externalReferences": [
+          {
+            "url": "https://github.com/handlebars-lang/handlebars.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://handlebarsjs.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:handlebarsjs:handlebars:4.7.9:*:*:*:*:node.js:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/handlebars/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-ansi@2.0.0?package-id=e42b36bf3b02ccb2",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com)",
+        "name": "has-ansi",
+        "version": "2.0.0",
+        "description": "Check if a string has ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-ansi@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_ansi:has-ansi:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-ansi:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_ansi:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-bigints@1.1.0?package-id=71687501ff0fe52a",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "has-bigints",
+        "version": "1.1.0",
+        "description": "Determine if the JS environment has BigInt support.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-bigints:has-bigints:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-bigints@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/has-bigints.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/has-bigints#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_bigints:has-bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:has-bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:has_bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_bigints:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-bigints/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-flag@3.0.0?package-id=3d7118b6bb8495c1",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "has-flag",
+        "version": "3.0.0",
+        "description": "Check if argv has a specific flag",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-flag@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-flag:has_flag:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_flag:has-flag:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_flag:has_flag:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-flag:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_flag:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-flag/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-flag@4.0.0?package-id=886bedfa751a610e",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "has-flag",
+        "version": "4.0.0",
+        "description": "Check if argv has a specific flag",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-flag@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-flag:has_flag:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_flag:has-flag:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_flag:has_flag:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-flag:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_flag:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-property-descriptors@1.0.2?package-id=8da3543c9f5d677c",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "has-property-descriptors",
+        "version": "1.0.2",
+        "description": "Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-property-descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-property-descriptors@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/has-property-descriptors.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/has-property-descriptors#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-property-descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_property_descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_property_descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-property-descriptors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-symbol-support-x@1.4.2?package-id=9cdc3fbb4c69858e",
+        "type": "library",
+        "author": "Graham Fairweather <xotic750@gmail.com>",
+        "name": "has-symbol-support-x",
+        "version": "1.4.2",
+        "description": "Tests if ES6 Symbol is supported.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-symbol-support-x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-symbol-support-x@1.4.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Xotic750/has-symbol-support-x.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Xotic750/has-symbol-support-x",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-symbol-support-x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbol_support_x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbol_support_x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-symbol-support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-symbol-support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbol_support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbol_support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Xotic750:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Xotic750:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-symbol-support-x/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-symbols@1.1.0?package-id=d11db59abbaaff57",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "has-symbols",
+        "version": "1.1.0",
+        "description": "Determine if the JS environment has Symbol support. Supports spec, or shams.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-symbols@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/has-symbols.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/has-symbols#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:has-symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:has_symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:has-symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:has_symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-symbols/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-to-string-tag-x@1.4.1?package-id=57099c5b40b3237c",
+        "type": "library",
+        "author": "Graham Fairweather <xotic750@gmail.com>",
+        "name": "has-to-string-tag-x",
+        "version": "1.4.1",
+        "description": "Tests if ES6 @@toStringTag is supported.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-to-string-tag-x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-to-string-tag-x@1.4.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Xotic750/has-to-string-tag-x.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Xotic750/has-to-string-tag-x",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to-string-tag-x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to_string_tag_x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to_string_tag_x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to-string-tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to-string-tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to_string_tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to_string_tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to-string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to-string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to_string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to_string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Xotic750:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Xotic750:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-to-string-tag-x/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-tostringtag@1.0.2?package-id=e022fba37335d6bc",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "has-tostringtag",
+        "version": "1.0.2",
+        "description": "Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-tostringtag@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/has-tostringtag.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/has-tostringtag#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-tostringtag/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/has-unicode@2.0.1?package-id=3e71117dc4558f9f",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org>",
+        "name": "has-unicode",
+        "version": "2.0.1",
+        "description": "Try to guess if your terminal supports unicode",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/has-unicode@2.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/has-unicode",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/has-unicode",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:has-unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:has_unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/has-unicode/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/hashids@2.3.0?package-id=89162caca8f9959a",
+        "type": "library",
+        "author": "hashids.org <npm@invent.life> (https://github.com/hashids), Ivan Akimov <ivan@barreleye.com> (https://twitter.com/IvanAkimov), Bazyli Brzóska <npm@invent.life> (https://twitter.com/niieani)",
+        "name": "hashids",
+        "version": "2.3.0",
+        "description": "Generate YouTube-like ids from numbers. Use Hashids when you do not want to expose your database ids to the user.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:hashids:hashids:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/hashids@2.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/niieani/hashids.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://hashids.org/javascript",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:niieani:hashids:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/hashids/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/hashids-esm?package-id=4d7ad7732dcf2924",
+        "type": "library",
+        "name": "hashids-esm",
+        "version": "UNKNOWN",
+        "cpe": "cpe:2.3:a:hashids-esm:hashids-esm:*:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/hashids-esm",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hashids-esm:hashids_esm:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hashids_esm:hashids-esm:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hashids_esm:hashids_esm:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hashids:hashids-esm:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hashids:hashids_esm:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/hashids/esm/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/hasown@2.0.3?package-id=789dc183e76e3e9f",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "hasown",
+        "version": "2.0.3",
+        "description": "A robust, ES3 compatible, \"has own property\" predicate.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:hasown:2.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/hasown@2.0.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/hasOwn.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/hasOwn#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hasown:hasown:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/hasown/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/hbs@4.2.1?package-id=2f82f49c0edfe08d",
+        "type": "library",
+        "author": "Don Park <donpark@docuverse.com> (http://blog.docuverse.com), Roman Shtylman <shtylman@gmail.com>",
+        "name": "hbs",
+        "version": "4.2.1",
+        "description": "Express.js template engine plugin for Handlebars",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:hbs_project:hbs:4.2.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/hbs@4.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/hbs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/he@0.4.1?package-id=c1acb688ae0eb8a3",
+        "type": "library",
+        "author": "Mathias Bynens (http://mathiasbynens.be/)",
+        "name": "he",
+        "version": "0.4.1",
+        "description": "A robust HTML entities encoder/decoder with full Unicode support.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mathiasbynens:he:0.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/he@0.4.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mathiasbynens/he.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://mths.be/he",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:he:he:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/he/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/helmet@4.6.0?package-id=78e8bd8351bc0a93",
+        "type": "library",
+        "author": "Adam Baldwin <adam@npmjs.com> (https://evilpacket.net), Evan Hahn <me@evanhahn.com> (https://evanhahn.com), Ameen Abdeen <ameen.abdeen.se@gmail.com>",
+        "name": "helmet",
+        "version": "4.6.0",
+        "description": "help secure Express/Connect apps with various HTTP headers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:helmetjs:helmet:4.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/helmet@4.6.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/helmetjs/helmet.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://helmetjs.github.io/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:helmet:helmet:4.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/helmet/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/hoister@0.0.2?package-id=2a78cde116b73996",
+        "type": "library",
+        "author": "Matt McKegg",
+        "name": "hoister",
+        "version": "0.0.2",
+        "description": "Put all function and variable declarations at the top of the scope in an AST",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:hoister:hoister:0.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/hoister@0.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mmckegg/hoister.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mmckegg:hoister:0.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/hoister/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/homedir-polyfill@1.0.3?package-id=8fe8e9465b9662f0",
+        "type": "library",
+        "author": "Brian Woodward (https://github.com/doowb)",
+        "name": "homedir-polyfill",
+        "version": "1.0.3",
+        "description": "Node.js os.homedir polyfill for older versions of node.js.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:homedir-polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/homedir-polyfill@1.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/doowb/homedir-polyfill",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:homedir-polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:homedir_polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:homedir_polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:homedir:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:homedir:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:doowb:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:doowb:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/homedir-polyfill/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/hooker@0.2.3?package-id=6e5642e695422045",
+        "type": "library",
+        "author": "\"Cowboy\" Ben Alman (http://benalman.com/)",
+        "name": "hooker",
+        "version": "0.2.3",
+        "description": "Monkey-patch (hook) functions for debugging and stuff.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cowboy:hooker:0.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/hooker@0.2.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/cowboy/javascript-hooker.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://github.com/cowboy/javascript-hooker",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:hooker:hooker:0.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/hooker/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/html-entities@1.4.0?package-id=351099be57f5afec",
+        "type": "library",
+        "author": "Marat Dulin <mdevils@yandex.ru>",
+        "name": "html-entities",
+        "version": "1.4.0",
+        "description": "Faster HTML entities encode/decode library.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:html-entities:html-entities:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/html-entities@1.4.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mdevils/node-html-entities.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:html-entities:html_entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:html_entities:html-entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:html_entities:html_entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mdevils:html-entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mdevils:html_entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:html:html-entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:html:html_entities:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/html-entities/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/htmlparser2@3.3.0?package-id=00e058af6a435f1c",
+        "type": "library",
+        "author": "Felix Boehm <me@feedic.com>, Chris Winberry <chris@winberry.net>",
+        "name": "htmlparser2",
+        "version": "3.3.0",
+        "description": "Fast & forgiving HTML/XML/RSS parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:htmlparser2:htmlparser2:3.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/htmlparser2@3.3.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/fb55/htmlparser2.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:fb55:htmlparser2:3.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-cache-semantics@3.8.1?package-id=bd9e0a0c5346494e",
+        "type": "library",
+        "author": "Kornel Lesiński <kornel@geekhood.net> (https://kornel.ski/)",
+        "name": "http-cache-semantics",
+        "version": "3.8.1",
+        "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:3.8.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/http-cache-semantics@3.8.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pornel/http-cache-semantics.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/http-cache-semantics/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=d0af3fbe4ae8a36c",
+        "type": "library",
+        "author": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)",
+        "name": "http-cache-semantics",
+        "version": "4.2.0",
+        "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/http-cache-semantics@4.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/kornelski/http-cache-semantics.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-cache-semantics@4.2.0?package-id=2a408450d3d46b54",
+        "type": "library",
+        "author": "Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)",
+        "name": "http-cache-semantics",
+        "version": "4.2.0",
+        "description": "Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/http-cache-semantics@4.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/kornelski/http-cache-semantics.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-errors@1.8.1?package-id=60acca32325951a0",
+        "type": "library",
+        "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Alan Plum <me@pluma.io>, Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "http-errors",
+        "version": "1.8.1",
+        "description": "Create HTTP error objects",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-errors:http-errors:1.8.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/http-errors@1.8.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-errors:http_errors:1.8.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_errors:http-errors:1.8.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_errors:http_errors:1.8.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http-errors:1.8.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http_errors:1.8.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-errors@2.0.1?package-id=de028e640c98e008",
+        "type": "library",
+        "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Alan Plum <me@pluma.io>, Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "http-errors",
+        "version": "2.0.1",
+        "description": "Create HTTP error objects",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-errors:http-errors:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/http-errors@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-errors:http_errors:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_errors:http-errors:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_errors:http_errors:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http-errors:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http_errors:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/http-errors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-proxy-agent@4.0.1?package-id=33dca7266e02ca13",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "http-proxy-agent",
+        "version": "4.0.1",
+        "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/http-proxy-agent@4.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/node-http-proxy-agent.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/http-proxy-agent@7.0.2?package-id=11d816319f4dc947",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "http-proxy-agent",
+        "version": "7.0.2",
+        "description": "An HTTP(s) proxy `http.Agent` implementation for HTTP",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/http-proxy-agent@7.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/TooTallNate/proxy-agents.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/http-proxy-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/https-proxy-agent@5.0.1?package-id=55bb2ef3daa202f8",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "https-proxy-agent",
+        "version": "5.0.1",
+        "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:5.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/https-proxy-agent@5.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/node-https-proxy-agent.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/https-proxy-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/https-proxy-agent@7.0.6?package-id=d2d5e71e930f6ec3",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "https-proxy-agent",
+        "version": "7.0.6",
+        "description": "An HTTP(s) proxy `http.Agent` implementation for HTTPS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/https-proxy-agent@7.0.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/TooTallNate/proxy-agents.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/https-proxy-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/humanize-ms@1.2.1?package-id=47a025b2f115b17c",
+        "type": "library",
+        "author": "dead-horse <dead_horse@qq.com> (http://deadhorse.me)",
+        "name": "humanize-ms",
+        "version": "1.2.1",
+        "description": "transform humanize time to ms",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/humanize-ms@1.2.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/node-modules/humanize-ms",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-modules:humanize_ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:humanize-ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:humanize_ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:humanize_ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:humanize:humanize-ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:humanize:humanize_ms:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/humanize-ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/i18n@0.11.1?package-id=ff8810fe24462f72",
+        "type": "library",
+        "author": "Marcus Spiegel <marcus.spiegel@gmail.com>",
+        "name": "i18n",
+        "version": "0.11.1",
+        "description": "lightweight translation module with dynamic json storage",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:i18n_project:i18n:0.11.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/i18n@0.11.1",
+        "externalReferences": [
+          {
+            "url": "http://github.com/mashpie/i18n-node.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://github.com/mashpie/i18n-node",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/i18n/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/iconv-lite@0.4.24?package-id=ac38ce6689a29c62",
+        "type": "library",
+        "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
+        "name": "iconv-lite",
+        "version": "0.4.24",
+        "description": "Convert character encodings in pure javascript.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/iconv-lite@0.4.24",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ashtuchkin/iconv-lite.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ashtuchkin/iconv-lite",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv:iconv-lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv:iconv_lite:0.4.24:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/iconv-lite/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=e1003a119853fa51",
+        "type": "library",
+        "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
+        "name": "iconv-lite",
+        "version": "0.6.3",
+        "description": "Convert character encodings in pure javascript.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/iconv-lite@0.6.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ashtuchkin/iconv-lite.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ashtuchkin/iconv-lite",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/iconv-lite@0.6.3?package-id=8e503ff726974706",
+        "type": "library",
+        "author": "Alexander Shtuchkin <ashtuchkin@gmail.com>",
+        "name": "iconv-lite",
+        "version": "0.6.3",
+        "description": "Convert character encodings in pure javascript.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/iconv-lite@0.6.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ashtuchkin/iconv-lite.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ashtuchkin/iconv-lite",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ieee754@1.2.1?package-id=6310f32d7b232558",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>",
+        "name": "ieee754",
+        "version": "1.2.1",
+        "description": "Read/write IEEE754 floating point numbers from/to a Buffer or array-like object",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ieee754@1.2.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/ieee754.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:ieee754:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ieee754/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ignore-walk@3.0.4?package-id=2e4b859fb5db53f0",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "ignore-walk",
+        "version": "3.0.4",
+        "description": "Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ignore-walk:ignore-walk:3.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ignore-walk@3.0.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/ignore-walk.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ignore-walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ignore_walk:ignore-walk:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ignore_walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ignore:ignore-walk:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ignore:ignore_walk:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ignore-walk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/iltorb@2.4.5?package-id=56389acc66e9bbcf",
+        "type": "library",
+        "author": "Nicolas Stepien <stepien.nicolas@gmail.com>, Hung Tran <oohnoitz@gmail.com>",
+        "name": "iltorb",
+        "version": "2.4.5",
+        "description": "Brotli compression/decompression with native bindings",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nstepien:iltorb:2.4.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/iltorb@2.4.5",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nstepien/iltorb.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/nstepien/iltorb",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iltorb:iltorb:2.4.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/iltorb/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/imurmurhash@0.1.4?package-id=09572f0a0bc74ba7",
+        "type": "library",
+        "author": "Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)",
+        "name": "imurmurhash",
+        "version": "0.1.4",
+        "description": "An incremental implementation of MurmurHash3",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/imurmurhash@0.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jensyt/imurmurhash-js",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/jensyt/imurmurhash-js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/imurmurhash/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/indent-string@4.0.0?package-id=affc82d01eae8fae",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "indent-string",
+        "version": "4.0.0",
+        "description": "Indent each line in a string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/indent-string@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:indent-string:indent_string:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:indent_string:indent-string:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:indent_string:indent_string:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:indent:indent-string:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:indent:indent_string:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/indent-string/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/infer-owner@1.0.4?package-id=0ba5cda90a6ec74a",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "infer-owner",
+        "version": "1.0.4",
+        "description": "Infer the owner of a path based on the owner of its nearest existing parent",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/infer-owner@1.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/infer-owner",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:infer-owner:infer_owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:infer_owner:infer-owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:infer_owner:infer_owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:infer:infer-owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:infer:infer_owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:infer-owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:infer_owner:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/infer-owner/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/inflection@1.13.4?package-id=6e2671dca7da065a",
+        "type": "library",
+        "author": "dreamerslab <ben@dreamerslab.com>, Ryan Schuft <ryan.schuft@gmail.com>, Ben Lin <ben@dreamerslab.com>, Lance Pollard <lancejpollard@gmail.com>, Dane O'Connor <dane.oconnor@gmail.com>, David Miró <lite.3engine@gmail.com>, brandondewitt, luk3thomas, Marcel Klehr, Raymond Feng, Kane Cohen <kanecohen@gmail.com>, Gianni Chiappetta <gianni@runlevel6.org>, Eric Brody, overlookmotel, Patrick Mowrer, Greger Olsson, Jason Crawford <jason@jasoncrawford.org>, Ray Myers <ray.myers@gmail.com>, Dillon Shook <dshook@alumni.nmt.edu>, Patrick Kuen <p.kuen@cloudacy.com>",
+        "name": "inflection",
+        "version": "1.13.4",
+        "description": "A port of inflection-js to node.js module",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:dreamerslab:inflection:1.13.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/inflection@1.13.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/dreamerslab/node.inflection.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inflection:inflection:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/inflection/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/inflight@1.0.6?package-id=ddef02a8605a5e19",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "inflight",
+        "version": "1.0.6",
+        "description": "Add callbacks to requests in flight to avoid async duplication",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/inflight@1.0.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/inflight.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/isaacs/inflight",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:inflight:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:inflight:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/inflight/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/inherits@2.0.4?package-id=4446fbeb35a2fa36",
+        "type": "library",
+        "name": "inherits",
+        "version": "2.0.4",
+        "description": "Browser-friendly inheritance fully compatible with standard node.js inherits()",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/inherits@2.0.4",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/inherits",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:inherits:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/inherits/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ini@1.3.8?package-id=6ddd6811138876ea",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "ini",
+        "version": "1.3.8",
+        "description": "An ini encoder/decoder for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ini@1.3.8",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/ini.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/global-prefix/node_modules/ini/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ini@1.3.8?package-id=4df1b4c1b6e1b526",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "ini",
+        "version": "1.3.8",
+        "description": "An ini encoder/decoder for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ini@1.3.8",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/ini.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/rc/node_modules/ini/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/internal-slot@1.1.0?package-id=2cb332855f0978e4",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "internal-slot",
+        "version": "1.1.0",
+        "description": "ES spec-like internal slots",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:internal-slot:internal-slot:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/internal-slot@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/internal-slot.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/internal-slot#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:internal-slot:internal_slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:internal_slot:internal-slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:internal_slot:internal_slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:internal:internal-slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:internal:internal_slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:internal-slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:internal_slot:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/internal-slot/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/interpret@1.1.0?package-id=ef0ffd4514fbc5b0",
+        "type": "library",
+        "author": "Tyler Kellen (http://goingslowly.com/)",
+        "name": "interpret",
+        "version": "1.1.0",
+        "description": "A dictionary of file extensions and associated module loaders.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:interpret:interpret:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/interpret@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/tkellen/node-interpret.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/tkellen/node-interpret",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tkellen:interpret:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/interpret/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/into-stream@3.1.0?package-id=fc003e7e8cee4468",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "into-stream",
+        "version": "3.1.0",
+        "description": "Convert a buffer/string/array/object/iterable/promise into a stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:into-stream:into-stream:3.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/into-stream@3.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:into-stream:into_stream:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:into_stream:into-stream:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:into_stream:into_stream:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:into:into-stream:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:into:into_stream:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/into-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/invalid_main?package-id=2320fb69c45985de",
+        "type": "library",
+        "name": "invalid_main",
+        "version": "UNKNOWN",
+        "cpe": "cpe:2.3:a:invalid-main:invalid-main:*:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/invalid_main",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:invalid-main:invalid_main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:invalid_main:invalid-main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:invalid_main:invalid_main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:invalid:invalid-main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:invalid:invalid_main:*:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/invariant@2.2.4?package-id=2b89e9158c0c13bf",
+        "type": "library",
+        "author": "Andres Suarez <zertosh@gmail.com>",
+        "name": "invariant",
+        "version": "2.2.4",
+        "description": "invariant",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:invariant:invariant:2.2.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/invariant@2.2.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/zertosh/invariant",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zertosh:invariant:2.2.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/invariant/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ip-address@10.2.0?package-id=53d74670fdc23666",
+        "type": "library",
+        "author": "Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)",
+        "name": "ip-address",
+        "version": "10.2.0",
+        "description": "A library for parsing IPv4 and IPv6 IP addresses in node and the browser.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:beaugunderson:ip-address:10.2.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ip-address@10.2.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/beaugunderson/ip-address.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ip-address/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ip6@0.2.13?package-id=1e1e691421c815b4",
+        "type": "library",
+        "author": "Qian Chen",
+        "name": "ip6",
+        "version": "0.2.13",
+        "description": "IPv6 address helper utilities.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:elgs:ip6:0.2.13:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ip6@0.2.13",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/elgs/ip6.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/elgs/ip6#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ip6:ip6:0.2.13:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ip6/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ipaddr.js@1.9.1?package-id=e0e0b515b51cb94b",
+        "type": "library",
+        "author": "whitequark <whitequark@whitequark.org>",
+        "name": "ipaddr.js",
+        "version": "1.9.1",
+        "description": "A library for manipulating IPv4 and IPv6 addresses in JavaScript.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ipaddr.js@1.9.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/whitequark/ipaddr.js",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ipaddr.js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-absolute@1.0.0?package-id=0512f66f9555653e",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Elan Shanker (https://github.com/es128), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io), ",
+        "name": "is-absolute",
+        "version": "1.0.0",
+        "description": "Returns true if a file path is absolute. Does not rely on the path module and can be used as a polyfill for node.js native `path.isAbolute`.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:is-absolute:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-absolute@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-absolute",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-absolute:is-absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-absolute:is_absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_absolute:is-absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_absolute:is_absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_absolute:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-absolute/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-arguments@1.2.0?package-id=c249422b6e0036a2",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "is-arguments",
+        "version": "1.2.0",
+        "description": "Is this an arguments object? It's a harder question than you think.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-arguments:is-arguments:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-arguments@1.2.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-arguments.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-arguments",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_arguments:is-arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_arguments:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-arguments/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-array-buffer@3.0.5?package-id=d9958b6373169d4d",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-array-buffer",
+        "version": "3.0.5",
+        "description": "Is this value a JS ArrayBuffer?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-array-buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-array-buffer@3.0.5",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-array-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-array-buffer#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-array-buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_array_buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_array_buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-array-buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_array_buffer:3.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-array-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-bigint@1.1.0?package-id=70e6035521bca2e6",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-bigint",
+        "version": "1.1.0",
+        "description": "Is this value an ES BigInt?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-bigint:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-bigint@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-bigint.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-bigint#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_bigint:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-bigint/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-boolean-object@1.2.2?package-id=4f4be33a0614ffc4",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-boolean-object",
+        "version": "1.2.2",
+        "description": "Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-boolean-object:is-boolean-object:1.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-boolean-object@1.2.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-boolean-object.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-boolean-object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_boolean_object:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_boolean_object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-boolean-object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_boolean_object:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-boolean-object/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-callable@1.2.7?package-id=e47af72ad358fc5c",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "is-callable",
+        "version": "1.2.7",
+        "description": "Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-callable:is-callable:1.2.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-callable@1.2.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-callable.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-callable:is_callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_callable:is-callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_callable:is_callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_callable:1.2.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-callable/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-core-module@2.16.2?package-id=e5c7b25e51d0e4a0",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-core-module",
+        "version": "2.16.2",
+        "description": "Is this specifier a node.js core module?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-core-module:is-core-module:2.16.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-core-module@2.16.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-core-module.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-core-module",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-core-module:is_core_module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_core_module:is-core-module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_core_module:is_core_module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-core-module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_core_module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-core:is-core-module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-core:is_core_module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_core:is-core-module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_core:is_core_module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-core-module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_core_module:2.16.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-core-module/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-date-object@1.1.0?package-id=4d742be2d09ada71",
+        "type": "library",
+        "author": "Jordan Harband",
+        "name": "is-date-object",
+        "version": "1.1.0",
+        "description": "Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-date-object:is-date-object:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-date-object@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-date-object.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-date-object:is_date_object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_date_object:is-date-object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_date_object:is_date_object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-date-object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_date_object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-date:is-date-object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-date:is_date_object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_date:is-date-object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_date:is_date_object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-date-object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_date_object:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-date-object/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-expression@4.0.0?package-id=025b1622a77b0169",
+        "type": "library",
+        "author": "Timothy Gu <timothygu99@gmail.com>",
+        "name": "is-expression",
+        "version": "4.0.0",
+        "description": "Check if a string is a valid JavaScript expression",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-expression:is-expression:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-expression@4.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/is-expression.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-expression:is_expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_expression:is-expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_expression:is_expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:is-expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:is_expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_expression:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-expression/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-extglob@2.1.1?package-id=7f72b5b8f89d7183",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "is-extglob",
+        "version": "2.1.1",
+        "description": "Returns true if a string has an extglob.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:is-extglob:2.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-extglob@2.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-extglob",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-extglob:is-extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-extglob:is_extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_extglob:is-extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_extglob:is_extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_extglob:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-extglob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-fullwidth-code-point@1.0.0?package-id=68fe94da8f6466e7",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "is-fullwidth-code-point",
+        "version": "1.0.0",
+        "description": "Check if the character represented by a given Unicode code point is fullwidth",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-fullwidth-code-point@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-fullwidth-code-point@2.0.0?package-id=fac6f12e8720a1b3",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "is-fullwidth-code-point",
+        "version": "2.0.0",
+        "description": "Check if the character represented by a given Unicode code point is fullwidth",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-fullwidth-code-point@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-fullwidth-code-point@3.0.0?package-id=ceb97ce06d62ac60",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "is-fullwidth-code-point",
+        "version": "3.0.0",
+        "description": "Check if the character represented by a given Unicode code point is fullwidth",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-fullwidth-code-point@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-fullwidth-code-point/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-glob@4.0.3?package-id=c962a2f9025eb914",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Daniel Perez (https://tuvistavie.com), Jon Schlinkert (http://twitter.com/jonschlinkert)",
+        "name": "is-glob",
+        "version": "4.0.3",
+        "description": "Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:micromatch:is-glob:4.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-glob@4.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/micromatch/is-glob",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:micromatch:is_glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-glob:is-glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-glob:is_glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_glob:is-glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_glob:is_glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_glob:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-glob/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-lambda@1.0.1?package-id=d9cbeeda741b13b2",
+        "type": "library",
+        "author": "Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son)",
+        "name": "is-lambda",
+        "version": "1.0.1",
+        "description": "Detect if your code is running on an AWS Lambda server",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-lambda@1.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/watson/is-lambda.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/watson/is-lambda",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-lambda:is_lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_lambda:is-lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_lambda:is_lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:watson:is-lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:watson:is_lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_lambda:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-lambda/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-map@2.0.3?package-id=7aeb57cf02726c97",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-map",
+        "version": "2.0.3",
+        "description": "Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-map:2.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-map@2.0.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-map.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-map#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-map:is-map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-map:is_map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_map:is-map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_map:is_map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_map:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-natural-number@4.0.1?package-id=5f3943fd8b1b46a9",
+        "type": "library",
+        "author": "Shinnosuke Watanabe (https://github.com/shinnn)",
+        "name": "is-natural-number",
+        "version": "4.0.1",
+        "description": "Check if a value is a natural number",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-natural-number:is-natural-number:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-natural-number@4.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-natural-number:is_natural_number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_natural_number:is-natural-number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_natural_number:is_natural_number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-natural:is-natural-number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-natural:is_natural_number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_natural:is-natural-number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_natural:is_natural_number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-natural-number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_natural_number:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-natural-number/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-number@7.0.0?package-id=ef651aa972136a02",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), Rouven Weßling (www.rouvenwessling.de)",
+        "name": "is-number",
+        "version": "7.0.0",
+        "description": "Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-number@7.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-number",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-number/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-number-like@1.0.8?package-id=045ed23701e3dcd7",
+        "type": "library",
+        "author": "Vigour.io <dev@vigour.io>, Jim De Beer <jim@vigour.io>, Shawn Inder <shawn@vigour.io>",
+        "name": "is-number-like",
+        "version": "1.0.8",
+        "description": "Checks whether provided parameter looks like a number",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-number-like:is-number-like:1.0.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-number-like@1.0.8",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/vigour-io/is-number-like.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/vigour-io/is-number-like#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number-like:is_number_like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number_like:is-number-like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number_like:is_number_like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number:is-number-like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number:is_number_like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number:is-number-like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number:is_number_like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vigour-io:is-number-like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:vigour-io:is_number_like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-number-like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_number_like:1.0.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-number-like/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-number-object@1.1.1?package-id=e69c6205dff000a1",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-number-object",
+        "version": "1.1.1",
+        "description": "Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-number-object:is-number-object:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-number-object@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-number-object.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-number-object#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number-object:is_number_object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number_object:is-number-object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number_object:is_number_object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-number-object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_number_object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number:is-number-object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-number:is_number_object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number:is-number-object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_number:is_number_object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-number-object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_number_object:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-number-object/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-object@1.0.2?package-id=080098421fa0b116",
+        "type": "library",
+        "author": "Raynos <raynos2@gmail.com>, Raynos, Jordan Harband (https://github.com/ljharb)",
+        "name": "is-object",
+        "version": "1.0.2",
+        "description": "Checks whether a value is an object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-object:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-object@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-object.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-object",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-object:is-object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-object:is_object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_object:is-object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_object:is_object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_object:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-object/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-plain-obj@1.1.0?package-id=85335907c023e35c",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "is-plain-obj",
+        "version": "1.1.0",
+        "description": "Check if a value is a plain object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-plain-obj@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-plain-obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain_obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain_obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-plain-obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_plain_obj:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-plain-obj/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-plain-object@2.0.4?package-id=0cdcb3b46bab4f76",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Osman Nuri Okumuş (http://onokumus.com), Steven Vachon (https://svachon.com), ",
+        "name": "is-plain-object",
+        "version": "2.0.4",
+        "description": "Returns true if an object was created by the `Object` constructor.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-plain-object:is-plain-object:2.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-plain-object@2.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-plain-object",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-plain-object:is_plain_object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain_object:is-plain-object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain_object:is_plain_object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is-plain-object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_plain_object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-plain:is-plain-object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-plain:is_plain_object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain:is-plain-object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_plain:is_plain_object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-plain-object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_plain_object:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-plain-object/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-promise@2.2.2?package-id=06d9e6f32c28a5f8",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "is-promise",
+        "version": "2.2.2",
+        "description": "Test whether an object looks like a promises-a+ promise",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-promise:is-promise:2.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-promise@2.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/then/is-promise.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-promise:is_promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_promise:is-promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_promise:is_promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:then:is-promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:then:is_promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_promise:2.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-promise/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-regex@1.2.1?package-id=eb42217c762c43fc",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-regex",
+        "version": "1.2.1",
+        "description": "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-regex:1.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-regex@1.2.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-regex.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-regex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-regex:is-regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-regex:is_regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_regex:is-regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_regex:is_regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_regex:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-relative@1.0.0?package-id=2efd093414ff4eab",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io)",
+        "name": "is-relative",
+        "version": "1.0.0",
+        "description": "Returns `true` if the path appears to be relative.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:is-relative:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-relative@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-relative",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-relative:is-relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-relative:is_relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_relative:is-relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_relative:is_relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_relative:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-relative/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-retry-allowed@1.2.0?package-id=4be8fdb80ba2df5a",
+        "type": "library",
+        "author": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)",
+        "name": "is-retry-allowed",
+        "version": "1.2.0",
+        "description": "Is retry allowed for Error?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-retry-allowed@1.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-retry-allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_retry_allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_retry_allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-retry-allowed/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-set@2.0.3?package-id=3636986997116379",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-set",
+        "version": "2.0.3",
+        "description": "Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-set:2.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-set@2.0.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-set.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-set#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-set:is-set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-set:is_set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_set:is-set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_set:is_set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_set:2.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-set/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-shared-array-buffer@1.0.4?package-id=be5dd13ccee97384",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "is-shared-array-buffer",
+        "version": "1.0.4",
+        "description": "Is this value a JS SharedArrayBuffer?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-shared-array-buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-shared-array-buffer@1.0.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-shared-array-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-shared-array-buffer#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-shared-array-buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_shared_array_buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_shared_array_buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-shared-array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-shared-array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_shared_array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_shared_array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-shared-array-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-stream@1.1.0?package-id=ac3f97806ad63d60",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "is-stream",
+        "version": "1.1.0",
+        "description": "Check if something is a Node.js stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-stream:is-stream:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-stream@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-stream:is_stream:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_stream:is-stream:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_stream:is_stream:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-stream:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_stream:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-stream@2.0.1?package-id=5b3d2863ea25c0ee",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "is-stream",
+        "version": "2.0.1",
+        "description": "Check if something is a Node.js stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-stream@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-stream:is_stream:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_stream:is-stream:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_stream:is_stream:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-stream:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_stream:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/winston/node_modules/is-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-string@1.1.1?package-id=f7b87c51d707a2b4",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-string",
+        "version": "1.1.1",
+        "description": "Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-string:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-string@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-string.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-string:is-string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-string:is_string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_string:is-string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_string:is_string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_string:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-string/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-symbol@1.1.1?package-id=865696304cc6c89b",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-symbol",
+        "version": "1.1.1",
+        "description": "Determine if a value is an ES6 Symbol or not.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-symbol:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-symbol@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-symbol.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_symbol:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-symbol/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-typed-array@1.1.15?package-id=241515ad73bdd1d4",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "is-typed-array",
+        "version": "1.1.15",
+        "description": "Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:is-typed-array:is-typed-array:1.1.15:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-typed-array@1.1.15",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/is-typed-array.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-typed-array:is_typed_array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_typed_array:is-typed-array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_typed_array:is_typed_array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is-typed-array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_typed_array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-typed:is-typed-array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-typed:is_typed_array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_typed:is-typed-array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_typed:is_typed_array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-typed-array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_typed_array:1.1.15:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-typed-array/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-unc-path@1.0.0?package-id=ce172a3a7c21705f",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "is-unc-path",
+        "version": "1.0.0",
+        "description": "Returns true if a filepath is a windows UNC file path.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:is-unc-path:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-unc-path@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-unc-path",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_unc_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-unc-path:is-unc-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-unc-path:is_unc_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_unc_path:is-unc-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_unc_path:is_unc_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-unc:is-unc-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-unc:is_unc_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_unc:is-unc-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_unc:is_unc_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-unc-path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_unc_path:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-unc-path/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-weakmap@2.0.2?package-id=e45ebd1d0caec949",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-weakmap",
+        "version": "2.0.2",
+        "description": "Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-weakmap:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-weakmap@2.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-weakmap.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-weakmap#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_weakmap:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-weakmap/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-weakset@2.0.4?package-id=5c11a4ead031e5d5",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "is-weakset",
+        "version": "2.0.4",
+        "description": "Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:inspect-js:is-weakset:2.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-weakset@2.0.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/is-weakset.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/is-weakset#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:is_weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_weakset:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-weakset/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/is-windows@1.0.2?package-id=c97557a2dcbdd3a0",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Simen Bekkhus (https://github.com/SimenB), 刘祺 (gucong.co.cc)",
+        "name": "is-windows",
+        "version": "1.0.2",
+        "description": "Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:is-windows:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/is-windows@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/is-windows",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:is_windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-windows:is-windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is-windows:is_windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_windows:is-windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is_windows:is_windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is-windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:is:is_windows:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/is-windows/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isarray@0.0.1?package-id=bc50e5d6cbc7eb36",
+        "type": "library",
+        "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
+        "name": "isarray",
+        "version": "0.0.1",
+        "description": "Array#isArray for older browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isarray@0.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/juliangruber/isarray.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/juliangruber/isarray",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isarray:isarray:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isarray@1.0.0?package-id=034deefb6c4b8769",
+        "type": "library",
+        "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
+        "name": "isarray",
+        "version": "1.0.0",
+        "description": "Array#isArray for older browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isarray@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/juliangruber/isarray.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/juliangruber/isarray",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isarray@2.0.5?package-id=ed8d984bcbb93ff5",
+        "type": "library",
+        "author": "Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)",
+        "name": "isarray",
+        "version": "2.0.5",
+        "description": "Array#isArray for older browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juliangruber:isarray:2.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isarray@2.0.5",
+        "externalReferences": [
+          {
+            "url": "git://github.com/juliangruber/isarray.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/juliangruber/isarray",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isarray:isarray:2.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/isarray/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isexe@2.0.0?package-id=f016a5f09c60797b",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "isexe",
+        "version": "2.0.0",
+        "description": "Minimal module to check if a file is executable.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isexe@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/isexe.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/isaacs/isexe#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/isexe/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isexe@3.1.5?package-id=17fcea35d5a26f20",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "isexe",
+        "version": "3.1.5",
+        "description": "Minimal module to check if a file is executable.",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:isexe:3.1.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isexe@3.1.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/isexe",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isexe:isexe:3.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isobject@3.0.1?package-id=71363469c72f98ea",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), , Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), Magnús Dæhlen (https://github.com/magnudae), Tom MacWright (https://macwright.org)",
+        "name": "isobject",
+        "version": "3.0.1",
+        "description": "Returns true if the value is an object and not an array or null.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:isobject:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isobject@3.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/isobject",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isobject:isobject:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/isobject/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/isurl@1.0.0?package-id=28254e996fa56b2a",
+        "type": "library",
+        "author": "Steven Vachon <contact@svachon.com> (https://www.svachon.com/)",
+        "name": "isurl",
+        "version": "1.0.0",
+        "description": "Checks whether a value is a WHATWG URL.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isurl:isurl:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/isurl@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/isurl/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jackspeak@3.4.3?package-id=e96a52decca51432",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me>",
+        "name": "jackspeak",
+        "version": "3.4.3",
+        "description": "A very strict and proper argument parser.",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/jackspeak@3.4.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/jackspeak.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/jackspeak/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/js-stringify@1.0.2?package-id=58ecb50896023cef",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "js-stringify",
+        "version": "1.0.2",
+        "description": "Stringify an object so it can be safely inlined in JavaScript code",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:js-stringify:js-stringify:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/js-stringify@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jadejs/js-stringify.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js-stringify:js_stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js_stringify:js-stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js_stringify:js_stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jadejs:js-stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jadejs:js_stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js:js-stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js:js_stringify:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/js-stringify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/js-tokens@4.0.0?package-id=3fc29f45ef8c9e41",
+        "type": "library",
+        "author": "Simon Lydell",
+        "name": "js-tokens",
+        "version": "4.0.0",
+        "description": "A regex that tokenizes JavaScript.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/js-tokens@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/js-tokens/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/js-yaml@3.14.2?package-id=f7f3579a635a8337",
+        "type": "library",
+        "author": "Vladimir Zapparov <dervus.grim@gmail.com>, Aleksey V Zapparov <ixti@member.fsf.org> (http://www.ixti.net/), Vitaly Puzrin <vitaly@rcdesign.ru> (https://github.com/puzrin), Martin Grenfell <martin.grenfell@gmail.com> (http://got-ravings.blogspot.com)",
+        "name": "js-yaml",
+        "version": "3.14.2",
+        "description": "YAML 1.2 parser and serializer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nodeca:js-yaml:3.14.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/js-yaml@3.14.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/nodeca/js-yaml",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/js-yaml/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/json-buffer@3.0.0?package-id=298ecde0ab662ada",
+        "type": "library",
+        "author": "Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)",
+        "name": "json-buffer",
+        "version": "3.0.0",
+        "description": "JSON parse & stringify that supports binary via bops & base64",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:dominictarr:json-buffer:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/json-buffer@3.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/dominictarr/json-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/dominictarr/json-buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:dominictarr:json_buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json-buffer:json-buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json-buffer:json_buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json_buffer:json-buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json_buffer:json_buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json:json-buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json:json_buffer:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/json-schema@0.4.0?package-id=f593cbff106763e8",
+        "type": "library",
+        "author": "Kris Zyp, Kris Zyp <kriszyp@gmail.com>",
+        "name": "json-schema",
+        "version": "0.4.0",
+        "description": "JSON Schema validation and specifications",
+        "licenses": [
+          {
+            "expression": "AFL-2.1 OR BSD-3-Clause"
+          }
+        ],
+        "cpe": "cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/json-schema@0.4.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/kriszyp/json-schema",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json-schema:json_schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json_schema:json-schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json_schema:json_schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kriszyp:json-schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kriszyp:json_schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json:json-schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:json:json_schema:0.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/json-schema/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/json5@2.2.3?package-id=ff0081c9bee3a9f6",
+        "type": "library",
+        "author": "Aseem Kishore <aseem.kishore@gmail.com>, Max Nanasy <max.nanasy@gmail.com>, Andrew Eisenberg <andrew@eisenberg.as>, Jordan Tucker <jordanbtucker@gmail.com>",
+        "name": "json5",
+        "version": "2.2.3",
+        "description": "JSON for Humans",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:json5:json5:2.2.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/json5@2.2.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/json5/json5.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://json5.org/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/json5/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jsonfile@6.2.1?package-id=203aa116ca1676f3",
+        "type": "library",
+        "author": "JP Richardson <jprichardson@gmail.com>",
+        "name": "jsonfile",
+        "version": "6.2.1",
+        "description": "Easily read/write JSON files.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jsonfile:jsonfile:6.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/jsonfile@6.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/jsonfile/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jsonwebtoken@0.1.0?package-id=c29669d438fb9e38",
+        "type": "library",
+        "author": "auth0",
+        "name": "jsonwebtoken",
+        "version": "0.1.0",
+        "description": "JSON Web Token implementation (symmetric and asymmetric)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:auth0:jsonwebtoken:0.1.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/jsonwebtoken@0.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/auth0/node-jsonwebtoken",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jsonwebtoken@0.4.0?package-id=1e23bc54c16fbe6d",
+        "type": "library",
+        "author": "auth0",
+        "name": "jsonwebtoken",
+        "version": "0.4.0",
+        "description": "JSON Web Token implementation (symmetric and asymmetric)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:auth0:jsonwebtoken:0.4.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/jsonwebtoken@0.4.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/auth0/node-jsonwebtoken",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/jsonwebtoken/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jstransformer@1.0.0?package-id=cb3672db528c0205",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "jstransformer",
+        "version": "1.0.0",
+        "description": "Normalize the API of any jstransformer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jstransformers:jstransformer:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/jstransformer@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jstransformers/jstransformer.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jstransformer:jstransformer:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/jstransformer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/juice-shop@20.0.0?package-id=d93cffb187cc6ed6",
+        "type": "library",
+        "author": "Björn Kimminich <bjoern.kimminich@owasp.org> (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, JuiceShopBot, ShubhamPalriwala, CaptainFreak, Supratik Das, the-pro, Harsh Kumar, rishabhkeshan, Ziyang Li, ...",
+        "name": "juice-shop",
+        "version": "20.0.0",
+        "description": "Probably the most modern and sophisticated insecure web application",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juice-shop:juice-shop:20.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/juice-shop@20.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/juice-shop/juice-shop.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://owasp-juice.shop",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice-shop:juice_shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice_shop:juice-shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice_shop:juice_shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice:juice-shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice:juice_shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/build/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/juice-shop@20.0.0?package-id=486affa68e36ab8d",
+        "type": "library",
+        "author": "Björn Kimminich <bjoern.kimminich@owasp.org> (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, JuiceShopBot, ShubhamPalriwala, CaptainFreak, Supratik Das, the-pro, Harsh Kumar, rishabhkeshan, Ziyang Li, ...",
+        "name": "juice-shop",
+        "version": "20.0.0",
+        "description": "Probably the most modern and sophisticated insecure web application",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:juice-shop:juice-shop:20.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/juice-shop@20.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/juice-shop/juice-shop.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://owasp-juice.shop",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice-shop:juice_shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice_shop:juice-shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice_shop:juice_shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice:juice-shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:juice:juice_shop:20.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jwa@0.0.1?package-id=1fe4d16b42282bbe",
+        "type": "library",
+        "author": "Brian J. Brennan",
+        "name": "jwa",
+        "version": "0.0.1",
+        "description": "JWA implementation (supports all JWS algorithms)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:brianloveswords:jwa:0.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/jwa@0.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/brianloveswords/node-jwa.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jwa:jwa:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/jwa/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/jws@0.2.6?package-id=e3ae0c46d846c3b2",
+        "type": "library",
+        "author": "Brian J Brennan",
+        "name": "jws",
+        "version": "0.2.6",
+        "description": "Implementation of JSON Web Signatures",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:brianloveswords:jws:0.2.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/jws@0.2.6",
+        "externalReferences": [
+          {
+            "url": "git://github.com/brianloveswords/node-jws.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jws:jws:0.2.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/jws/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/keyv@3.0.0?package-id=8594e21b80d1e888",
+        "type": "library",
+        "author": "Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)",
+        "name": "keyv",
+        "version": "3.0.0",
+        "description": "Simple key-value storage with support for multiple backends",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lukechilds:keyv:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/keyv@3.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/lukechilds/keyv.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/lukechilds/keyv",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:keyv:keyv:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/kind-of@6.0.3?package-id=c406772b04e5464c",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), James (https://twitter.com/aretecode), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan), tunnckoCore (https://i.am.charlike.online)",
+        "name": "kind-of",
+        "version": "6.0.3",
+        "description": "Get the native type of a value.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:kind-of:6.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/kind-of@6.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/kind-of",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:kind_of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kind-of:kind-of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kind-of:kind_of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kind_of:kind-of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kind_of:kind_of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kind:kind-of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kind:kind_of:6.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/kind-of/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/kuler@2.0.0?package-id=ed79d2954c83dae0",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "kuler",
+        "version": "2.0.0",
+        "description": "Color your terminal using CSS/hex color codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:3rd-Eden:kuler:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/kuler@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/3rd-Eden/kuler",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/3rd-Eden/kuler",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:kuler:kuler:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/kuler/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lazystream@1.0.1?package-id=181999b6186ce408",
+        "type": "library",
+        "author": "Jonas Pommerening <jonas.pommerening@gmail.com> (https://npmjs.org/~jpommerening), Mario Casciaro <mariocasciaro@gmail.com>",
+        "name": "lazystream",
+        "version": "1.0.1",
+        "description": "Open Node Streams on demand.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jpommerening:lazystream:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/lazystream@1.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jpommerening/node-lazystream.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/jpommerening/node-lazystream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/lazystream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc",
+        "type": "library",
+        "publisher": "GNU Libc Maintainers <debian-glibc@lists.debian.org>",
+        "name": "libc6",
+        "version": "2.41-12+deb13u2",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          },
+          {
+            "license": {
+              "id": "BSL-1.0"
+            }
+          },
+          {
+            "license": {
+              "id": "FSFAP"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-2.0-only"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-2.0-or-later"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-3.0-only"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-3.0-or-later"
+            }
+          },
+          {
+            "license": {
+              "id": "ISC"
+            }
+          },
+          {
+            "license": {
+              "id": "LGPL-2.0-only"
+            }
+          },
+          {
+            "license": {
+              "id": "LGPL-2.0-or-later"
+            }
+          },
+          {
+            "license": {
+              "id": "LGPL-2.1-only"
+            }
+          },
+          {
+            "license": {
+              "id": "LGPL-2.1-or-later"
+            }
+          },
+          {
+            "license": {
+              "id": "LGPL-3.0-only"
+            }
+          },
+          {
+            "license": {
+              "id": "LGPL-3.0-or-later"
+            }
+          },
+          {
+            "license": {
+              "id": "SunPro"
+            }
+          },
+          {
+            "license": {
+              "id": "Unicode-DFS-2016"
+            }
+          },
+          {
+            "license": {
+              "name": "BSD-3-clause-Berkeley"
+            }
+          },
+          {
+            "license": {
+              "name": "BSD-3-clause-Carnegie"
+            }
+          },
+          {
+            "license": {
+              "name": "BSD-3-clause-Oracle"
+            }
+          },
+          {
+            "license": {
+              "name": "BSD-3-clause-WIDE"
+            }
+          },
+          {
+            "license": {
+              "name": "BSD-like-Spencer"
+            }
+          },
+          {
+            "license": {
+              "name": "CORE-MATH"
+            }
+          },
+          {
+            "license": {
+              "name": "Carnegie"
+            }
+          },
+          {
+            "license": {
+              "name": "DEC"
+            }
+          },
+          {
+            "license": {
+              "name": "GPL-2+-with-link-exception"
+            }
+          },
+          {
+            "license": {
+              "name": "IBM"
+            }
+          },
+          {
+            "license": {
+              "name": "Inner-Net"
+            }
+          },
+          {
+            "license": {
+              "name": "LGPL-2.1+-with-link-exception"
+            }
+          },
+          {
+            "license": {
+              "name": "MIT-like-Lord"
+            }
+          },
+          {
+            "license": {
+              "name": "PCRE"
+            }
+          },
+          {
+            "license": {
+              "name": "Univ-Coimbra"
+            }
+          },
+          {
+            "license": {
+              "name": "public-domain"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libc6:libc6:2.41-12\\+deb13u2:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&upstream=glibc",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:178f8917449ef6a59c2c0da79a0388c9b8d3dbff790657dba42b4776927d9ab1"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/libc6"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:178f8917449ef6a59c2c0da79a0388c9b8d3dbff790657dba42b4776927d9ab1"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/libc6/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:178f8917449ef6a59c2c0da79a0388c9b8d3dbff790657dba42b4776927d9ab1"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/libc6.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "23769"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "glibc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14",
+        "type": "library",
+        "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
+        "name": "libgcc-s1",
+        "version": "14.2.0-19",
+        "licenses": [
+          {
+            "license": {
+              "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libgcc-s1:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:libgcc-s1:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:libgcc_s1:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:libgcc_s1:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:libgcc:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:libgcc:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:fcb0c313318aac64dde0e0574b4df3394902929eb62d43e8b6c47ec4562f170d"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/libgcc-s1"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:fcb0c313318aac64dde0e0574b4df3394902929eb62d43e8b6c47ec4562f170d"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/var/lib/dpkg/status.d/libgcc-s1.md5sums"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/usr/share/doc/gcc-14-base/copyright"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "148"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "gcc-14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/libgomp1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=8d4d6890752630d0&upstream=gcc-14",
+        "type": "library",
+        "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
+        "name": "libgomp1",
+        "version": "14.2.0-19",
+        "licenses": [
+          {
+            "license": {
+              "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libgomp1:libgomp1:14.2.0-19:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/libgomp1@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:7578331450f7cd6e1f6f28caf2ce9af93ea935a049132bb63ed523dcbda068e4"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/libgomp1"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:7578331450f7cd6e1f6f28caf2ce9af93ea935a049132bb63ed523dcbda068e4"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/var/lib/dpkg/status.d/libgomp1.md5sums"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/usr/share/doc/gcc-14-base/copyright"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "352"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "gcc-14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=arm64&distro=debian-13.4&package-id=4f12411d3227085b&upstream=openssl",
+        "type": "library",
+        "publisher": "Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net>",
+        "name": "libssl3t64",
+        "version": "3.5.5-1~deb13u2",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-1.0-only"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-1.0-or-later"
+            }
+          },
+          {
+            "license": {
+              "name": "Artistic"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libssl3t64:libssl3t64:3.5.5-1\\~deb13u2:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=arm64&distro=debian-13.4&upstream=openssl",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:6d2638f8b1c04bff63885c77c81c1cf0d5d4eb598e3826fba1037630fe6d401a"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/libssl3t64"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:6d2638f8b1c04bff63885c77c81c1cf0d5d4eb598e3826fba1037630fe6d401a"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/libssl3t64/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:6d2638f8b1c04bff63885c77c81c1cf0d5d4eb598e3826fba1037630fe6d401a"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/libssl3t64.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "8014"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "openssl"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=9cc8acacefdee288&upstream=gcc-14",
+        "type": "library",
+        "publisher": "Debian GCC Maintainers <debian-gcc@lists.debian.org>",
+        "name": "libstdc++6",
+        "version": "14.2.0-19",
+        "licenses": [
+          {
+            "license": {
+              "name": "sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:14.2.0-19:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:323c2be748e4417f7ab7b05b33d6c1a52df0788e779143555109ddcd5325c76c"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/libstdc++6"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:323c2be748e4417f7ab7b05b33d6c1a52df0788e779143555109ddcd5325c76c"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/var/lib/dpkg/status.d/libstdc++6.md5sums"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/usr/share/doc/gcc-14-base/copyright"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "3022"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "gcc-14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/libxmljs2@0.37.0?package-id=008b04af34471513",
+        "type": "library",
+        "author": "marudor, Jeff Smick, Marco Rogers",
+        "name": "libxmljs2",
+        "version": "0.37.0",
+        "description": "libxml bindings for v8 javascript engine",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libxmljs2:libxmljs2:0.37.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/libxmljs2@0.37.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/marudor/libxmljs2.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:marudor:libxmljs2:0.37.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&package-id=02b5bf6dd9ecb243&upstream=libzstd",
+        "type": "library",
+        "publisher": "RPM packaging team <team+pkg-rpm@tracker.debian.org>",
+        "name": "libzstd1",
+        "version": "1.5.7+dfsg-1",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          },
+          {
+            "license": {
+              "id": "GPL-2.0-only"
+            }
+          },
+          {
+            "license": {
+              "id": "Zlib"
+            }
+          },
+          {
+            "license": {
+              "name": "Expat"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:libzstd1:libzstd1:1.5.7\\+dfsg-1:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&upstream=libzstd",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:91213e6dc2fda431a0de4541602a933c7a48206a0bf487217fa681260fccdc23"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/libzstd1"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:91213e6dc2fda431a0de4541602a933c7a48206a0bf487217fa681260fccdc23"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/libzstd1/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:91213e6dc2fda431a0de4541602a933c7a48206a0bf487217fa681260fccdc23"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/libzstd1.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "748"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "libzstd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/liftup@3.0.1?package-id=b4203f0dbd71dc51",
+        "type": "library",
+        "author": "Grunt Development Team (https://gruntjs.com/development-team)",
+        "name": "liftup",
+        "version": "3.0.1",
+        "description": "Launch your command line tool with ease.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:liftup:liftup:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/liftup@3.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/liftup/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/linebreak@1.1.0?package-id=b2ed0312398a883c",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "linebreak",
+        "version": "1.1.0",
+        "description": "An implementation of the Unicode Line Breaking Algorithm (UAX #14)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:devongovett:linebreak:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/linebreak@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/devongovett/linebreaker.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/linebreaker",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:linebreak:linebreak:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/linebreak/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/listenercount@1.0.1?package-id=8cf228f1cc8b3027",
+        "type": "library",
+        "author": "jden <jason@denizac.org>",
+        "name": "listenercount",
+        "version": "1.0.1",
+        "description": "backwards compatible version of builtin events.listenercount",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:listenercount:listenercount:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/listenercount@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/listenercount/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0?package-id=b0673eac3bec27e8",
+        "type": "library",
+        "name": "ljharb-monorepo-symlink-test",
+        "version": "0.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/ljharb-monorepo-symlink-test@0.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb-monorepo-symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb-monorepo-symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb_monorepo_symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb_monorepo_symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb-monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb-monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb_monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb_monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/locate-path@5.0.0?package-id=91b02cf44711d543",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "locate-path",
+        "version": "5.0.0",
+        "description": "Get the first path that exists on disk of multiple paths",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/locate-path@5.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:locate-path:locate_path:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:locate_path:locate-path:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:locate_path:locate_path:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:locate:locate-path:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:locate:locate_path:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/locate-path/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lodash@2.4.2?package-id=dbbb92a4d9c4d340",
+        "type": "library",
+        "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine@iceddev.com> (http://www.iceddev.com/), Kit Cambridge <github@kitcambridge.be> (http://kitcambridge.be/), Mathias Bynens <mathias@qiwi.be> (http://mathiasbynens.be/)",
+        "name": "lodash",
+        "version": "2.4.2",
+        "description": "A utility library delivering consistency, customization, performance, & extras.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lodash:lodash:2.4.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/lodash@2.4.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/lodash/lodash.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://lodash.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lodash@4.18.1?package-id=9a03ea155cc712e9",
+        "type": "library",
+        "author": "John-David Dalton <john.david.dalton@gmail.com>, John-David Dalton <john.david.dalton@gmail.com>, Mathias Bynens <mathias@qiwi.be>",
+        "name": "lodash",
+        "version": "4.18.1",
+        "description": "Lodash modular utilities.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lodash:lodash:4.18.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/lodash@4.18.1",
+        "externalReferences": [
+          {
+            "url": "https://lodash.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/lodash/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lodash.isfinite@3.3.2?package-id=ec6d4a50251c782e",
+        "type": "library",
+        "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
+        "name": "lodash.isfinite",
+        "version": "3.3.2",
+        "description": "The lodash method `_.isFinite` exported as a module.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lodash.isfinite:lodash.isfinite:3.3.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/lodash.isfinite@3.3.2",
+        "externalReferences": [
+          {
+            "url": "https://lodash.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/lodash.isfinite/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lodash.set@4.3.2?package-id=be8f210a7cd0fab3",
+        "type": "library",
+        "author": "John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)",
+        "name": "lodash.set",
+        "version": "4.3.2",
+        "description": "The lodash method `_.set` exported as a module.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lodash.set:lodash.set:4.3.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/lodash.set@4.3.2",
+        "externalReferences": [
+          {
+            "url": "https://lodash.com/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/lodash.set/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/logform@2.7.0?package-id=de0c453fbecf2b01",
+        "type": "library",
+        "author": "Charlie Robbins <charlie.robbins@gmail.com>",
+        "name": "logform",
+        "version": "2.7.0",
+        "description": "An mutable object-based log format designed for chaining & objectMode streams.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:winstonjs:logform:2.7.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/logform@2.7.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/winstonjs/logform.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/winstonjs/logform#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:logform:logform:2.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/logform/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/loose-envify@1.4.0?package-id=360730ddc52a7620",
+        "type": "library",
+        "author": "Andres Suarez <zertosh@gmail.com>",
+        "name": "loose-envify",
+        "version": "1.4.0",
+        "description": "Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/loose-envify@1.4.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/zertosh/loose-envify.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/zertosh/loose-envify",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zertosh:loose-envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zertosh:loose_envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/loose-envify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lowercase-keys@1.0.0?package-id=32832572ce4df07d",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "lowercase-keys",
+        "version": "1.0.0",
+        "description": "Lowercase the keys of an object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/lowercase-keys@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lowercase-keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lowercase_keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lowercase_keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lowercase:lowercase-keys:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lowercase:lowercase_keys:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/lowercase-keys/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lru-cache@10.4.3?package-id=ceda3bc6e5ebcc1b",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me>",
+        "name": "lru-cache",
+        "version": "10.4.3",
+        "description": "A cache object that deletes the least-recently-used items.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/lru-cache@10.4.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-lru-cache.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/lru-cache/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/lru-cache@6.0.0?package-id=65977491543b90a8",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me>",
+        "name": "lru-cache",
+        "version": "6.0.0",
+        "description": "A cache object that deletes the least-recently-used items.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:lru-cache:6.0.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/lru-cache@6.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-lru-cache.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-dir@1.3.0?package-id=94cfb98bee7b443d",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "make-dir",
+        "version": "1.3.0",
+        "description": "Make a directory and its parents if needed - Think `mkdir -p`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:make-dir:make-dir:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-dir@1.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-dir:make_dir:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_dir:make-dir:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_dir:make_dir:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-dir:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_dir:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress/node_modules/make-dir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-dir@2.1.0?package-id=4beba0ec739f4b97",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "make-dir",
+        "version": "2.1.0",
+        "description": "Make a directory and its parents if needed - Think `mkdir -p`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:make-dir:make-dir:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-dir@2.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-dir:make_dir:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_dir:make-dir:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_dir:make_dir:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-dir:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_dir:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-dir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-fetch-happen@14.0.3?package-id=cbd26296f86ea3b8",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "make-fetch-happen",
+        "version": "14.0.3",
+        "description": "Opinionated, caching, retrying fetch client",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-fetch-happen@14.0.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/make-fetch-happen.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-fetch-happen/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-fetch-happen@9.1.0?package-id=07e960a14667d805",
+        "type": "library",
+        "author": "Kat Marchán <kzm@zkat.tech>",
+        "name": "make-fetch-happen",
+        "version": "9.1.0",
+        "description": "Opinionated, caching, retrying fetch client",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:make-fetch-happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-fetch-happen@9.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/make-fetch-happen",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-fetch-happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch_happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch_happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-iterator@1.0.1?package-id=2e70d0d98acb0009",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "make-iterator",
+        "version": "1.0.1",
+        "description": "Convert an argument into a valid iterator. Based on the `.makeIterator()` implementation in mout https://github.com/mout/mout.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:make-iterator:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-iterator@1.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/make-iterator",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:make_iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-iterator:make-iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-iterator:make_iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_iterator:make-iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_iterator:make_iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_iterator:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-iterator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-plural@4.3.0?package-id=6f404b9eb22f1024",
+        "type": "library",
+        "author": "Eemeli Aro <eemeli@gmail.com>",
+        "name": "make-plural",
+        "version": "4.3.0",
+        "description": "Translates Unicode CLDR pluralization rules to executable JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:make-plural:make-plural:4.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-plural@4.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/eemeli/make-plural#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-plural:make_plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_plural:make-plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_plural:make_plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eemeli:make-plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eemeli:make_plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_plural:4.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/make-plural@6.2.2?package-id=7b87370db2b76e71",
+        "type": "library",
+        "author": "Eemeli Aro <eemeli@gmail.com>",
+        "name": "make-plural",
+        "version": "6.2.2",
+        "description": "Unicode CLDR pluralization rules as JavaScript functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:make-plural:make-plural:6.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/make-plural@6.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/eemeli/make-plural.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/eemeli/make-plural#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make-plural:make_plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_plural:make-plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make_plural:make_plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eemeli:make-plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:eemeli:make_plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make-plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:make:make_plural:6.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-plural/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/map-cache@0.2.2?package-id=5f83b17e9f854ecc",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "map-cache",
+        "version": "0.2.2",
+        "description": "Basic cache object for storing key-value pairs.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:map-cache:0.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/map-cache@0.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/map-cache",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:map_cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:map-cache:map-cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:map-cache:map_cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:map_cache:map-cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:map_cache:map_cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:map:map-cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:map:map_cache:0.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/map-cache/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/marsdb@0.6.11?package-id=92d5870e9d43058d",
+        "type": "library",
+        "author": "Artem Artemev <art@studytime.me>, Artem Artemev",
+        "name": "marsdb",
+        "version": "0.6.11",
+        "description": "MarsDB is a lightweight client-side MongoDB-like database, Promise based, written in ES6",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:marsdb:marsdb:0.6.11:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/marsdb@0.6.11",
+        "externalReferences": [
+          {
+            "url": "https://github.com/c58/marsdb",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:c58:marsdb:0.6.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/marsdb/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/material-dynamic-colors@1.1.4?package-id=fe5d0e75276cf249",
+        "type": "library",
+        "author": "Leonardo Rafal Wehrmeister",
+        "name": "material-dynamic-colors",
+        "version": "1.1.4",
+        "description": "This project is based on https://material-foundation.github.io/material-theme-builder and uses official color utilities from Material Design.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:material-dynamic-colors:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/material-dynamic-colors@1.1.4",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/leonardorafael/material-dynamic-colors.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/leonardorafael/material-dynamic-colors",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material-dynamic-colors:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material_dynamic_colors:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material_dynamic_colors:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material-dynamic:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material-dynamic:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material_dynamic:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material_dynamic:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:leonardorafael:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:leonardorafael:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/material-dynamic-colors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/material-icons@1.13.14?package-id=1483a12cffbd67d7",
+        "type": "library",
+        "name": "material-icons",
+        "version": "1.13.14",
+        "description": "Latest icon fonts and CSS for self-hosting material design icons.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:material-icons:material-icons:1.13.14:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/material-icons@1.13.14",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/marella/material-icons.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://marella.github.io/material-icons/demo/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material-icons:material_icons:1.13.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material_icons:material-icons:1.13.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material_icons:material_icons:1.13.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material:material-icons:1.13.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:material:material_icons:1.13.14:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/material-icons/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/math-interval-parser@2.0.1?package-id=c4cf81a86732a92f",
+        "type": "library",
+        "author": "Dmitry Semigradsky <semigradskyd@gmail.com> (https://github.com/Semigradsky)",
+        "name": "math-interval-parser",
+        "version": "2.0.1",
+        "description": "Parse math interval",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:math-interval-parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/math-interval-parser@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math-interval-parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math_interval_parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math_interval_parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math-interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math-interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math_interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math_interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math:math-interval-parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math:math_interval_parser:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/math-interval-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/math-intrinsics@1.1.0?package-id=aa8ac1643abd998a",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "math-intrinsics",
+        "version": "1.1.0",
+        "description": "ES Math-related intrinsics and helpers, robustly cached.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/math-intrinsics@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/es-shims/math-intrinsics.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/es-shims/math-intrinsics#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/math-intrinsics/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/media-typer@0.3.0?package-id=761d39c4b96da905",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "media-typer",
+        "version": "0.3.0",
+        "description": "Simple RFC 6838 media type parser and formatter",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/media-typer@0.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/media-typer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13.4&package-id=3c9375f7f83b0d94",
+        "type": "library",
+        "publisher": "Mime-Support Packagers <team+debian-mimesupport-packagers@tracker.debian.org>",
+        "name": "media-types",
+        "version": "13.0.0",
+        "licenses": [
+          {
+            "license": {
+              "name": "ad-hoc"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:media-types:media-types:13.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media-types:media_types:13.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media_types:media-types:13.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media_types:media_types:13.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media:media-types:13.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:media:media_types:13.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/media-types"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/media-types/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/media-types.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "98"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/median@0.0.2?package-id=9d5d7412a9d2ef14",
+        "type": "library",
+        "author": "Khalid Lafi",
+        "name": "median",
+        "version": "0.0.2",
+        "description": "a small module for node and browser to calculate median",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:lafikl:median:0.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/median@0.0.2",
+        "externalReferences": [
+          {
+            "url": "http://github.com/lafikl/median",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/lafikl/median",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:median:median:0.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/median/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/merge-descriptors@1.0.3?package-id=d9e5a65c51115c3f",
+        "type": "library",
+        "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Mike Grabowski <grabbou@gmail.com>",
+        "name": "merge-descriptors",
+        "version": "1.0.3",
+        "description": "Merge objects using descriptors",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/merge-descriptors@1.0.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:merge:merge-descriptors:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:merge:merge_descriptors:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/merge-descriptors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/messageformat@2.3.0?package-id=f69b2994a9e9d9fe",
+        "type": "library",
+        "author": "Alex Sexton <alexsexton@gmail.com>, Eemeli Aro <eemeli@gmail.com>",
+        "name": "messageformat",
+        "version": "2.3.0",
+        "description": "PluralFormat and SelectFormat Message and i18n Tool - A JavaScript Implemenation of the ICU standards.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:messageformat:messageformat:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/messageformat@2.3.0",
+        "externalReferences": [
+          {
+            "url": "https://messageformat.github.io/messageformat/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/messageformat/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/messageformat-formatters@2.0.1?package-id=2b6c534059aeab68",
+        "type": "library",
+        "author": "Eemeli Aro <eemeli@gmail.com>",
+        "name": "messageformat-formatters",
+        "version": "2.0.1",
+        "description": "Formatters for messageformat",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:messageformat-formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/messageformat-formatters@2.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/messageformat/messageformat.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://messageformat.github.io/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat-formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat_formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat_formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat:messageformat-formatters:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/messageformat-formatters/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/messageformat-parser@4.1.3?package-id=e027aa677afa5141",
+        "type": "library",
+        "author": "Alex Sexton <alexsexton@gmail.com>, Eemeli Aro <eemeli@gmail.com>, Nikola Kovacs <nikola.kovacs@gmail.com>, Adrian Vogelsgesang <adrian.vogelsgesang@tum.de>",
+        "name": "messageformat-parser",
+        "version": "4.1.3",
+        "description": "A PEG.js parser for ICU MessageFormat strings",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:messageformat-parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/messageformat-parser@4.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/messageformat/messageformat.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://messageformat.github.io/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat-parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat_parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat_parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat:messageformat-parser:4.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:messageformat:messageformat_parser:4.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/messageformat-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/methods@1.1.2?package-id=5f8a3e9c18de5014",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)",
+        "name": "methods",
+        "version": "1.1.2",
+        "description": "HTTP methods that node supports",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/methods@1.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/methods/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/micromatch@4.0.8?package-id=cd4baaca2f4fae81",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), , Amila Welihinda (amilajack.com), Bogdan Chadkin (https://github.com/TrySound), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Elan Shanker (https://github.com/es128), Fabrício Matté (https://ultcombo.js.org), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (https://kolarik.sk), Olsten Larck (https://i.am.charlike.online), Paul Miller (paulmillr.com), Tom Byrer (https://github.com/tomByrer), Tyler Akins (http://rumkin.com), Peter Bright <drpizza@quiscalusmexicanus.org> (https://github.com/drpizza), Kuba Juszczyk (https://github.com/ku8ar)",
+        "name": "micromatch",
+        "version": "4.0.8",
+        "description": "Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/micromatch@4.0.8",
+        "externalReferences": [
+          {
+            "url": "https://github.com/micromatch/micromatch",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/micromatch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mime@1.6.0?package-id=1ebb82e2ba25a844",
+        "type": "library",
+        "author": "Robert Kieffer <robert@broofa.com> (http://github.com/broofa), Benjamin Thomas <benjamin@benjaminthomas.org> (http://github.com/bentomas)",
+        "name": "mime",
+        "version": "1.6.0",
+        "description": "A comprehensive library for mime-type mapping",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mime_project:mime:1.6.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/mime@1.6.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/broofa/node-mime",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mime/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mime-db@1.52.0?package-id=43c6f2fbd14f0eba",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Robert Kieffer <robert@broofa.com> (http://github.com/broofa)",
+        "name": "mime-db",
+        "version": "1.52.0",
+        "description": "Media Type Database",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mime-db@1.52.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mime-db/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mime-types@2.1.35?package-id=33e05356d0dff6ad",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su), Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "mime-types",
+        "version": "2.1.35",
+        "description": "The ultimate javascript content-type utility.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mime-types@2.1.35",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mime-types/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mimic-response@1.0.1?package-id=02b892e02c7322ac",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "mimic-response",
+        "version": "1.0.1",
+        "description": "Mimic a Node.js HTTP response stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mimic-response:mimic-response:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mimic-response@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic-response:mimic_response:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic-response:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic_response:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic-response:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic_response:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mimic-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mimic-response@2.1.0?package-id=0e93cdb85c89eacc",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "mimic-response",
+        "version": "2.1.0",
+        "description": "Mimic a Node.js HTTP response stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mimic-response:mimic-response:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mimic-response@2.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic-response:mimic_response:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic-response:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic_response:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic-response:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic_response:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=845c5d602993a101",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "mimic-response",
+        "version": "3.1.0",
+        "description": "Mimic a Node.js HTTP response stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mimic-response@3.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mimic-response@3.1.0?package-id=2b67abea8a06a8db",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "mimic-response",
+        "version": "3.1.0",
+        "description": "Mimic a Node.js HTTP response stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mimic-response@3.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minimatch@3.0.5?package-id=a7d9f58fa9223af7",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
+        "name": "minimatch",
+        "version": "3.0.5",
+        "description": "a glob matcher in javascript",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.0.5:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/minimatch@3.0.5",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/minimatch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/minimatch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minimatch@3.1.5?package-id=4c40ff5e6c73fe10",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
+        "name": "minimatch",
+        "version": "3.1.5",
+        "description": "a glob matcher in javascript",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minimatch_project:minimatch:3.1.5:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/minimatch@3.1.5",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/minimatch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minimatch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minimatch@9.0.9?package-id=cdc77ee68011f408",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
+        "name": "minimatch",
+        "version": "9.0.9",
+        "description": "a glob matcher in javascript",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minimatch_project:minimatch:9.0.9:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/minimatch@9.0.9",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/minimatch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/glob/node_modules/minimatch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minimist@1.2.8?package-id=9c7c73598a676732",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "minimist",
+        "version": "1.2.8",
+        "description": "parse argument options",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minimist@1.2.8",
+        "externalReferences": [
+          {
+            "url": "git://github.com/minimistjs/minimist.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/minimistjs/minimist",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minimist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@2.9.0?package-id=59462219a37abffd",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "2.9.0",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@2.9.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@3.3.6?package-id=338b486a654e33cb",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "3.3.6",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@3.3.6",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@3.3.6?package-id=7256b9dc3ee5141e",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "3.3.6",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@3.3.6",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@3.3.6?package-id=b65044371c10aa40",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "3.3.6",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@3.3.6",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@3.3.6?package-id=04660218c5e211d0",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "3.3.6",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@3.3.6",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@5.0.0?package-id=e285aecf7d10679e",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "5.0.0",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@5.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass@7.1.3?package-id=192441890be7c4e4",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minipass",
+        "version": "7.1.3",
+        "description": "minimal implementation of a PassThrough stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass@7.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/minipass",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:minipass:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-collect@1.0.2?package-id=63efb267ac514e08",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "minipass-collect",
+        "version": "1.0.2",
+        "description": "A Minipass stream that collects all the data into a single chunk",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-collect@1.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-collect:minipass_collect:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_collect:minipass-collect:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_collect:minipass_collect:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-collect:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_collect:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-collect@2.0.1?package-id=8fecd15c1c48c3bb",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "minipass-collect",
+        "version": "2.0.1",
+        "description": "A Minipass stream that collects all the data into a single chunk",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-collect@2.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/minipass-collect",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-collect/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-fetch@1.4.1?package-id=f1dcdfbdae2d40b2",
+        "type": "library",
+        "name": "minipass-fetch",
+        "version": "1.4.1",
+        "description": "An implementation of window.fetch in Node.js using Minipass streams",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-fetch@1.4.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/minipass-fetch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-fetch:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_fetch:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-fetch@4.0.1?package-id=7894cdb8bcb4ca43",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "minipass-fetch",
+        "version": "4.0.1",
+        "description": "An implementation of window.fetch in Node.js using Minipass streams",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-fetch@4.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/minipass-fetch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-fetch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-flush@1.0.7?package-id=24aae4756b0bc5be",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "minipass-flush",
+        "version": "1.0.7",
+        "description": "A Minipass stream that calls a flush function before emitting 'end'",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-flush:minipass-flush:1.0.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-flush@1.0.7",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass-flush.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-flush:minipass_flush:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_flush:minipass-flush:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_flush:minipass_flush:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-flush:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_flush:1.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-flush/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-pipeline@1.2.4?package-id=8d7f8393e7e2d352",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "minipass-pipeline",
+        "version": "1.2.4",
+        "description": "create a pipeline of streams using Minipass",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-pipeline@1.2.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-pipeline/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minipass-sized@1.0.3?package-id=82b64febd11d5f17",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "minipass-sized",
+        "version": "1.0.3",
+        "description": "A Minipass stream that raises an error if you get a different number of bytes than expected",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minipass-sized@1.0.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minipass-sized.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-sized/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minizlib@1.3.3?package-id=6cecd69a39d4a47e",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minizlib",
+        "version": "1.3.3",
+        "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minizlib@1.3.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minizlib.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minizlib@2.1.2?package-id=871e116128fa5e93",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minizlib",
+        "version": "2.1.2",
+        "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minizlib@2.1.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minizlib.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/minizlib@3.1.0?package-id=eb188ffb845b006f",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "minizlib",
+        "version": "3.1.0",
+        "description": "A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/minizlib@3.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/minizlib.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minizlib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mkdirp@0.5.6?package-id=c8db67c82a47b27a",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "mkdirp",
+        "version": "0.5.6",
+        "description": "Recursively mkdir, like `mkdir -p`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mkdirp@0.5.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/substack/node-mkdirp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mkdirp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=d3ea554779e8735f",
+        "type": "library",
+        "name": "mkdirp",
+        "version": "1.0.4",
+        "description": "Recursively mkdir, like `mkdir -p`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mkdirp@1.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/node-mkdirp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@npmcli/move-file/node_modules/mkdirp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mkdirp@1.0.4?package-id=7ecfd98172b6768e",
+        "type": "library",
+        "name": "mkdirp",
+        "version": "1.0.4",
+        "description": "Recursively mkdir, like `mkdir -p`",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mkdirp@1.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/node-mkdirp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/mkdirp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mkdirp-classic@0.5.3?package-id=fbd74b5142e9aacc",
+        "type": "library",
+        "author": "Mathias Buus (@mafintosh)",
+        "name": "mkdirp-classic",
+        "version": "0.5.3",
+        "description": "Mirror of mkdirp 0.5.2",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mkdirp-classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mkdirp-classic@0.5.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mafintosh/mkdirp-classic.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mafintosh/mkdirp-classic",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp-classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp_classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp_classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mkdirp:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mkdirp-classic/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/moment@2.0.0?package-id=fb07dad56d7726f5",
+        "type": "library",
+        "author": "Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Iskren Ivov Chernev <iskren.chernev@gmail.com> (https://github.com/ichernev)",
+        "name": "moment",
+        "version": "2.0.0",
+        "description": "Parse, manipulate, and display dates.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:momentjs:moment:2.0.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/moment@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/timrwood/moment.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://momentjs.com",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/express-jwt/node_modules/moment/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/moment@2.30.1?package-id=7f78544a103db020",
+        "type": "library",
+        "author": "Iskren Ivov Chernev <iskren.chernev@gmail.com> (https://github.com/ichernev), Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Matt Johnson <mj1856@hotmail.com> (http://codeofmatt.com), Isaac Cambron <isaac@isaaccambron.com> (http://isaaccambron.com), Andre Polykanine <andre@oire.org> (https://github.com/oire)",
+        "name": "moment",
+        "version": "2.30.1",
+        "description": "Parse, validate, manipulate, and display dates",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:momentjs:moment:2.30.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/moment@2.30.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/moment/moment.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://momentjs.com",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/moment/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/moment-timezone@0.5.48?package-id=1d07c82a5521aa67",
+        "type": "library",
+        "author": "Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/)",
+        "name": "moment-timezone",
+        "version": "0.5.48",
+        "description": "Parse and display moments in any timezone.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:moment-timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/moment-timezone@0.5.48",
+        "externalReferences": [
+          {
+            "url": "https://github.com/moment/moment-timezone.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://momentjs.com/timezone/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moment-timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moment_timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moment_timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moment:moment-timezone:0.5.48:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:moment:moment_timezone:0.5.48:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/moment-timezone/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/morgan@1.10.1?package-id=36a2e18413295dc3",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "morgan",
+        "version": "1.10.1",
+        "description": "HTTP request logger middleware for node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:morgan_project:morgan:1.10.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/morgan@1.10.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/morgan/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.0.0?package-id=581ded64725caf94",
+        "type": "library",
+        "name": "ms",
+        "version": "2.0.0",
+        "description": "Tiny milisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=fa76bb477435fb7e",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/engine.io/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=6489b39df41cd879",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/http-proxy-agent/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=319a29eaa7507424",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/https-proxy-agent/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=e125437ccc162a77",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/logform/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=a9fd2cba9c8e1d2c",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/needle/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=ea5ff84bf95ffe96",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/send/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=6d03f34fc7d77eec",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sequelize/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=19d28c2a60db5e6f",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io-parser/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=8a79e4b90db520a0",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=5cf696f159e61430",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socks-proxy-agent/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ms@2.1.3?package-id=703b594b3e2459c7",
+        "type": "library",
+        "name": "ms",
+        "version": "2.1.3",
+        "description": "Tiny millisecond conversion utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ms@2.1.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/ms/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/multer@1.4.5-lts.2?package-id=cce9b5dd2cb3fe54",
+        "type": "library",
+        "author": "Hage Yaapa <captain@hacksparrow.com> (http://www.hacksparrow.com), Jaret Pfluger <https://github.com/jpfluger>, Linus Unnebäck <linus@folkdatorn.se>",
+        "name": "multer",
+        "version": "1.4.5-lts.2",
+        "description": "Middleware for handling `multipart/form-data`.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:multer:multer:1.4.5-lts.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/multer@1.4.5-lts.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/multer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mustache@4.2.0?package-id=4b189aa85e6c312d",
+        "type": "library",
+        "author": "mustache.js Authors <http://github.com/janl/mustache.js>",
+        "name": "mustache",
+        "version": "4.2.0",
+        "description": "Logic-less {{mustache}} templates with JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mustache.js:mustache.js:4.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mustache@4.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/janl/mustache.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/janl/mustache.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mustache.js:mustache:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mustache:mustache.js:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mustache:mustache:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:janl:mustache.js:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:janl:mustache:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/mustache/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/mylib@0.0.0?package-id=ca93165f21ef1895",
+        "type": "library",
+        "name": "mylib",
+        "version": "0.0.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mylib:mylib:0.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/mylib@0.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/nan@2.22.2?package-id=f98605c6f902c9b8",
+        "type": "library",
+        "author": "Rod Vagg <r@va.gg> (https://github.com/rvagg), Benjamin Byholm <bbyholm@abo.fi> (https://github.com/kkoopa/), Trevor Norris <trev.norris@gmail.com> (https://github.com/trevnorris), Nathan Rajlich <nathan@tootallnate.net> (https://github.com/TooTallNate), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Ben Noordhuis <info@bnoordhuis.nl> (https://github.com/bnoordhuis), David Siegel <david@artcom.de> (https://github.com/agnat), Michael Ira Krufky <mkrufky@gmail.com> (https://github.com/mkrufky)",
+        "name": "nan",
+        "version": "2.22.2",
+        "description": "Native Abstractions for Node.js: C++ header for Node 0.8 -> 22 compatibility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nodejs:nan:2.22.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/nan@2.22.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/nan.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nan:nan:2.22.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/nan/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/napi-build-utils@1.0.2?package-id=f9886324943b066f",
+        "type": "library",
+        "author": "Jim Schlight",
+        "name": "napi-build-utils",
+        "version": "1.0.2",
+        "description": "A set of utilities to assist developers of tools that build N-API native add-ons",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/napi-build-utils@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspiredware/napi-build-utils.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspiredware/napi-build-utils#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspiredware:napi-build-utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspiredware:napi_build_utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build:napi-build-utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build:napi_build_utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build:napi-build-utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build:napi_build_utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi:napi-build-utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi:napi_build_utils:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/napi-build-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/napi-build-utils@2.0.0?package-id=a1b5ba5038b982fd",
+        "type": "library",
+        "author": "Jim Schlight",
+        "name": "napi-build-utils",
+        "version": "2.0.0",
+        "description": "A set of utilities to assist developers of tools that build N-API native add-ons",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/napi-build-utils@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspiredware/napi-build-utils.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspiredware/napi-build-utils#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/napi-build-utils@2.0.0?package-id=3a25fd995add959b",
+        "type": "library",
+        "author": "Jim Schlight",
+        "name": "napi-build-utils",
+        "version": "2.0.0",
+        "description": "A set of utilities to assist developers of tools that build N-API native add-ons",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/napi-build-utils@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspiredware/napi-build-utils.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspiredware/napi-build-utils#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/needle@2.9.1?package-id=02a44fe43834d9a1",
+        "type": "library",
+        "author": "Tomás Pollak <tomas@forkhq.com>",
+        "name": "needle",
+        "version": "2.9.1",
+        "description": "The leanest and most handsome HTTP client in the Nodelands.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:needle:needle:2.9.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/needle@2.9.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/tomas/needle.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tomas:needle:2.9.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/needle/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/negotiator@0.6.3?package-id=3124531c115a5cf0",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "negotiator",
+        "version": "0.6.3",
+        "description": "HTTP content negotiation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/negotiator@0.6.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/accepts/node_modules/negotiator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/negotiator@0.6.4?package-id=922044f9c518728f",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "negotiator",
+        "version": "0.6.4",
+        "description": "HTTP content negotiation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:negotiator:negotiator:0.6.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/negotiator@0.6.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/negotiator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/negotiator@1.0.0?package-id=c566eb58c86960c4",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "negotiator",
+        "version": "1.0.0",
+        "description": "HTTP content negotiation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/negotiator@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/neo-async@2.6.2?package-id=fa2e675cd8ba8607",
+        "type": "library",
+        "name": "neo-async",
+        "version": "2.6.2",
+        "description": "Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:neo-async:neo-async:2.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/neo-async@2.6.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/suguru03/neo-async",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:neo-async:neo_async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:neo_async:neo-async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:neo_async:neo_async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:suguru03:neo-async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:suguru03:neo_async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:neo:neo-async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:neo:neo_async:2.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/neo-async/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/neoip@2.1.0?package-id=376d1a73b3eff3dd",
+        "type": "library",
+        "author": "Fedor Indutny <fedor@indutny.com>, Mike Hall <michael.hall@zaptic.com>",
+        "name": "neoip",
+        "version": "2.1.0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:zaptic:neoip:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/neoip@2.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/zaptic/neoip.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/zaptic/neoip",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:neoip:neoip:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/neoip/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13.4&package-id=789361e68c8ad425",
+        "type": "library",
+        "publisher": "Marco d'Itri <md@linux.it>",
+        "name": "netbase",
+        "version": "6.5",
+        "licenses": [
+          {
+            "license": {
+              "id": "GPL-2.0-only"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:netbase:netbase:6.5:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/netbase"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/netbase/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/netbase.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "35"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:generic/node@24.15.0?package-id=76f03d93690a7b09",
+        "type": "application",
+        "name": "node",
+        "version": "24.15.0",
+        "cpe": "cpe:2.3:a:nodejs:node.js:24.15.0:*:*:*:*:*:*:*",
+        "purl": "pkg:generic/node@24.15.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "binary-classifier-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "binary"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "binary-signature"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:4a046718166fef824e88680c1932718faaae3d2c7d301fe7777f4678cdad2b14"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/nodejs/bin/node"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-abi@2.30.1?package-id=56163144372dee3f",
+        "type": "library",
+        "author": "Lukas Geiger",
+        "name": "node-abi",
+        "version": "2.30.1",
+        "description": "Get the Node ABI for a given target and runtime, and vice versa.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-abi:node-abi:2.30.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-abi@2.30.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/lgeiger/node-abi.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/lgeiger/node-abi#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-abi:node_abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_abi:node-abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_abi:node_abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lgeiger:node-abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lgeiger:node_abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_abi:2.30.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-abi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-abi@3.92.0?package-id=0203e2d57c19a37d",
+        "type": "library",
+        "author": "Lukas Geiger",
+        "name": "node-abi",
+        "version": "3.92.0",
+        "description": "Get the Node ABI for a given target and runtime, and vice versa.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:electron:node-abi:3.92.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-abi@3.92.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/electron/node-abi.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/electron/node-abi#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:electron:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-abi:node-abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-abi:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_abi:node-abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_abi:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-abi@3.92.0?package-id=49f015f169b02934",
+        "type": "library",
+        "author": "Lukas Geiger",
+        "name": "node-abi",
+        "version": "3.92.0",
+        "description": "Get the Node ABI for a given target and runtime, and vice versa.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:electron:node-abi:3.92.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-abi@3.92.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/electron/node-abi.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/electron/node-abi#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:electron:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-abi:node-abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-abi:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_abi:node-abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_abi:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_abi:3.92.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-addon-api@7.1.1?package-id=3b2568607ceb74e4",
+        "type": "library",
+        "author": "Abhishek Kumar Singh (https://github.com/abhi11210646), Alba Mendez (https://github.com/jmendeth), Alexander Floh (https://github.com/alexanderfloh), Ammar Faizi (https://github.com/ammarfaizi2), András Timár, Dr (https://github.com/timarandras), Andrew Petersen (https://github.com/kirbysayshi), Anisha Rohra (https://github.com/anisha-rohra), Anna Henningsen (https://github.com/addaleax), Arnaud Botella (https://github.com/BotellaA), Arunesh Chandra (https://github.com/aruneshchandra), Azlan Mukhtar (https://github.com/azlan), Ben Berman (https://github.com/rivertam), Benjamin Byholm (https://github.com/kkoopa), Bill Gallafent (https://github.com/gallafent), blagoev (https://github.com/blagoev), Bruce A. MacNaughton (https://github.com/bmacnaughton), Cory Mickelson (https://github.com/corymickelson), Daniel Bevenius (https://github.com/danbev), Dante Calderón (https://github.com/dantehemerson), Darshan Sen (https://github.com/RaisinTen), David Halls (https://github.com/davedoesdev), Deepak Rajamohan (https://github.com/deepakrkris), Dmitry Ashkadov (https://github.com/dmitryash), Dongjin Na (https://github.com/nadongguri), Doni Rubiagatra (https://github.com/rubiagatra), Eric Bickle (https://github.com/ebickle), extremeheat (https://github.com/extremeheat), Feng Yu (https://github.com/F3n67u), Ferdinand Holzer (https://github.com/fholzer), Gabriel Schulhof (https://github.com/gabrielschulhof), Guenter Sandner (https://github.com/gms1), Gus Caplan (https://github.com/devsnek), Helio Frota (https://github.com/helio-frota), Hitesh Kanwathirtha (https://github.com/digitalinfinity), ikokostya (https://github.com/ikokostya), Jack Xia (https://github.com/JckXia), Jake Barnes (https://github.com/DuBistKomisch), Jake Yoon (https://github.com/yjaeseok), Jason Ginchereau (https://github.com/jasongin), Jenny (https://github.com/egg-bread), Jeroen Janssen (https://github.com/japj), Jim Schlight (https://github.com/jschlight), Jinho Bang (https://github.com/romandev), José Expósito (https://github.com/JoseExposito), joshgarde (https://github.com/joshgarde), Julian Mesa (https://github.com/julianmesa-gitkraken), Kasumi Hanazuki (https://github.com/hanazuki), Kelvin (https://github.com/kelvinhammond), Kevin Eady (https://github.com/KevinEady), Kévin VOYER (https://github.com/kecsou), kidneysolo (https://github.com/kidneysolo), Koki Nishihara (https://github.com/Nishikoh), Konstantin Tarkus (https://github.com/koistya), Kyle Farnung (https://github.com/kfarnung), Kyle Kovacs (https://github.com/nullromo), legendecas (https://github.com/legendecas), LongYinan (https://github.com/Brooooooklyn), Lovell Fuller (https://github.com/lovell), Luciano Martorella (https://github.com/lmartorella), mastergberry (https://github.com/mastergberry), Mathias Küsel (https://github.com/mathiask88), Mathias Stearn (https://github.com/RedBeard0531), Matteo Collina (https://github.com/mcollina), Michael Dawson (https://github.com/mhdawson), Michael Price (https://github.com/mikepricedev), Michele Campus (https://github.com/kYroL01), Mikhail Cheshkov (https://github.com/mcheshkov), nempoBu4 (https://github.com/nempoBu4), Nicola Del Gobbo (https://github.com/NickNaso), Nick Soggin (https://github.com/iSkore), Nikolai Vavilov (https://github.com/seishun), Nurbol Alpysbayev (https://github.com/anurbol), pacop (https://github.com/pacop), Peter Šándor (https://github.com/petersandor), Philipp Renoth (https://github.com/DaAitch), rgerd (https://github.com/rgerd), Richard Lau (https://github.com/richardlau), Rolf Timmermans (https://github.com/rolftimmermans), Ross Weir (https://github.com/ross-weir), Ryuichi Okumura (https://github.com/okuryu), Saint Gabriel (https://github.com/chineduG), Sampson Gao (https://github.com/sampsongao), Sam Roberts (https://github.com/sam-github), strager (https://github.com/strager), Taylor Woll (https://github.com/boingoing), Thomas Gentilhomme (https://github.com/fraxken), Tim Rach (https://github.com/timrach), Tobias Nießen (https://github.com/tniessen), todoroff (https://github.com/todoroff), Toyo Li (https://github.com/toyobayashi), Tux3 (https://github.com/tux3), Vlad Velmisov (https://github.com/Velmisov), Vladimir Morozov (https://github.com/vmoroz), WenheLI (https://github.com/WenheLI), Xuguang Mei (https://github.com/meixg), Yohei Kishimoto (https://github.com/morokosi), Yulong Wang (https://github.com/fs-eire), Ziqiu Zhao (https://github.com/ZzqiZQute), Feng Yu (https://github.com/F3n67u), wanlu wang (https://github.com/wanlu), Caleb Hearon (https://github.com/chearon), Marx (https://github.com/MarxJiao), Ömer AKGÜL (https://github.com/tuhalf)",
+        "name": "node-addon-api",
+        "version": "7.1.1",
+        "description": "Node.js API (Node-API)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-addon-api:node-addon-api:7.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-addon-api@7.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/node-addon-api.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/nodejs/node-addon-api",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-addon-api:node_addon_api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_addon_api:node-addon-api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_addon_api:node_addon_api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-addon:node-addon-api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-addon:node_addon_api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_addon:node-addon-api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_addon:node_addon_api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:node-addon-api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:node_addon_api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-addon-api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_addon_api:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-addon-api/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-gyp@11.5.0?package-id=81a9275b7bb13ed5",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
+        "name": "node-gyp",
+        "version": "11.5.0",
+        "description": "Node.js native addon build tool",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-gyp:node-gyp:11.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-gyp@11.5.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/node-gyp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_gyp:node-gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:node-gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:node_gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_gyp:11.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-gyp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-gyp@8.4.1?package-id=4c76218352127cf5",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)",
+        "name": "node-gyp",
+        "version": "8.4.1",
+        "description": "Node.js native addon build tool",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-gyp:node-gyp:8.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-gyp@8.4.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/node-gyp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-gyp:node_gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_gyp:node-gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_gyp:node_gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:node-gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:node_gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_gyp:8.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/node-pre-gyp@0.15.0?package-id=f723ada374e828f8",
+        "type": "library",
+        "author": "Dane Springmeyer <dane@mapbox.com>",
+        "name": "node-pre-gyp",
+        "version": "0.15.0",
+        "description": "Node.js native addon binary install tool",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:node-pre-gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/node-pre-gyp@0.15.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/mapbox/node-pre-gyp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-pre-gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_pre_gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_pre_gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node-pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node_pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mapbox:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mapbox:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:node:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/noop-logger@0.1.1?package-id=62097a3cbdf4d6ce",
+        "type": "library",
+        "name": "noop-logger",
+        "version": "0.1.1",
+        "description": "A logger that does exactly nothing.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:noop-logger:noop-logger:0.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/noop-logger@0.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/segmentio/noop-logger.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:noop-logger:noop_logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:noop_logger:noop-logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:noop_logger:noop_logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:segmentio:noop-logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:segmentio:noop_logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:noop:noop-logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:noop:noop_logger:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/noop-logger/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/nopt@4.0.3?package-id=17084a2a134171fb",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "nopt",
+        "version": "4.0.3",
+        "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/nopt@4.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/nopt.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:nopt:4.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/nopt@5.0.0?package-id=a292a6d3f8b86f6b",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "nopt",
+        "version": "5.0.0",
+        "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/nopt@5.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/nopt.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:nopt:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/nopt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/nopt@8.1.0?package-id=e53437a448e9c126",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "nopt",
+        "version": "8.1.0",
+        "description": "Option parsing for Node, supporting types, shorthands, etc. Used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/nopt@8.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/nopt.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/normalize-path@2.1.1?package-id=371b1b4791f29956",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz <blaine.bublitz@gmail.com> (https://twitter.com/BlaineBublitz), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert)",
+        "name": "normalize-path",
+        "version": "2.1.1",
+        "description": "Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:normalize-path:normalize-path:2.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/normalize-path@2.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/normalize-path",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:normalize-path:normalize_path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:normalize_path:normalize-path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:normalize_path:normalize_path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:normalize-path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:normalize_path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:normalize:normalize-path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:normalize:normalize_path:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/normalize-path/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/normalize-url@2.0.1?package-id=19ee02344c33b376",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "normalize-url",
+        "version": "2.0.1",
+        "description": "Normalize a URL",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:normalize-url_project:normalize-url:2.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/normalize-url@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/normalize-url/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/notevil@1.3.3?package-id=06d4740823f7ae47",
+        "type": "library",
+        "author": "Matt McKegg",
+        "name": "notevil",
+        "version": "1.3.3",
+        "description": "Evalulate javascript like the built-in eval() method but safely",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:notevil_project:notevil:1.3.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/notevil@1.3.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mmckegg/notevil",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/notevil/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/npm-bundled@1.1.2?package-id=9514fb53235856ea",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "npm-bundled",
+        "version": "1.1.2",
+        "description": "list things in node_modules that are bundledDependencies, or transitive dependencies thereof",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/npm-bundled@1.1.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/npm-bundled.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npm-bundled:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npm_bundled:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/npm-bundled/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/npm-normalize-package-bin@1.0.1?package-id=a243c54124680107",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "npm-normalize-package-bin",
+        "version": "1.0.1",
+        "description": "Turn any flavor of allowable package.json bin into a normalized object",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/npm-normalize-package-bin@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/npm-normalize-package-bin",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/npm-normalize-package-bin/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/npm-packlist@1.4.8?package-id=d146b73bd2488b35",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "npm-packlist",
+        "version": "1.4.8",
+        "description": "Get a list of the files to add from a folder into an npm package",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/npm-packlist@1.4.8",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/npm-packlist.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://www.npmjs.com/package/npm-packlist",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm-packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm_packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npm-packlist:1.4.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npm_packlist:1.4.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/npm-packlist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/npmlog@4.1.2?package-id=f0ae369a8e8ec43c",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "npmlog",
+        "version": "4.1.2",
+        "description": "logger for npm",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/npmlog@4.1.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/npmlog.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npmlog:4.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/npmlog/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/npmlog@6.0.2?package-id=0ceab194b80b773c",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "npmlog",
+        "version": "6.0.2",
+        "description": "logger for npm",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/npmlog@6.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/npmlog.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:npmlog:6.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/number-is-nan@1.0.1?package-id=d623ff908a3a9701",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "number-is-nan",
+        "version": "1.0.1",
+        "description": "ES2015 Number.isNaN() ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/number-is-nan@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number-is-nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number_is_nan:number-is-nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number_is_nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number-is:number-is-nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number-is:number_is_nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number_is:number-is-nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number_is:number_is_nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number:number-is-nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:number:number_is_nan:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/number-is-nan/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/nw-pre-gyp-module-test@0.0.1?package-id=c9c21893f035082b",
+        "type": "library",
+        "name": "nw-pre-gyp-module-test",
+        "version": "0.0.1",
+        "description": "Node-webkit-based module test.",
+        "cpe": "cpe:2.3:a:nw-pre-gyp-module-test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/nw-pre-gyp-module-test@0.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre-gyp-module-test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre_gyp_module_test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre_gyp_module_test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre-gyp-module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre-gyp-module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre_gyp_module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre_gyp_module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre-gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre-gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre_gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre_gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw-pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw_pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nw:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object-assign@4.1.1?package-id=4c17ebf4ed7ff6f6",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "object-assign",
+        "version": "4.1.1",
+        "description": "ES2015 `Object.assign()` ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object-assign@4.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object-assign/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object-inspect@1.13.4?package-id=9fa07124108ec4f5",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "object-inspect",
+        "version": "1.13.4",
+        "description": "string representations of objects in node and the browser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object-inspect@1.13.4",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/object-inspect.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/object-inspect",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:object-inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:object_inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object-inspect/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object-is@1.1.6?package-id=84b496a3bc09adcb",
+        "type": "library",
+        "author": "Jordan Harband",
+        "name": "object-is",
+        "version": "1.1.6",
+        "description": "ES2015-compliant shim for Object.is - differentiates between -0 and +0",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:object-is:object-is:1.1.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object-is@1.1.6",
+        "externalReferences": [
+          {
+            "url": "git://github.com/es-shims/object-is.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/es-shims/object-is",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object-is:object_is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_is:object-is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_is:object_is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:object-is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:object_is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object-is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object_is:1.1.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object-is/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object-keys@1.1.1?package-id=f895e876218f5744",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Raynos <raynos2@gmail.com>, Nathan Rajlich <nathan@tootallnate.net>, Ivan Starkov <istarkov@gmail.com>, Gary Katsevman <git@gkatsev.com>",
+        "name": "object-keys",
+        "version": "1.1.1",
+        "description": "An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object-keys@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ljharb/object-keys.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object-keys:object_keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_keys:object-keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object_keys:object_keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:object-keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:object_keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object-keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object:object_keys:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object-keys/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object.assign@4.1.7?package-id=99e989384d4fde68",
+        "type": "library",
+        "author": "Jordan Harband",
+        "name": "object.assign",
+        "version": "4.1.7",
+        "description": "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:object.assign:object.assign:4.1.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object.assign@4.1.7",
+        "externalReferences": [
+          {
+            "url": "git://github.com/ljharb/object.assign.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:object.assign:4.1.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object.assign/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object.defaults@1.1.0?package-id=367f49b07eb9d797",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert), Sobolev Nikita <mail@sobolevn.me> (https://github.com/sobolevn)",
+        "name": "object.defaults",
+        "version": "1.1.0",
+        "description": "Like `extend` but only copies missing properties/values to the target object.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:object.defaults:object.defaults:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object.defaults@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/object.defaults",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:object.defaults:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object.defaults/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object.map@1.0.1?package-id=929d9a3710694392",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)",
+        "name": "object.map",
+        "version": "1.0.1",
+        "description": "Similar to map for arrays, this creates a new object by calling the callback on each property of the original object.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:object.map:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object.map@1.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/object.map",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object.map:object.map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object.map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/object.pick@1.3.0?package-id=5e847d3bd979f56f",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "object.pick",
+        "version": "1.3.0",
+        "description": "Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:object.pick:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/object.pick@1.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/object.pick",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:object.pick:object.pick:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/object.pick/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/on-finished@2.3.0?package-id=eba7c3545387287a",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "on-finished",
+        "version": "2.3.0",
+        "description": "Execute a callback when a request closes, finishes, or errors",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/on-finished@2.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/morgan/node_modules/on-finished/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/on-finished@2.4.1?package-id=f038e79e9d5d2966",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "on-finished",
+        "version": "2.4.1",
+        "description": "Execute a callback when a request closes, finishes, or errors",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:on-finished:on-finished:2.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/on-finished@2.4.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on-finished:on_finished:2.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on_finished:on-finished:2.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on_finished:on_finished:2.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on:on-finished:2.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on:on_finished:2.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/on-finished/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/on-headers@1.1.0?package-id=4edf87114c9684eb",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "on-headers",
+        "version": "1.1.0",
+        "description": "Execute a listener when a response is about to write headers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:on-headers:on-headers:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/on-headers@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on-headers:on_headers:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on_headers:on-headers:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on_headers:on_headers:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on:on-headers:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:on:on_headers:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/on-headers/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/once@1.4.0?package-id=710fa9c43bb773a8",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "once",
+        "version": "1.4.0",
+        "description": "Run a function exactly one time",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/once@1.4.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/once",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/once/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/one-time@1.0.0?package-id=c572449b4ab3e7a6",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "one-time",
+        "version": "1.0.0",
+        "description": "Run the supplied function exactly one time (once)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:3rd-Eden:one-time:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/one-time@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/3rd-Eden/one-time.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:3rd-Eden:one_time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:one-time:one-time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:one-time:one_time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:one_time:one-time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:one_time:one_time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:one:one-time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:one:one_time:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/one-time/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/opentype.js@0.7.3?package-id=0a5d0e299d0ca888",
+        "type": "library",
+        "author": "Frederik De Bleser <frederik@debleser.be>",
+        "name": "opentype.js",
+        "version": "0.7.3",
+        "description": "OpenType font parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:opentype.js:opentype.js:0.7.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/opentype.js@0.7.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodebox/opentype.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodebox:opentype.js:0.7.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/opentype.js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/os-homedir@1.0.2?package-id=52db215c8294fee6",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "os-homedir",
+        "version": "1.0.2",
+        "description": "Node.js 4 `os.homedir()` ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/os-homedir@1.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os-homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os_homedir:os-homedir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os_homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os:os-homedir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os:os_homedir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/os-homedir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/os-tmpdir@1.0.2?package-id=4374998874b59022",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "os-tmpdir",
+        "version": "1.0.2",
+        "description": "Node.js os.tmpdir() ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/os-tmpdir@1.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os-tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os_tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os_tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os:os-tmpdir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:os:os_tmpdir:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/os-tmpdir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/osenv@0.1.5?package-id=1369b3372e58f531",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "osenv",
+        "version": "0.1.5",
+        "description": "Look up environment settings specific to different operating systems",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/osenv@0.1.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/osenv",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:osenv:0.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/osenv/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/otplib@13.4.0?package-id=0044d1899783133a",
+        "type": "library",
+        "author": "Gerald Yeo <support@yeojz.dev>",
+        "name": "otplib",
+        "version": "13.4.0",
+        "description": "TypeScript-first library for TOTP and HOTP with multi-runtime and plugin support",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:otplib:otplib:13.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/otplib@13.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yeojz/otplib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://otplib.yeojz.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/otplib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-cancelable@0.4.1?package-id=0583de70fcdfc131",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-cancelable",
+        "version": "0.4.1",
+        "description": "Create a promise that can be canceled",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-cancelable@0.4.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-cancelable:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_cancelable:0.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-cancelable/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-event@2.3.1?package-id=df4ea6677e364df8",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-event",
+        "version": "2.3.1",
+        "description": "Promisify an event by waiting for it to be emitted",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-event:p-event:2.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-event@2.3.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-event:p_event:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_event:p-event:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_event:p_event:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-event:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_event:2.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-event/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-finally@1.0.0?package-id=6dc32e80fda079a9",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-finally",
+        "version": "1.0.0",
+        "description": "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-finally@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-finally:p_finally:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_finally:p-finally:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_finally:p_finally:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-finally:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_finally:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-finally/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-is-promise@1.1.0?package-id=bf2a9cb36f7ff224",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-is-promise",
+        "version": "1.1.0",
+        "description": "Check if something is a promise",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-is-promise:p-is-promise:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-is-promise@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-is-promise:p_is_promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_is_promise:p-is-promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_is_promise:p_is_promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-is:p-is-promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-is:p_is_promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_is:p-is-promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_is:p_is_promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-is-promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_is_promise:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-is-promise/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-limit@2.3.0?package-id=1e7a4b5a5a7aade9",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-limit",
+        "version": "2.3.0",
+        "description": "Run multiple promise-returning & async functions with limited concurrency",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-limit@2.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-limit:p_limit:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_limit:p-limit:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_limit:p_limit:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-limit:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_limit:2.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/p-limit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-locate@4.1.0?package-id=55f14ff67eedbaf2",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-locate",
+        "version": "4.1.0",
+        "description": "Get the first fulfilled promise that satisfies the provided testing function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-locate@4.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-locate:p_locate:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_locate:p-locate:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_locate:p_locate:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-locate:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_locate:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/p-locate/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-map@4.0.0?package-id=e8a38305d2594577",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "p-map",
+        "version": "4.0.0",
+        "description": "Map over promises concurrently",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-map@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-map:p_map:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_map:p-map:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_map:p_map:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-map:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_map:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-map@7.0.4?package-id=e932e8eb4b9575ca",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "p-map",
+        "version": "7.0.4",
+        "description": "Map over promises concurrently",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-map:p-map:7.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-map@7.0.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-map:p_map:7.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_map:p-map:7.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_map:p_map:7.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-map:7.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_map:7.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/cacache/node_modules/p-map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-timeout@2.0.1?package-id=df05fe622aab59f4",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-timeout",
+        "version": "2.0.1",
+        "description": "Timeout a promise after a specified amount of time",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-timeout:p-timeout:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-timeout@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-timeout:p_timeout:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_timeout:p-timeout:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_timeout:p_timeout:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-timeout:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_timeout:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-timeout/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/p-try@2.2.0?package-id=cc75054caddacf72",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "p-try",
+        "version": "2.2.0",
+        "description": "`Start a promise chain",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/p-try@2.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p-try:p_try:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_try:p-try:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p_try:p_try:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p-try:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:p:p_try:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/p-try/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/package-json-from-dist@1.0.1?package-id=966e804e2cdc19c3",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://izs.me)",
+        "name": "package-json-from-dist",
+        "version": "1.0.1",
+        "description": "Load the local package.json from either src or dist folder",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/package-json-from-dist@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/package-json-from-dist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/package-json-from-dist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pako@0.2.9?package-id=25e56b2924cae615",
+        "type": "library",
+        "author": "Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin)",
+        "name": "pako",
+        "version": "0.2.9",
+        "description": "zlib port to javascript - fast, modularized, with browser support",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:nodeca:pako:0.2.9:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pako@0.2.9",
+        "externalReferences": [
+          {
+            "url": "https://github.com/nodeca/pako",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pako:pako:0.2.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unicode-trie/node_modules/pako/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pako@1.0.11?package-id=0652478bc95e80f3",
+        "type": "library",
+        "author": "Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin), Friedel Ziegelmayer (https://github.com/dignifiedquire), Kirill Efimov (https://github.com/Kirill89), Jean-loup Gailly, Mark Adler",
+        "name": "pako",
+        "version": "1.0.11",
+        "description": "zlib port to javascript - fast, modularized, with browser support",
+        "licenses": [
+          {
+            "expression": "MIT AND Zlib"
+          }
+        ],
+        "cpe": "cpe:2.3:a:nodeca:pako:1.0.11:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pako@1.0.11",
+        "externalReferences": [
+          {
+            "url": "https://github.com/nodeca/pako",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pako/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/parse-filepath@1.0.2?package-id=e056c65cb29d1cdc",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "parse-filepath",
+        "version": "1.0.2",
+        "description": "Pollyfill for node.js `path.parse`, parses a filepath into an object.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:parse-filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/parse-filepath@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/parse-filepath",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse-filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse_filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse_filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:parse-filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:parse_filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse:parse-filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse:parse_filepath:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/parse-filepath/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/parse-passwd@1.0.0?package-id=fb103d20d587efac",
+        "type": "library",
+        "author": "Brian Woodward (https://github.com/doowb)",
+        "name": "parse-passwd",
+        "version": "1.0.0",
+        "description": "Parse a passwd file into a list of users.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:parse-passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/parse-passwd@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/doowb/parse-passwd",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse-passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse_passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse_passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:doowb:parse-passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:doowb:parse_passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse:parse-passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parse:parse_passwd:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/parse-passwd/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/parseurl@1.3.3?package-id=742ccf9d8e4af8dc",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "parseurl",
+        "version": "1.3.3",
+        "description": "parse a url with memoization",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/parseurl@1.3.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/parseurl/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-exists@4.0.0?package-id=e34ca3dd718a6918",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "path-exists",
+        "version": "4.0.0",
+        "description": "Check if a path exists",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/path-exists@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-exists:path_exists:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_exists:path-exists:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_exists:path_exists:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path-exists:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path_exists:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-exists/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-is-absolute@1.0.1?package-id=8bf9ef21aa2f3e3c",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "path-is-absolute",
+        "version": "1.0.1",
+        "description": "Node.js 0.12 path.isAbsolute() ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/path-is-absolute@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-is-absolute/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-key@3.1.1?package-id=0fdcd7cdef61a3e7",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "path-key",
+        "version": "3.1.1",
+        "description": "Get the PATH environment variable key cross-platform",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/path-key@3.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-key/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-parse@1.0.7?package-id=5705871024a48530",
+        "type": "library",
+        "author": "Javier Blanco <http://jbgutierrez.info>",
+        "name": "path-parse",
+        "version": "1.0.7",
+        "description": "Node.js path.parse() ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:path-parse_project:path-parse:1.0.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/path-parse@1.0.7",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jbgutierrez/path-parse.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/jbgutierrez/path-parse#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-parse/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-root@0.1.1?package-id=03046e5f9c1c7d1f",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "path-root",
+        "version": "0.1.1",
+        "description": "Get the root of a posix or windows filepath.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:path-root:0.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/path-root@0.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/path-root",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:path_root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-root:path-root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-root:path_root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_root:path-root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_root:path_root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path-root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path_root:0.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-root/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-root-regex@0.1.2?package-id=91e5c6fbec5920e7",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "path-root-regex",
+        "version": "0.1.2",
+        "description": "Regular expression for getting the root of a posix or windows filepath.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:path-root-regex:path-root-regex:0.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/path-root-regex@0.1.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/regexhq/path-root-regex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-root-regex:path_root_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_root_regex:path-root-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_root_regex:path_root_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-root:path-root-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-root:path_root_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_root:path-root-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_root:path_root_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:regexhq:path-root-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:regexhq:path_root_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path-root-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path_root_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-root-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-scurry@1.11.1?package-id=ea725e26827e4925",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)",
+        "name": "path-scurry",
+        "version": "1.11.1",
+        "description": "walk paths fast and efficiently",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/path-scurry@1.11.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/path-scurry",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-scurry/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/path-to-regexp@0.1.13?package-id=956f5aed1bcabe03",
+        "type": "library",
+        "name": "path-to-regexp",
+        "version": "0.1.13",
+        "description": "Express style path to RegExp utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pillarjs:path-to-regexp:0.1.13:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/path-to-regexp@0.1.13",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pillarjs/path-to-regexp.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/path-to-regexp/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pdfkit@0.11.0?package-id=9db722276593f5ce",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com> (http://badassjs.com/)",
+        "name": "pdfkit",
+        "version": "0.11.0",
+        "description": "A PDF generation library for Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:foliojs:pdfkit:0.11.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pdfkit@0.11.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/foliojs/pdfkit.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://pdfkit.org/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pdfkit:pdfkit:0.11.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pdfkit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/peek-readable@4.1.0?package-id=a8a35d958d903684",
+        "type": "library",
+        "author": "Borewit (https://github.com/Borewit)",
+        "name": "peek-readable",
+        "version": "4.1.0",
+        "description": "Read and peek from a readable stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:peek-readable:peek-readable:4.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/peek-readable@4.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/Borewit/peek-readable",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:peek-readable:peek_readable:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:peek_readable:peek-readable:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:peek_readable:peek_readable:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:peek:peek-readable:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:peek:peek_readable:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/peek-readable/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pend@1.2.0?package-id=12701b802402fca7",
+        "type": "library",
+        "author": "Andrew Kelley <superjoe30@gmail.com>",
+        "name": "pend",
+        "version": "1.2.0",
+        "description": "dead-simple optimistic async helper",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:andrewrk:pend:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pend@1.2.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/andrewrk/node-pend.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pend:pend:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pend/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pg-connection-string@2.12.0?package-id=b511874505753174",
+        "type": "library",
+        "author": "Blaine Bublitz <blaine@iceddev.com> (http://iceddev.com/)",
+        "name": "pg-connection-string",
+        "version": "2.12.0",
+        "description": "Functions for dealing with a PostgresSQL connection string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pg-connection-string:pg-connection-string:2.12.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pg-connection-string@2.12.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/brianc/node-postgres.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/brianc/node-postgres/tree/master/packages/pg-connection-string",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg-connection-string:pg_connection_string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg_connection_string:pg-connection-string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg_connection_string:pg_connection_string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg-connection:pg-connection-string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg-connection:pg_connection_string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg_connection:pg-connection-string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg_connection:pg_connection_string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:brianc:pg-connection-string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:brianc:pg_connection_string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg:pg-connection-string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pg:pg_connection_string:2.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pg-connection-string/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/picocolors@1.1.1?package-id=d02f32d91d4af8a0",
+        "type": "library",
+        "author": "Alexey Raspopov",
+        "name": "picocolors",
+        "version": "1.1.1",
+        "description": "The tiniest and the fastest library for terminal output formatting with ANSI colors",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:picocolors:picocolors:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/picocolors@1.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/picocolors/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/picomatch@2.3.2?package-id=b20eb66c8928f9be",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "picomatch",
+        "version": "2.3.2",
+        "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:picomatch:2.3.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/picomatch@2.3.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/micromatch/picomatch",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/picomatch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/picomatch@4.0.4?package-id=2d7f8db766fc3be7",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "picomatch",
+        "version": "4.0.4",
+        "description": "Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:picomatch:4.0.4:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/picomatch@4.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/micromatch/picomatch",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pify@2.3.0?package-id=0dfe147bb8a24d6a",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "pify",
+        "version": "2.3.0",
+        "description": "Promisify a callback-style function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pify@2.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pify@2.3.0?package-id=ddba1125c77293de",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "pify",
+        "version": "2.3.0",
+        "description": "Promisify a callback-style function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pify@2.3.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress/node_modules/pify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pify@3.0.0?package-id=74f6afcb29e33215",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "pify",
+        "version": "3.0.0",
+        "description": "Promisify a callback-style function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pify@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pify@3.0.0?package-id=94b4540c59ceda21",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "pify",
+        "version": "3.0.0",
+        "description": "Promisify a callback-style function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pify@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/got/node_modules/pify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pify@4.0.1?package-id=14675684a3b19742",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "pify",
+        "version": "4.0.1",
+        "description": "Promisify a callback-style function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pify:pify:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pify@4.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pinkie@2.0.4?package-id=d2cce100ab18f798",
+        "type": "library",
+        "author": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)",
+        "name": "pinkie",
+        "version": "2.0.4",
+        "description": "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pinkie@2.0.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pinkie/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pinkie-promise@2.0.1?package-id=cc6a968ba889b638",
+        "type": "library",
+        "author": "Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)",
+        "name": "pinkie-promise",
+        "version": "2.0.1",
+        "description": "ES2015 Promise ponyfill",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pinkie-promise@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pinkie-promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pinkie_promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pinkie_promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pinkie:pinkie-promise:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pinkie:pinkie_promise:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pinkie-promise/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/png-js@1.1.0?package-id=15ca37ad82f59e09",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com> (http://badassjs.com/)",
+        "name": "png-js",
+        "version": "1.1.0",
+        "description": "A PNG decoder in JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:devongovett:png-js:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/png-js@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/devongovett/png.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:png_js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:png-js:png-js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:png-js:png_js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:png_js:png-js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:png_js:png_js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:png:png-js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:png:png_js:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/png-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/possible-typed-array-names@1.1.0?package-id=fd2e1cd61be49f02",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "possible-typed-array-names",
+        "version": "1.1.0",
+        "description": "A simple list of possible Typed Array names.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:possible-typed-array-names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/possible-typed-array-names@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/possible-typed-array-names.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/possible-typed-array-names#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible-typed-array-names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible_typed_array_names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible_typed_array_names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible-typed-array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible-typed-array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible_typed_array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible_typed_array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible-typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible-typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible_typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible_typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:possible:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/possible-typed-array-names/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/prebuild-install@5.3.6?package-id=4dc75afb90a1e180",
+        "type": "library",
+        "author": "Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)",
+        "name": "prebuild-install",
+        "version": "5.3.6",
+        "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:5.3.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/prebuild-install@5.3.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/prebuild/prebuild-install.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/prebuild/prebuild-install",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild-install:prebuild_install:5.3.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild_install:prebuild-install:5.3.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild_install:prebuild_install:5.3.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild:prebuild-install:5.3.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild:prebuild_install:5.3.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/prebuild-install/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/prebuild-install@7.1.3?package-id=3b6455381633cdb0",
+        "type": "library",
+        "author": "Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)",
+        "name": "prebuild-install",
+        "version": "7.1.3",
+        "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/prebuild-install@7.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/prebuild/prebuild-install.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/prebuild/prebuild-install",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/prebuild-install@7.1.3?package-id=008da708a93ab8fd",
+        "type": "library",
+        "author": "Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)",
+        "name": "prebuild-install",
+        "version": "7.1.3",
+        "description": "A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/prebuild-install@7.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/prebuild/prebuild-install.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/prebuild/prebuild-install",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/prepend-http@2.0.0?package-id=b8fe3bfab62a882d",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "prepend-http",
+        "version": "2.0.0",
+        "description": "Prepend `http://` to humanized URLs like todomvc.com and localhost",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:prepend-http:prepend-http:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/prepend-http@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prepend-http:prepend_http:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prepend_http:prepend-http:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prepend_http:prepend_http:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prepend:prepend-http:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prepend:prepend_http:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/prepend-http/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pretty-bytes@4.0.2?package-id=4d91b0988d9fe55f",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "pretty-bytes",
+        "version": "4.0.2",
+        "description": "Convert bytes to a human readable string: 1337 → 1.34 kB",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pretty-bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pretty-bytes@4.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pretty-bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pretty_bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pretty_bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pretty:pretty-bytes:4.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pretty:pretty_bytes:4.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/proc-log@5.0.0?package-id=b7e53f78a8e3b5aa",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "proc-log",
+        "version": "5.0.0",
+        "description": "just emit 'log' events on the process object",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/proc-log@5.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/proc-log.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/proc-log/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/process@0.11.10?package-id=86b4e66d55ba762f",
+        "type": "library",
+        "author": "Roman Shtylman <shtylman@gmail.com>",
+        "name": "process",
+        "version": "0.11.10",
+        "description": "process information for node.js and browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:shtylman:process:0.11.10:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/process@0.11.10",
+        "externalReferences": [
+          {
+            "url": "git://github.com/shtylman/node-process.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process:process:0.11.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/process/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/process-nextick-args@2.0.1?package-id=2736f58329e89e68",
+        "type": "library",
+        "name": "process-nextick-args",
+        "version": "2.0.1",
+        "description": "process.nextTick but always with args",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/process-nextick-args@2.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/calvinmetcalf/process-nextick-args.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/calvinmetcalf/process-nextick-args",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:calvinmetcalf:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:calvinmetcalf:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/process-nextick-args/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/prom-client@15.1.3?package-id=6ecaaf82659f7cf7",
+        "type": "library",
+        "author": "Simon Nyberg",
+        "name": "prom-client",
+        "version": "15.1.3",
+        "description": "Client for prometheus",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:prom-client:prom-client:15.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/prom-client@15.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/siimon/prom-client",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prom-client:prom_client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prom_client:prom-client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prom_client:prom_client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:siimon:prom-client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:siimon:prom_client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prom:prom-client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:prom:prom_client:15.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/prom-client/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/promise@7.3.1?package-id=d0870412585e133d",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "promise",
+        "version": "7.3.1",
+        "description": "Bare bones Promises/A+ implementation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:promise:promise:7.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/promise@7.3.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/then/promise.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:then:promise:7.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/promise/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/promise-inflight@1.0.1?package-id=cb2d8de0d226aacd",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)",
+        "name": "promise-inflight",
+        "version": "1.0.1",
+        "description": "One promise for multiple requests in flight to avoid async duplication",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/promise-inflight@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/iarna/promise-inflight.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/promise-inflight#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise-inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise_inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise_inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise:promise-inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise:promise_inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:promise-inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:promise_inflight:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/promise-inflight/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/promise-retry@2.0.1?package-id=14baa7b321b17fc4",
+        "type": "library",
+        "author": "IndigoUnited <hello@indigounited.com> (http://indigounited.com)",
+        "name": "promise-retry",
+        "version": "2.0.1",
+        "description": "Retries a function that returns a promise, leveraging the power of the retry module.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/promise-retry@2.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/IndigoUnited/node-promise-retry.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/promise-retry/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/proxy-addr@2.0.7?package-id=e9d03164ed043197",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "proxy-addr",
+        "version": "2.0.7",
+        "description": "Determine address of proxied request",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/proxy-addr@2.0.7",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/proxy-addr/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug@3.0.4?package-id=173ce8303d0e236e",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>, Forbes Lindesay <forbes@lindesay.co.uk>, Matthias Le Brun <mlbli@me.com>, Joshua Appelman <joshua@jbna.nl>, Jonathan Ong <jonathanrichardong@gmail.com>, Alex Kocharin <alex@kocharin.ru>, Hemanth <hemanth.hm@gmail.com>, Timothy Gu <timothygu99@gmail.com>, Andreas Lubbe <git@lubbe.org>",
+        "name": "pug",
+        "version": "3.0.4",
+        "description": "A clean, whitespace-sensitive template language for writing HTML",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pugjs:pug:3.0.4:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/pug@3.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug",
+            "type": "distribution"
+          },
+          {
+            "url": "https://pugjs.org",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-attrs@3.0.0?package-id=8ccd7e8a2286d99c",
+        "type": "library",
+        "author": "Forbes Lindesay",
+        "name": "pug-attrs",
+        "version": "3.0.0",
+        "description": "Generate code for Pug attributes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-attrs@3.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-attrs",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_attrs:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-attrs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-code-gen@3.0.4?package-id=56b653fbff8f32dc",
+        "type": "library",
+        "author": "Forbes Lindesay",
+        "name": "pug-code-gen",
+        "version": "3.0.4",
+        "description": "Default code-generator for pug.  It generates HTML via a JavaScript template function.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pugjs:pug-code-gen:3.0.4:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/pug-code-gen@3.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-code-gen",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-code-gen/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-error@2.1.0?package-id=06722d2c34c689cc",
+        "type": "library",
+        "author": "Forbes Lindesay",
+        "name": "pug-error",
+        "version": "2.1.0",
+        "description": "Standard error objects for pug",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-error:pug-error:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-error@2.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-error",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-error:pug_error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_error:pug-error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_error:pug_error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_error:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-error/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-filters@4.0.0?package-id=5d3376b6724b0ba5",
+        "type": "library",
+        "author": "Forbes Lindesay",
+        "name": "pug-filters",
+        "version": "4.0.0",
+        "description": "Code for processing filters in pug templates",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-filters:pug-filters:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-filters@4.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-filters",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-filters:pug_filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_filters:pug-filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_filters:pug_filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_filters:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-filters/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-lexer@5.0.1?package-id=5dc82d87668bae8e",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "pug-lexer",
+        "version": "5.0.1",
+        "description": "The pug lexer (takes a string and converts it to an array of tokens)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-lexer@5.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-lexer",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_lexer:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-lexer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-linker@4.0.0?package-id=e949463e431e1776",
+        "type": "library",
+        "author": "Forbes Lindesay",
+        "name": "pug-linker",
+        "version": "4.0.0",
+        "description": "Link multiple pug ASTs together using include/extends",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-linker:pug-linker:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-linker@4.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-linker",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-linker:pug_linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_linker:pug-linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_linker:pug_linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_linker:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-linker/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-load@3.0.0?package-id=b831a94ec83ee646",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "pug-load",
+        "version": "3.0.0",
+        "description": "The Pug loader is responsible for loading the depenendencies of a given Pug file.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-load:pug-load:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-load@3.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-load",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-load:pug_load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_load:pug-load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_load:pug_load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_load:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-load/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-parser@6.0.0?package-id=ae3ce07497258f6e",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "pug-parser",
+        "version": "6.0.0",
+        "description": "The pug parser (takes an array of tokens and converts it to an abstract syntax tree)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-parser:pug-parser:6.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-parser@6.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-parser",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-parser:pug_parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_parser:pug-parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_parser:pug_parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_parser:6.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-runtime@3.0.1?package-id=eff466aded883d14",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "pug-runtime",
+        "version": "3.0.1",
+        "description": "The runtime components for the pug templating language",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-runtime@3.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-runtime",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_runtime:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-runtime/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-strip-comments@2.0.0?package-id=678b3dbf2205543b",
+        "type": "library",
+        "author": "Timothy Gu <timothygu99@gmail.com>",
+        "name": "pug-strip-comments",
+        "version": "2.0.0",
+        "description": "Strip comments from a Pug token stream (from the lexer)",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-strip-comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-strip-comments@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-strip-comments",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-strip-comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_strip_comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_strip_comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-strip-comments/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pug-walk@2.0.0?package-id=8da935ca9924488f",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "pug-walk",
+        "version": "2.0.0",
+        "description": "Walk and transform a pug AST",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pug-walk:pug-walk:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pug-walk@2.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/pug/tree/master/packages/pug-walk",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug-walk:pug_walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_walk:pug-walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug_walk:pug_walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug-walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:pug_walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug-walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pug:pug_walk:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pug-walk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/pump@3.0.4?package-id=6a087f9980559301",
+        "type": "library",
+        "author": "Mathias Buus Madsen <mathiasbuus@gmail.com>",
+        "name": "pump",
+        "version": "3.0.4",
+        "description": "pipe streams together and close all of them if one of them closes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mafintosh:pump:3.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/pump@3.0.4",
+        "externalReferences": [
+          {
+            "url": "git://github.com/mafintosh/pump.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pump:pump:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/pump/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/qs@6.15.1?package-id=0d0b4cfd63c59995",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "qs",
+        "version": "6.15.1",
+        "description": "A querystring parser that supports nesting and arrays, with a depth limit",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:qs_project:qs:6.15.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/qs@6.15.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ljharb/qs.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/qs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/qs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/query-string@5.1.1?package-id=853a5626da6a5619",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "query-string",
+        "version": "5.1.1",
+        "description": "Parse and stringify URL query strings",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:query-string:query-string:5.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/query-string@5.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:query-string:query_string:5.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:query_string:query-string:5.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:query_string:query_string:5.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:query:query-string:5.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:query:query_string:5.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/query-string/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/range-parser@1.2.1?package-id=044253d4d9efad62",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, James Wyatt Cready <wyatt.cready@lanetix.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "range-parser",
+        "version": "1.2.1",
+        "description": "Range header field string parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/range-parser@1.2.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/range-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/range_check@2.0.4?package-id=af0ebff91edbc1f3",
+        "type": "library",
+        "author": "Kevin Whitman (https://github.com/keverw)",
+        "name": "range_check",
+        "version": "2.0.4",
+        "description": "This is a simple module to validate IP address, check ip address version, check if ip is within a range.",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:range-check:range-check:2.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/range_check@2.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/keverw/range_check",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range-check:range_check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range_check:range-check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range_check:range_check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:keverw:range-check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:keverw:range_check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range:range-check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:range:range_check:2.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/range_check/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/raw-body@2.5.3?package-id=41029ea60f8d5a8e",
+        "type": "library",
+        "author": "Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Raynos <raynos2@gmail.com>",
+        "name": "raw-body",
+        "version": "2.5.3",
+        "description": "Get and validate the raw body of a readable stream.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:raw-body:raw-body:2.5.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/raw-body@2.5.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:raw-body:raw_body:2.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:raw_body:raw-body:2.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:raw_body:raw_body:2.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:raw:raw-body:2.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:raw:raw_body:2.5.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/raw-body/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/rc@1.2.8?package-id=2d76d88e8720a8a1",
+        "type": "library",
+        "author": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)",
+        "name": "rc",
+        "version": "1.2.8",
+        "description": "hardwired configuration loader",
+        "licenses": [
+          {
+            "expression": "BSD-2-Clause OR MIT OR Apache-2.0"
+          }
+        ],
+        "cpe": "cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/rc@1.2.8",
+        "externalReferences": [
+          {
+            "url": "https://github.com/dominictarr/rc.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/rc/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@1.0.34?package-id=8348cfc6c7b64606",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "readable-stream",
+        "version": "1.0.34",
+        "description": "Streams2, a user-land copy of the stream library from Node.js v0.10.x",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:1.0.34:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@1.0.34",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/readable-stream",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:readable-stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:readable_stream:1.0.34:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@2.3.8?package-id=e45800b68fe2e352",
+        "type": "library",
+        "name": "readable-stream",
+        "version": "2.3.8",
+        "description": "Streams3, a user-land copy of the stream library from Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@2.3.8",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/readable-stream",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable-stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable_stream:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=b2a0b92f8db52b84",
+        "type": "library",
+        "name": "readable-stream",
+        "version": "3.6.2",
+        "description": "Streams3, a user-land copy of the stream library from Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@3.6.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/readable-stream",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=3b2c974f056cc985",
+        "type": "library",
+        "name": "readable-stream",
+        "version": "3.6.2",
+        "description": "Streams3, a user-land copy of the stream library from Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@3.6.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/readable-stream",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=187f639f1f03fced",
+        "type": "library",
+        "name": "readable-stream",
+        "version": "3.6.2",
+        "description": "Streams3, a user-land copy of the stream library from Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@3.6.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/readable-stream",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@3.6.2?package-id=885d0609cac9e686",
+        "type": "library",
+        "name": "readable-stream",
+        "version": "3.6.2",
+        "description": "Streams3, a user-land copy of the stream library from Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@3.6.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/readable-stream",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/winston/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-stream@4.7.0?package-id=2735fe3b5acbeffc",
+        "type": "library",
+        "name": "readable-stream",
+        "version": "4.7.0",
+        "description": "Node.js Streams, a user-land copy of the stream library from Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-stream:readable-stream:4.7.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-stream@4.7.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/readable-stream",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/nodejs/readable-stream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-stream:readable_stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable-stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_stream:readable_stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable-stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:readable_stream:4.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/readable-web-to-node-stream@3.0.4?package-id=09082485e53cd98e",
+        "type": "library",
+        "author": "Borewit (https://github.com/Borewit)",
+        "name": "readable-web-to-node-stream",
+        "version": "3.0.4",
+        "description": "Converts a Web-API readable-stream into a Node readable-stream.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:readable-web-to-node-stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/readable-web-to-node-stream@3.0.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Borewit/readable-web-to-node-stream.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web-to-node-stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web_to_node_stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web_to_node_stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web-to-node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web-to-node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web_to_node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web_to_node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web-to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web-to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web_to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web_to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable-web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable_web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:readable:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Borewit:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Borewit:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-web-to-node-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/rechoir@0.7.1?package-id=2518eea3acdbfbf5",
+        "type": "library",
+        "author": "Gulp Team <team@gulpjs.com> (http://gulpjs.com/), Blaine Bublitz <blaine.bublitz@gmail.com>, Tyler Kellen <tyler@sleekcode.net> (http://goingslowly.com/)",
+        "name": "rechoir",
+        "version": "0.7.1",
+        "description": "Prepare a node environment to require files with different extensions.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:rechoir:rechoir:0.7.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/rechoir@0.7.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/rechoir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/recursedir-comparisons@0.0.0?package-id=d87f050eb47957d6",
+        "type": "library",
+        "author": "Ryan Day <soldair@gmail.com>",
+        "name": "recursedir-comparisons",
+        "version": "0.0.0",
+        "cpe": "cpe:2.3:a:recursedir-comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/recursedir-comparisons@0.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:recursedir-comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:recursedir_comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:recursedir_comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:recursedir:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:recursedir:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/walkdir/test/comparison/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/regexp.prototype.flags@1.5.4?package-id=6817e470495335ca",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "regexp.prototype.flags",
+        "version": "1.5.4",
+        "description": "ES6 spec-compliant RegExp.prototype.flags shim.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:regexp.prototype.flags:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/regexp.prototype.flags@1.5.4",
+        "externalReferences": [
+          {
+            "url": "git://github.com/es-shims/RegExp.prototype.flags.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:es-shims:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/regexp.prototype.flags/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/remove-trailing-separator@1.1.0?package-id=2861850f21cfc870",
+        "type": "library",
+        "author": "darsain",
+        "name": "remove-trailing-separator",
+        "version": "1.1.0",
+        "description": "Removes separators from the end of the string.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:remove-trailing-separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/remove-trailing-separator@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/darsain/remove-trailing-separator.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/darsain/remove-trailing-separator#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove-trailing-separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove_trailing_separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove_trailing_separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove-trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove-trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove_trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove_trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:darsain:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:darsain:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:remove:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/remove-trailing-separator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/replace@1.2.2?package-id=ca8eb97223e41afa",
+        "type": "library",
+        "author": "Alessandro Maclaine <almaclaine@gmail.com>",
+        "name": "replace",
+        "version": "1.2.2",
+        "description": "Command line search and replace utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ALMaclaine:replace:1.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/replace@1.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ALMaclaine/replace",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:replace:replace:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/require-directory@2.1.1?package-id=9e446f6c303bc48a",
+        "type": "library",
+        "author": "Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/), Troy Goode <troygoode@gmail.com>",
+        "name": "require-directory",
+        "version": "2.1.1",
+        "description": "Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/require-directory@2.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/troygoode/node-require-directory.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/troygoode/node-require-directory/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require-directory:require_directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require_directory:require-directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require_directory:require_directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:troygoode:require-directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:troygoode:require_directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require:require-directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require:require_directory:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/require-directory/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/require-main-filename@2.0.0?package-id=b1e08cf266302e36",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "require-main-filename",
+        "version": "2.0.0",
+        "description": "shim for require.main.filename() that works in as many environments as possible",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/require-main-filename@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git+ssh://git@github.com/yargs/require-main-filename.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/yargs/require-main-filename#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require-main-filename:require_main_filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require_main_filename:require-main-filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require_main_filename:require_main_filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require-main:require-main-filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require-main:require_main_filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require_main:require-main-filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require_main:require_main_filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require:require-main-filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:require:require_main_filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yargs:require-main-filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yargs:require_main_filename:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/require-main-filename/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/resolve@1.22.12?package-id=94b6a37008593cc8",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "resolve",
+        "version": "1.22.12",
+        "description": "resolve like require.resolve() on behalf of files asynchronously and synchronously",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:resolve:resolve:1.22.12:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/resolve@1.22.12",
+        "externalReferences": [
+          {
+            "url": "ssh://github.com/browserify/resolve.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/resolve-dir@1.0.1?package-id=9f75a3edbb3cad1f",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "resolve-dir",
+        "version": "1.0.1",
+        "description": "Resolve a directory that is either local, global or in the user's home directory.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jonschlinkert:resolve-dir:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/resolve-dir@1.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jonschlinkert/resolve-dir",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jonschlinkert:resolve_dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:resolve-dir:resolve-dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:resolve-dir:resolve_dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:resolve_dir:resolve-dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:resolve_dir:resolve_dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:resolve:resolve-dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:resolve:resolve_dir:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/resolve-dir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/responselike@1.0.2?package-id=ed930aa2536ba676",
+        "type": "library",
+        "author": "lukechilds",
+        "name": "responselike",
+        "version": "1.0.2",
+        "description": "A response-like object for mocking a Node.js HTTP response stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:responselike:responselike:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/responselike@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/lukechilds/responselike.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:lukechilds:responselike:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/responselike/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/restructure@2.0.1?package-id=72439ad06e2b3313",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "restructure",
+        "version": "2.0.1",
+        "description": "Declaratively encode and decode binary data",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:devongovett:restructure:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/restructure@2.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/devongovett/restructure.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/restructure",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:restructure:restructure:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/restructure/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/retry@0.12.0?package-id=94d18c1fed85159e",
+        "type": "library",
+        "author": "Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)",
+        "name": "retry",
+        "version": "0.12.0",
+        "description": "Abstraction for exponential and custom retry strategies for failed operations.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/retry@0.12.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/tim-kos/node-retry.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/tim-kos/node-retry",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/retry/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/retry-as-promised@7.1.1?package-id=de1666362d2f9e71",
+        "type": "library",
+        "author": "Mick Hansen <maker@mhansen.io>",
+        "name": "retry-as-promised",
+        "version": "7.1.1",
+        "description": "Retry a failed promise",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:retry-as-promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/retry-as-promised@7.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mickhansen/retry-as-promised.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mickhansen/retry-as-promised",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry-as-promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry_as_promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry_as_promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mickhansen:retry-as-promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mickhansen:retry_as_promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry-as:retry-as-promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry-as:retry_as_promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry_as:retry-as-promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry_as:retry_as_promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry:retry-as-promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:retry:retry_as_promised:7.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/retry-as-promised/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/rimraf@2.7.1?package-id=fa27392938c188d1",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "rimraf",
+        "version": "2.7.1",
+        "description": "A deep deletion module for node (like `rm -rf`)",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/rimraf@2.7.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/rimraf.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/rimraf/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=e119954f59e90c15",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "rimraf",
+        "version": "3.0.2",
+        "description": "A deep deletion module for node (like `rm -rf`)",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/rimraf@3.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/rimraf.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@npmcli/move-file/node_modules/rimraf/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/rimraf@3.0.2?package-id=6698d750e2cc2430",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "rimraf",
+        "version": "3.0.2",
+        "description": "A deep deletion module for node (like `rm -rf`)",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/rimraf@3.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/rimraf.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/rimraf/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=3e1c131315fc7e3a",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)",
+        "name": "safe-buffer",
+        "version": "5.1.2",
+        "description": "Safer Node.js Buffer API",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safe-buffer@5.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/safe-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/safe-buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/basic-auth/node_modules/safe-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=73c00d57a0c43943",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)",
+        "name": "safe-buffer",
+        "version": "5.1.2",
+        "description": "Safer Node.js Buffer API",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safe-buffer@5.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/safe-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/safe-buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safe-buffer@5.1.2?package-id=82e1e95a5f60492f",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org)",
+        "name": "safe-buffer",
+        "version": "5.1.2",
+        "description": "Safer Node.js Buffer API",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safe-buffer@5.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/safe-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/safe-buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safe-buffer@5.2.1?package-id=f430730abde414bf",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
+        "name": "safe-buffer",
+        "version": "5.2.1",
+        "description": "Safer Node.js Buffer API",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safe-buffer@5.2.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/safe-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/safe-buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe-buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:safe_buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/safe-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safe-regex-test@1.1.0?package-id=5b11c5020ef5c373",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "safe-regex-test",
+        "version": "1.1.0",
+        "description": "Give a regex, get a robust predicate function that tests it against a string.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safe-regex-test:safe-regex-test:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safe-regex-test@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/safe-regex-test.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/safe-regex-test#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-regex-test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_regex_test:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_regex_test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe-regex-test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe_regex_test:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/safe-regex-test/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safe-stable-stringify@2.5.0?package-id=e703782eb7d38cbf",
+        "type": "library",
+        "author": "Ruben Bridgewater",
+        "name": "safe-stable-stringify",
+        "version": "2.5.0",
+        "description": "Deterministic and safely JSON.stringify to quickly serialize JavaScript objects",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safe-stable-stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safe-stable-stringify@2.5.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/BridgeAR/safe-stable-stringify.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/BridgeAR/safe-stable-stringify#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-stable-stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_stable_stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_stable_stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe-stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe_stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:BridgeAR:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:BridgeAR:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safe:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/safe-stable-stringify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/safer-buffer@2.1.2?package-id=f5a29320fdbea1eb",
+        "type": "library",
+        "author": "Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)",
+        "name": "safer-buffer",
+        "version": "2.1.2",
+        "description": "Modern Buffer API polyfill without footguns",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/safer-buffer@2.1.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ChALkeR/safer-buffer.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/safer-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sanitize-filename@1.6.4?package-id=8f7189e9ea8b019c",
+        "type": "library",
+        "author": "Parsha Pourkhomami",
+        "name": "sanitize-filename",
+        "version": "1.6.4",
+        "description": "Sanitize a string for use as a filename",
+        "licenses": [
+          {
+            "expression": "WTFPL OR ISC"
+          }
+        ],
+        "cpe": "cpe:2.3:a:sanitize-filename:sanitize-filename:1.6.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sanitize-filename@1.6.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sanitize-filename:sanitize_filename:1.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sanitize_filename:sanitize-filename:1.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sanitize_filename:sanitize_filename:1.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sanitize:sanitize-filename:1.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sanitize:sanitize_filename:1.6.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-filename/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sanitize-html@1.4.2?package-id=5de04e7baabe2ecd",
+        "type": "library",
+        "author": "P'unk Avenue LLC",
+        "name": "sanitize-html",
+        "version": "1.4.2",
+        "description": "Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:apostrophecms:sanitize-html:1.4.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/sanitize-html@1.4.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/punkave/sanitize-html.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:punkave:sanitize-html:1.4.2:*:*:*:*:node.js:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sax@1.6.0?package-id=7cfb92a0ae05c66c",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "sax",
+        "version": "1.6.0",
+        "description": "An evented streaming XML parser in JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sax:sax:1.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sax@1.6.0",
+        "externalReferences": [
+          {
+            "url": "git+ssh://git@github.com/isaacs/sax-js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sax/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/seek-bzip@1.0.6?package-id=f8fdf612dd1ad055",
+        "type": "library",
+        "author": "C. Scott Ananian (http://cscott.net), Eli Skeggs, Kevin Kwok, Rob Landley (http://landley.net)",
+        "name": "seek-bzip",
+        "version": "1.0.6",
+        "description": "a pure-JavaScript Node.JS module for random-access decoding bzip2 data",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:seek-bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/seek-bzip@1.0.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/cscott/seek-bzip.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:seek-bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:seek_bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:seek_bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cscott:seek-bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:cscott:seek_bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:seek:seek-bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:seek:seek_bzip:1.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/seek-bzip/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/semver@5.7.2?package-id=f25d9bd3bec76c56",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "semver",
+        "version": "5.7.2",
+        "description": "The semantic version parser used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/semver@5.7.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/node-semver.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/make-dir/node_modules/semver/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/semver@5.7.2?package-id=4d834fe9188f916e",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "semver",
+        "version": "5.7.2",
+        "description": "The semantic version parser used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/semver@5.7.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/node-semver.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-abi/node_modules/semver/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/semver@5.7.2?package-id=27467d214748b540",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "semver",
+        "version": "5.7.2",
+        "description": "The semantic version parser used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/semver@5.7.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/node-semver.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/semver@7.8.0?package-id=30727ed13c96ffb8",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "semver",
+        "version": "7.8.0",
+        "description": "The semantic version parser used by npm.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:npmjs:semver:7.8.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/semver@7.8.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/node-semver.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/semver/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/send@0.19.2?package-id=aa9850506e52a313",
+        "type": "library",
+        "author": "TJ Holowaychuk <tj@vision-media.ca>, Douglas Christopher Wilson <doug@somethingdoug.com>, James Wyatt Cready <jcready@gmail.com>, Jesús Leganés Combarro <piranna@gmail.com>",
+        "name": "send",
+        "version": "0.19.2",
+        "description": "Better streaming static file server with Range and conditional-GET support",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:send_project:send:0.19.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/send@0.19.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/send/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sequelize@6.37.8?package-id=bb72ef8e57680a9d",
+        "type": "library",
+        "name": "sequelize",
+        "version": "6.37.8",
+        "description": "Sequelize is a promise-based Node.js ORM tool for Postgres, MySQL, MariaDB, SQLite, Microsoft SQL Server, Amazon Redshift and Snowflake’s Data Cloud. It features solid transaction support, relations, eager and lazy loading, read replication and more.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sequelizejs:sequelize:6.37.8:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/sequelize@6.37.8",
+        "externalReferences": [
+          {
+            "url": "https://github.com/sequelize/sequelize.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://sequelize.org/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sequelize/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sequelize-pool@7.1.0?package-id=02439a31995a1856",
+        "type": "library",
+        "author": "Sushant <sushantdhiman@outlook.com>",
+        "name": "sequelize-pool",
+        "version": "7.1.0",
+        "description": "Resource pooling for Node.JS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sequelize-pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sequelize-pool@7.1.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/sushantdhiman/sequelize-pool.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sequelize-pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sequelize_pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sequelize_pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sushantdhiman:sequelize-pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sushantdhiman:sequelize_pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sequelize:sequelize-pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sequelize:sequelize_pool:7.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sequelize-pool/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/serve-index@1.9.2?package-id=f4af9e8d984cc854",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "serve-index",
+        "version": "1.9.2",
+        "description": "Serve directory listings",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:serve-index:serve-index:1.9.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/serve-index@1.9.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve-index:serve_index:1.9.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve_index:serve-index:1.9.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve_index:serve_index:1.9.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve:serve-index:1.9.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve:serve_index:1.9.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/serve-index/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/serve-static@1.16.3?package-id=8f932da3bf38c77d",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "serve-static",
+        "version": "1.16.3",
+        "description": "Serve static files",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:serve-static:serve-static:1.16.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/serve-static@1.16.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve-static:serve_static:1.16.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve_static:serve-static:1.16.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve_static:serve_static:1.16.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve:serve-static:1.16.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:serve:serve_static:1.16.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/serve-static/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/set-blocking@2.0.0?package-id=ed8a734f12c4bdef",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "set-blocking",
+        "version": "2.0.0",
+        "description": "set blocking stdio and stderr ensuring that terminal output does not truncate",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/set-blocking@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/yargs/set-blocking.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/yargs/set-blocking#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yargs:set-blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yargs:set_blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/set-blocking/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/set-function-length@1.2.2?package-id=3b436f83ca3e3766",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "set-function-length",
+        "version": "1.2.2",
+        "description": "Set a function's length property",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:set-function-length:set-function-length:1.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/set-function-length@1.2.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/set-function-length.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/set-function-length#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-function-length:set_function_length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function_length:set-function-length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function_length:set_function_length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-function:set-function-length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-function:set_function_length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function:set-function-length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function:set_function_length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:set-function-length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:set_function_length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set:set-function-length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set:set_function_length:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/set-function-length/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/set-function-name@2.0.2?package-id=f58313a577d972b0",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "set-function-name",
+        "version": "2.0.2",
+        "description": "Set a function's name property",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:set-function-name:set-function-name:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/set-function-name@2.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/set-function-name.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/set-function-name#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-function-name:set_function_name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function_name:set-function-name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function_name:set_function_name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-function:set-function-name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set-function:set_function_name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function:set-function-name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set_function:set_function_name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:set-function-name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:set_function_name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set:set-function-name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:set:set_function_name:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/set-function-name/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/setimmediate@1.0.5?package-id=ec3a9ad5b1e8d26c",
+        "type": "library",
+        "author": "YuzuJS, Domenic Denicola <d@domenic.me> (https://domenic.me), Donavon West <github@donavon.com> (http://donavon.com), Yaffle",
+        "name": "setimmediate",
+        "version": "1.0.5",
+        "description": "A shim for the setImmediate efficient script yielding API",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/setimmediate@1.0.5",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/setimmediate/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/setprototypeof@1.2.0?package-id=8282dcab8a58f243",
+        "type": "library",
+        "author": "Wes Todd",
+        "name": "setprototypeof",
+        "version": "1.2.0",
+        "description": "A small polyfill for Object.setprototypeof",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:setprototypeof:setprototypeof:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/setprototypeof@1.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/wesleytodd/setprototypeof.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/wesleytodd/setprototypeof",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wesleytodd:setprototypeof:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/setprototypeof/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/shebang-command@2.0.0?package-id=1625df5bb6d67d3b",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
+        "name": "shebang-command",
+        "version": "2.0.0",
+        "description": "Get the command from a shebang",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/shebang-command@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/shebang-command/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/shebang-regex@3.0.0?package-id=4afda12e39d13082",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "shebang-regex",
+        "version": "3.0.0",
+        "description": "Regular expression for matching a shebang line",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/shebang-regex@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/shebang-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/side-channel@1.1.0?package-id=b33fdebcaaec79ca",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "side-channel",
+        "version": "1.1.0",
+        "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/side-channel@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/side-channel.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/side-channel#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side-channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side_channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/side-channel/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/side-channel-list@1.0.1?package-id=3a95570939e06e56",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "side-channel-list",
+        "version": "1.0.1",
+        "description": "Store information about any JS value in a side channel, using a linked list",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:side-channel-list:side-channel-list:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/side-channel-list@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/side-channel-list.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/side-channel-list#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel-list:side_channel_list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel_list:side-channel-list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel_list:side_channel_list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side-channel-list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side_channel_list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side-channel-list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side_channel_list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side-channel-list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side_channel_list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side-channel-list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side_channel_list:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/side-channel-list/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/side-channel-map@1.0.1?package-id=8a935a259e64ccfc",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "side-channel-map",
+        "version": "1.0.1",
+        "description": "Store information about any JS value in a side channel, using a Map",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/side-channel-map@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/side-channel-map.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/side-channel-map#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side-channel-map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side_channel_map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/side-channel-map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/side-channel-weakmap@1.0.2?package-id=13aa929d93fe8b96",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "side-channel-weakmap",
+        "version": "1.0.2",
+        "description": "Store information about any JS value in a side channel. Uses WeakMap if available.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/side-channel-weakmap@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/side-channel-weakmap.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/side-channel-weakmap#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/side-channel-weakmap/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/signal-exit@3.0.7?package-id=4235b1d4cc91c7c5",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "signal-exit",
+        "version": "3.0.7",
+        "description": "when you want to fire an event no matter how a process exits.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/signal-exit@3.0.7",
+        "externalReferences": [
+          {
+            "url": "https://github.com/tapjs/signal-exit.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/tapjs/signal-exit",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal-exit:signal_exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal_exit:signal-exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal_exit:signal_exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal:signal-exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal:signal_exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tapjs:signal-exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tapjs:signal_exit:3.0.7:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/signal-exit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/signal-exit@4.1.0?package-id=b6edaee708ce8837",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "signal-exit",
+        "version": "4.1.0",
+        "description": "when you want to fire an event no matter how a process exits.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/signal-exit@4.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/tapjs/signal-exit.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/simple-concat@1.0.1?package-id=624063d4723a4b13",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
+        "name": "simple-concat",
+        "version": "1.0.1",
+        "description": "Super-minimalist version of `concat-stream`. Less than 15 lines!",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/simple-concat@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/simple-concat.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/simple-concat",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:simple-concat:simple_concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:simple_concat:simple-concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:simple_concat:simple_concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:simple-concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:feross:simple_concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:simple:simple-concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:simple:simple_concat:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/simple-concat/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/simple-get@3.1.1?package-id=9f219d07ad41b5a4",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (http://feross.org/)",
+        "name": "simple-get",
+        "version": "3.1.1",
+        "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:simple-get_project:simple-get:3.1.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/simple-get@3.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/simple-get.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/simple-get",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/simple-get/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/simple-get@4.0.1?package-id=cd263772050b70e4",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
+        "name": "simple-get",
+        "version": "4.0.1",
+        "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/simple-get@4.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/simple-get.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/simple-get",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/simple-get@4.0.1?package-id=cb8ca3d0298b8a6e",
+        "type": "library",
+        "author": "Feross Aboukhadijeh <feross@feross.org> (https://feross.org)",
+        "name": "simple-get",
+        "version": "4.0.1",
+        "description": "Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/simple-get@4.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/feross/simple-get.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/feross/simple-get",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/smart-buffer@4.2.0?package-id=cc002822c0639ab4",
+        "type": "library",
+        "author": "Josh Glazebrook, syvita",
+        "name": "smart-buffer",
+        "version": "4.2.0",
+        "description": "smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/smart-buffer@4.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/JoshGlazebrook/smart-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/JoshGlazebrook/smart-buffer/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/smart-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/socket.io@3.1.2?package-id=a59f241f8d484687",
+        "type": "library",
+        "author": "Guillermo Rauch <rauchg@gmail.com>, Arnout Kazemier <info@3rd-eden.com>, Vladimir Dronnikov <dronnikov@gmail.com>, Einar Otto Stangvik <einaros@gmail.com>",
+        "name": "socket.io",
+        "version": "3.1.2",
+        "description": "node.js realtime framework server",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:socket:socket.io:3.1.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/socket.io@3.1.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/socketio/socket.io",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/socket.io-adapter@2.1.0?package-id=22a992bc812c1a27",
+        "type": "library",
+        "name": "socket.io-adapter",
+        "version": "2.1.0",
+        "description": "default socket.io in-memory adapter",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:socket.io-adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/socket.io-adapter@2.1.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/socketio/socket.io-adapter.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socket.io-adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socket.io_adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socket.io_adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socket.io:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socket.io:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socketio:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socketio:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io-adapter/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/socket.io-parser@4.0.5?package-id=dd154d7bfbaea09c",
+        "type": "library",
+        "name": "socket.io-parser",
+        "version": "4.0.5",
+        "description": "socket.io protocol parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:socket:socket.io-parser:4.0.5:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/socket.io-parser@4.0.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/socketio/socket.io-parser.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socket.io-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/socks@2.8.9?package-id=95be61d6a7e8c888",
+        "type": "library",
+        "author": "Josh Glazebrook, castorw",
+        "name": "socks",
+        "version": "2.8.9",
+        "description": "Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:JoshGlazebrook:socks:2.8.9:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/socks@2.8.9",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/JoshGlazebrook/socks.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/JoshGlazebrook/socks/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks:socks:2.8.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socks/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/socks-proxy-agent@6.2.1?package-id=98b91bbcbff567ab",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>",
+        "name": "socks-proxy-agent",
+        "version": "6.2.1",
+        "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/socks-proxy-agent@6.2.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/node-socks-proxy-agent.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/TooTallNate/node-socks-proxy-agent#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/socks-proxy-agent@8.0.5?package-id=9ee05fc4d21b00fc",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>",
+        "name": "socks-proxy-agent",
+        "version": "8.0.5",
+        "description": "A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/socks-proxy-agent@8.0.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/TooTallNate/proxy-agents.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/socks-proxy-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sort-keys@1.1.2?package-id=7e91429fd26a7768",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "sort-keys",
+        "version": "1.1.2",
+        "description": "Sort the keys of an object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sort-keys@1.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort-keys:sort_keys:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys:sort-keys:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys:sort_keys:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort:sort-keys:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort:sort_keys:1.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sort-keys@2.0.0?package-id=b56ffa404313992b",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "sort-keys",
+        "version": "2.0.0",
+        "description": "Sort the keys of an object",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sort-keys:sort-keys:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sort-keys@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort-keys:sort_keys:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys:sort-keys:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys:sort_keys:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort:sort-keys:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort:sort_keys:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sort-keys/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sort-keys-length@1.0.1?package-id=aa05cbb52d62e94f",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)",
+        "name": "sort-keys-length",
+        "version": "1.0.1",
+        "description": "Sort objecy keys by length",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sort-keys-length:sort-keys-length:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sort-keys-length@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort-keys-length:sort_keys_length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys_length:sort-keys-length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys_length:sort_keys_length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort-keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort-keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort_keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort:sort-keys-length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sort:sort_keys_length:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sort-keys-length/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/source-map@0.6.1?package-id=a22583dd96c04327",
+        "type": "library",
+        "author": "Nick Fitzgerald <nfitzgerald@mozilla.com>, Tobias Koppers <tobias.koppers@googlemail.com>, Duncan Beevers <duncan@dweebd.com>, Stephen Crane <scrane@mozilla.com>, Ryan Seddon <seddon.ryan@gmail.com>, Miles Elam <miles.elam@deem.com>, Mihai Bazon <mihai.bazon@gmail.com>, Michael Ficarra <github.public.email@michael.ficarra.me>, Todd Wolfson <todd@twolfson.com>, Alexander Solovyov <alexander@solovyov.net>, Felix Gnass <fgnass@gmail.com>, Conrad Irwin <conrad.irwin@gmail.com>, usrbincc <usrbincc@yahoo.com>, David Glasser <glasser@davidglasser.net>, Chase Douglas <chase@newrelic.com>, Evan Wallace <evan.exe@gmail.com>, Heather Arthur <fayearthur@gmail.com>, Hugh Kennedy <hughskennedy@gmail.com>, David Glasser <glasser@davidglasser.net>, Simon Lydell <simon.lydell@gmail.com>, Jmeas Smith <jellyes2@gmail.com>, Michael Z Goddard <mzgoddard@gmail.com>, azu <azu@users.noreply.github.com>, John Gozde <john@gozde.ca>, Adam Kirkton <akirkton@truefitinnovation.com>, Chris Montgomery <christopher.montgomery@dowjones.com>, J. Ryan Stinnett <jryans@gmail.com>, Jack Herrington <jherrington@walmartlabs.com>, Chris Truter <jeffpalentine@gmail.com>, Daniel Espeset <daniel@danielespeset.com>, Jamie Wong <jamie.lf.wong@gmail.com>, Eddy Bruël <ejpbruel@mozilla.com>, Hawken Rives <hawkrives@gmail.com>, Gilad Peleg <giladp007@gmail.com>, djchie <djchie.dev@gmail.com>, Gary Ye <garysye@gmail.com>, Nicolas Lalevée <nicolas.lalevee@hibnet.org>",
+        "name": "source-map",
+        "version": "0.6.1",
+        "description": "Generates and consumes source maps",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:source-map:source-map:0.6.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/source-map@0.6.1",
+        "externalReferences": [
+          {
+            "url": "http://github.com/mozilla/source-map.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mozilla/source-map",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:source-map:source_map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:source_map:source-map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:source_map:source_map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mozilla:source-map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mozilla:source_map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:source:source-map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:source:source_map:0.6.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/source-map/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sprintf-js@1.0.3?package-id=acaf709db1d54fbd",
+        "type": "library",
+        "author": "Alexandru Marasteanu <hello@alexei.ro> (http://alexei.ro/)",
+        "name": "sprintf-js",
+        "version": "1.0.3",
+        "description": "JavaScript sprintf implementation",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sprintf-js@1.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/alexei/sprintf.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf-js:sprintf_js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf_js:sprintf-js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf_js:sprintf_js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf:sprintf-js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf:sprintf_js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:alexei:sprintf-js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:alexei:sprintf_js:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sprintf-js@1.1.3?package-id=5b70795e4e884b57",
+        "type": "library",
+        "author": "Alexandru Mărășteanu <hello@alexei.ro>",
+        "name": "sprintf-js",
+        "version": "1.1.3",
+        "description": "JavaScript sprintf implementation",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:sprintf-js:sprintf-js:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/sprintf-js@1.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/alexei/sprintf.js.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf-js:sprintf_js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf_js:sprintf-js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf_js:sprintf_js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf:sprintf-js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:sprintf:sprintf_js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:alexei:sprintf-js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:alexei:sprintf_js:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sprintf-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/sqlite3@5.1.7?package-id=2f561aa54725d063",
+        "type": "library",
+        "author": "Mapbox (https://mapbox.com/), Daniel Lockyer <hi@daniellockyer.com>, Konstantin Käfer <mail@kkaefer.com>, Dane Springmeyer <dane@mapbox.com>, Will White <will@mapbox.com>, Orlando Vazquez <ovazquez@gmail.com>, Artem Kustikov <kustikoff@gmail.com>, Eric Fredricksen <efredricksen@gmail.com>, John Wright <mrjjwright@gmail.com>, Ryan Dahl <ry@tinyclouds.org>, Tom MacWright <tom@mapbox.com>, Carter Thaxton <carter.thaxton@gmail.com>, Audrius Kažukauskas <audrius@neutrino.lt>, Johannes Schauer <josch@pyneo.org>, Nathan Rajlich <nathan@tootallnate.net>, AJ ONeal <coolaj86@gmail.com>, Mithgol, Ben Noordhuis <ben@strongloop.com>",
+        "name": "sqlite3",
+        "version": "5.1.7",
+        "description": "Asynchronous, non-blocking SQLite3 bindings",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-3-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ghost:sqlite3:5.1.7:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/sqlite3@5.1.7",
+        "externalReferences": [
+          {
+            "url": "https://github.com/TryGhost/node-sqlite3.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/TryGhost/node-sqlite3",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ssri@12.0.0?package-id=64aa6df27671ee44",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "ssri",
+        "version": "12.0.0",
+        "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ssri@12.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/ssri.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ssri/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ssri@8.0.1?package-id=fbd6a143588415b6",
+        "type": "library",
+        "author": "Kat Marchán <kzm@sykosomatic.org>",
+        "name": "ssri",
+        "version": "8.0.1",
+        "description": "Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ssri_project:ssri:8.0.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ssri@8.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/ssri",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/stack-trace@0.0.10?package-id=fce264c6e73c9eee",
+        "type": "library",
+        "author": "Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)",
+        "name": "stack-trace",
+        "version": "0.0.10",
+        "description": "Get v8 stack traces as an array of CallSite objects.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:stack-trace:stack-trace:0.0.10:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/stack-trace@0.0.10",
+        "externalReferences": [
+          {
+            "url": "git://github.com/felixge/node-stack-trace.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/felixge/node-stack-trace",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stack-trace:stack_trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stack_trace:stack-trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stack_trace:stack_trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:felixge:stack-trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:felixge:stack_trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stack:stack-trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stack:stack_trace:0.0.10:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/stack-trace/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/statuses@1.5.0?package-id=b4d4d67376e5fdaa",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "statuses",
+        "version": "1.5.0",
+        "description": "HTTP status utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/statuses@1.5.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/serve-index/node_modules/statuses/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/statuses@2.0.2?package-id=8d4d2ca32d3f538f",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "statuses",
+        "version": "2.0.2",
+        "description": "HTTP status utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:statuses:statuses:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/statuses@2.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/statuses/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/stop-iteration-iterator@1.1.0?package-id=061c21bad20f372c",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "stop-iteration-iterator",
+        "version": "1.1.0",
+        "description": "Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:stop-iteration-iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/stop-iteration-iterator@1.1.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/ljharb/stop-iteration-iterator.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/ljharb/stop-iteration-iterator#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop-iteration-iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop_iteration_iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop_iteration_iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop-iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop-iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop_iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop_iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ljharb:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stop:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/stop-iteration-iterator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/stream-buffers@2.2.0?package-id=f849555d7c5b59d6",
+        "type": "library",
+        "author": "Sam Day <me@samcday.com.au>",
+        "name": "stream-buffers",
+        "version": "2.2.0",
+        "description": "Buffer-backed Streams for reading and writing.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Unlicense"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:stream-buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/stream-buffers@2.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/samcday/node-stream-buffer.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stream-buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stream_buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stream_buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:samcday:stream-buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:samcday:stream_buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stream:stream-buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:stream:stream_buffers:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/stream-buffers/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/streamsearch@1.1.0?package-id=28156c8426d889b2",
+        "type": "library",
+        "author": "Brian White <mscdex@mscdex.net>",
+        "name": "streamsearch",
+        "version": "1.1.0",
+        "description": "Streaming Boyer-Moore-Horspool searching for node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:streamsearch:streamsearch:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/streamsearch@1.1.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/mscdex/streamsearch.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mscdex:streamsearch:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/streamsearch/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strict-uri-encode@1.1.0?package-id=bfd4ac772360c13b",
+        "type": "library",
+        "author": "Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)",
+        "name": "strict-uri-encode",
+        "version": "1.1.0",
+        "description": "A stricter URI encode adhering to RFC 3986",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strict-uri-encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strict-uri-encode@1.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict-uri-encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict_uri_encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict_uri_encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict-uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict-uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict_uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict_uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strict:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/strict-uri-encode/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string-width@1.0.2?package-id=09f44aae6ef25a0d",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "string-width",
+        "version": "1.0.2",
+        "description": "Get the visual width of a string - the number of columns required to display it",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string-width@1.0.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-width:string_width:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string-width:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string_width:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-width:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_width:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/gauge/node_modules/string-width/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string-width@2.1.1?package-id=beec204c676c8c6e",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "string-width",
+        "version": "2.1.1",
+        "description": "Get the visual width of a string - the number of columns required to display it",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-width:string-width:2.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string-width@2.1.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-width:string_width:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string-width:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string_width:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-width:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_width:2.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wide-align/node_modules/string-width/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string-width@4.2.3?package-id=24ea7bc5fffd0612",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "string-width",
+        "version": "4.2.3",
+        "description": "Get the visual width of a string - the number of columns required to display it",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string-width@4.2.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/string-width-cjs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string-width@4.2.3?package-id=e0a74a03ae38698c",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "string-width",
+        "version": "4.2.3",
+        "description": "Get the visual width of a string - the number of columns required to display it",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string-width@4.2.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/string-width/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string-width@5.1.2?package-id=8d5950086fa52115",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "string-width",
+        "version": "5.1.2",
+        "description": "Get the visual width of a string - the number of columns required to display it",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string-width@5.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string-width@5.1.2?package-id=6762f33de5ae377a",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "string-width",
+        "version": "5.1.2",
+        "description": "Get the visual width of a string - the number of columns required to display it",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string-width@5.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string_decoder@0.10.31?package-id=be69fa4a2025b786",
+        "type": "library",
+        "name": "string_decoder",
+        "version": "0.10.31",
+        "description": "The string_decoder module from Node core",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string_decoder@0.10.31",
+        "externalReferences": [
+          {
+            "url": "git://github.com/rvagg/string_decoder.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/rvagg/string_decoder",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_decoder:string-decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rvagg:string-decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:rvagg:string_decoder:0.10.31:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string_decoder@1.1.1?package-id=248eaf9a5e34fe07",
+        "type": "library",
+        "name": "string_decoder",
+        "version": "1.1.1",
+        "description": "The string_decoder module from Node core",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string_decoder@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/string_decoder.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/nodejs/string_decoder",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:string-decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:string_decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/string_decoder/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/string_decoder@1.3.0?package-id=17cc9cb9f2e4a5f7",
+        "type": "library",
+        "name": "string_decoder",
+        "version": "1.3.0",
+        "description": "The string_decoder module from Node core",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/string_decoder@1.3.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/nodejs/string_decoder.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/nodejs/string_decoder",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:string-decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nodejs:string_decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=e8cc4c7f389e7e46",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Boy Nicolai Appelman <joshua@jbna.nl> (jbna.nl), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)",
+        "name": "strip-ansi",
+        "version": "3.0.1",
+        "description": "Strip ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@3.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@3.0.1?package-id=c99f26ed95d84d11",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Boy Nicolai Appelman <joshua@jbna.nl> (jbna.nl), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)",
+        "name": "strip-ansi",
+        "version": "3.0.1",
+        "description": "Strip ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@3.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@4.0.0?package-id=0db8e8830d694c97",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "strip-ansi",
+        "version": "4.0.0",
+        "description": "Strip ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@4.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=896f6ac46d9def2e",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "strip-ansi",
+        "version": "6.0.1",
+        "description": "Strip ANSI escape codes from a string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@6.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/strip-ansi-cjs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@6.0.1?package-id=e831e8124e9a00e0",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "strip-ansi",
+        "version": "6.0.1",
+        "description": "Strip ANSI escape codes from a string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@6.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/strip-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=bb988586409773ff",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "strip-ansi",
+        "version": "7.2.0",
+        "description": "Strip ANSI escape codes from a string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@7.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-ansi@7.2.0?package-id=e98758605fc01f28",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "strip-ansi",
+        "version": "7.2.0",
+        "description": "Strip ANSI escape codes from a string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-ansi@7.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-dirs@2.1.0?package-id=5785975b198f29c2",
+        "type": "library",
+        "author": "Shinnosuke Watanabe (https://github.com/shinnn)",
+        "name": "strip-dirs",
+        "version": "2.1.0",
+        "description": "Remove leading directory components from a path, like tar's --strip-components option",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-dirs@2.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-dirs:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_dirs:2.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/strip-dirs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-json-comments@2.0.1?package-id=31c6a53852db87ef",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "strip-json-comments",
+        "version": "2.0.1",
+        "description": "Strip comments from JSON. Lets you use comments in your JSON files!",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-json-comments@2.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strip-outer@1.0.1?package-id=0701c91ca3e3ef97",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "strip-outer",
+        "version": "1.0.1",
+        "description": "Strip a substring from the start/end of a string",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:strip-outer:strip-outer:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strip-outer@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip-outer:strip_outer:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_outer:strip-outer:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip_outer:strip_outer:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip-outer:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strip:strip_outer:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/strip-outer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/strtok3@6.3.0?package-id=9ac4af59fde6dd22",
+        "type": "library",
+        "author": "Borewit (https://github.com/Borewit)",
+        "name": "strtok3",
+        "version": "6.3.0",
+        "description": "A promise based streaming tokenizer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:Borewit:strtok3:6.3.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/strtok3@6.3.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Borewit/strtok3.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:strtok3:strtok3:6.3.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/strtok3/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/supports-color@2.0.0?package-id=c66316949c16138d",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com)",
+        "name": "supports-color",
+        "version": "2.0.0",
+        "description": "Detect whether a terminal supports color",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:supports-color:supports-color:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/supports-color@2.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-color:supports_color:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_color:supports-color:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_color:supports_color:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports-color:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports_color:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/supports-color@5.5.0?package-id=28a6f20e2aed3314",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "supports-color",
+        "version": "5.5.0",
+        "description": "Detect whether a terminal supports color",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/supports-color@5.5.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-color:supports_color:5.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_color:supports-color:5.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_color:supports_color:5.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports-color:5.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports_color:5.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/chalk/node_modules/supports-color/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/supports-color@7.2.0?package-id=24cdad729d3395c4",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "supports-color",
+        "version": "7.2.0",
+        "description": "Detect whether a terminal supports color",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/supports-color@7.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-color:supports_color:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_color:supports-color:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_color:supports_color:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports-color:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports_color:7.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=d91ba967be33db59",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "supports-preserve-symlinks-flag",
+        "version": "1.0.0",
+        "description": "Determine if the current node version supports the `--preserve-symlinks` flag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/supports-preserve-symlinks-flag@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-preserve-symlinks-flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_preserve_symlinks_flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_preserve_symlinks_flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-preserve-symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-preserve-symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_preserve_symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_preserve_symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports-preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports_preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:supports:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/svg-captcha@1.4.0?package-id=6baae9ff00daeb07",
+        "type": "library",
+        "author": "Weilin Shi <934587911@qq.com>",
+        "name": "svg-captcha",
+        "version": "1.4.0",
+        "description": "generate svg captcha in node.js or express.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:svg-captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/svg-captcha@1.4.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/steambap/svg-captcha.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/steambap/svg-captcha#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:svg-captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:svg_captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:svg_captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:steambap:svg-captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:steambap:svg_captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:svg:svg-captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:svg:svg_captcha:1.4.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/svg-captcha/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/swagger-ui-dist@5.32.6?package-id=d6abe07e25de9930",
+        "type": "library",
+        "author": ", Anna Bodnia <anna.bodnia@gmail.com>, Buu Nguyen <buunguyen@gmail.com>, Josh Ponelat <jponelat@gmail.com>, Kyle Shockey <kyleshockey1@gmail.com>, Robert Barnwell <robert@robertismy.name>, Sahar Jafari <shr.jafari@gmail.com>",
+        "name": "swagger-ui-dist",
+        "version": "5.32.6",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:smartbear:swagger-ui-dist:5.32.6:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/swagger-ui-dist@5.32.6",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/swagger-ui-dist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/swagger-ui-express@5.0.1?package-id=daeaf740a273c980",
+        "type": "library",
+        "author": "Stephen Scott <scottie1984@gmail.com>",
+        "name": "swagger-ui-express",
+        "version": "5.0.1",
+        "description": "Swagger UI Express",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:swagger-ui-express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/swagger-ui-express@5.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/scottie1984/swagger-ui-express",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger-ui-express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger_ui_express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger_ui_express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:scottie1984:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:scottie1984:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger-ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger-ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger_ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger_ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:swagger:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/swagger-ui-express/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tar@4.4.19?package-id=f42c59d94c10b95d",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "tar",
+        "version": "4.4.19",
+        "description": "tar for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/tar@4.4.19",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/node-tar.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:rust:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:tar:4.4.19:*:*:*:*:node.js:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tar@6.2.1?package-id=09de397807f7641f",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "tar",
+        "version": "6.2.1",
+        "description": "tar for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tar_project:tar:6.2.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/tar@6.2.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/node-tar.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_project:tar:6.2.1:*:*:*:*:rust:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:tar:6.2.1:*:*:*:*:node.js:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/tar/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tar@7.5.15?package-id=c1e644e32c96e7f7",
+        "type": "library",
+        "author": "Isaac Z. Schlueter",
+        "name": "tar",
+        "version": "7.5.15",
+        "description": "tar for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tar_project:tar:7.5.15:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/tar@7.5.15",
+        "externalReferences": [
+          {
+            "url": "https://github.com/isaacs/node-tar.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_project:tar:7.5.15:*:*:*:*:rust:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:isaacs:tar:7.5.15:*:*:*:*:node.js:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tar-fs@2.1.4?package-id=67bb886fa3adbf45",
+        "type": "library",
+        "author": "Mathias Buus",
+        "name": "tar-fs",
+        "version": "2.1.4",
+        "description": "filesystem bindings for tar-stream",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:mafintosh:tar-fs:2.1.4:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tar-fs@2.1.4",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mafintosh/tar-fs.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mafintosh/tar-fs",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:tar_fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar-fs:tar-fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar-fs:tar_fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_fs:tar-fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_fs:tar_fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar:tar-fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar:tar_fs:2.1.4:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar-fs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tar-stream@1.6.2?package-id=d4b09eea4b25031e",
+        "type": "library",
+        "author": "Mathias Buus <mathiasbuus@gmail.com>",
+        "name": "tar-stream",
+        "version": "1.6.2",
+        "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tar-stream:tar-stream:1.6.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tar-stream@1.6.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/mafintosh/tar-stream.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mafintosh/tar-stream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar-stream:tar_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_stream:tar-stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_stream:tar_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:tar-stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:tar_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar:tar-stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar:tar_stream:1.6.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tar-stream@2.2.0?package-id=61ca2e5df0334a0d",
+        "type": "library",
+        "author": "Mathias Buus <mathiasbuus@gmail.com>",
+        "name": "tar-stream",
+        "version": "2.2.0",
+        "description": "tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tar-stream:tar-stream:2.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tar-stream@2.2.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/mafintosh/tar-stream.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/mafintosh/tar-stream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar-stream:tar_stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_stream:tar-stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar_stream:tar_stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:tar-stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mafintosh:tar_stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar:tar-stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tar:tar_stream:2.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tdigest@0.1.2?package-id=035edc02e62ab7f9",
+        "type": "library",
+        "author": "Will Welch <welch@quietplease.com> (http://quietplease.com/)",
+        "name": "tdigest",
+        "version": "0.1.2",
+        "description": "javascript implementation of Dunning's T-Digest for streaming quantile approximation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tdigest:tdigest:0.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tdigest@0.1.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/welch/tdigest.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/welch/tdigest",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:welch:tdigest:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tdigest/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/text-hex@1.0.0?package-id=5085c28e4a76cc5a",
+        "type": "library",
+        "author": "Arnout Kazemier",
+        "name": "text-hex",
+        "version": "1.0.0",
+        "description": "Generate a hex color from the given text",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:3rd-Eden:text-hex:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/text-hex@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/3rd-Eden/text-hex",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/3rd-Eden/text-hex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:3rd-Eden:text_hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:text-hex:text-hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:text-hex:text_hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:text_hex:text-hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:text_hex:text_hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:text:text-hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:text:text_hex:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/text-hex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/through@2.3.8?package-id=2584a06da5c0bd83",
+        "type": "library",
+        "author": "Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)",
+        "name": "through",
+        "version": "2.3.8",
+        "description": "simplified stream construction",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/through@2.3.8",
+        "externalReferences": [
+          {
+            "url": "https://github.com/dominictarr/through.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/dominictarr/through",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:through:through:2.3.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/through/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/timed-out@4.0.1?package-id=d2308518418e1e08",
+        "type": "library",
+        "author": "Vsevolod Strukchinsky <floatdrop@gmail.com>",
+        "name": "timed-out",
+        "version": "4.0.1",
+        "description": "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:timed-out:timed-out:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/timed-out@4.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:timed-out:timed_out:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:timed_out:timed-out:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:timed_out:timed_out:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:timed:timed-out:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:timed:timed_out:4.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/timed-out/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tiny-inflate@1.0.3?package-id=5831e10cf4d02fa2",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "tiny-inflate",
+        "version": "1.0.3",
+        "description": "A tiny inflate implementation",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tiny-inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tiny-inflate@1.0.3",
+        "externalReferences": [
+          {
+            "url": "git://github.com/devongovett/tiny-inflate.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/tiny-inflate",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tiny-inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tiny_inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tiny_inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:tiny-inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tiny:tiny-inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tiny:tiny_inflate:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tiny-inflate/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tinyglobby@0.2.16?package-id=3820bd963eb672f1",
+        "type": "library",
+        "author": "Superchupu",
+        "name": "tinyglobby",
+        "version": "0.2.16",
+        "description": "A fast and minimal alternative to globby and fast-glob",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tinyglobby:tinyglobby:0.2.16:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tinyglobby@0.2.16",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/SuperchupuDev/tinyglobby.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://superchupu.dev/tinyglobby",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tinyglobby/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/to-buffer@1.2.2?package-id=0110d2ecb3a45afa",
+        "type": "library",
+        "author": "Mathias Buus (@mafintosh)",
+        "name": "to-buffer",
+        "version": "1.2.2",
+        "description": "Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:browserify:to-buffer:1.2.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/to-buffer@1.2.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/browserify/to-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/browserify/to-buffer",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:browserify:to_buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to-buffer:to-buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to-buffer:to_buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to_buffer:to-buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to_buffer:to_buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to:to-buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to:to_buffer:1.2.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/to-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/to-regex-range@5.0.1?package-id=71fde64046fd6197",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)",
+        "name": "to-regex-range",
+        "version": "5.0.1",
+        "description": "Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/to-regex-range@5.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/micromatch/to-regex-range",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:micromatch:to-regex-range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:micromatch:to_regex_range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/to-regex-range/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/toidentifier@1.0.1?package-id=4909a76552946483",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Douglas Christopher Wilson <doug@somethingdoug.com>, Nick Baugh <niftylettuce@gmail.com> (http://niftylettuce.com/)",
+        "name": "toidentifier",
+        "version": "1.0.1",
+        "description": "Convert a string of words to a JavaScript identifier",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:toidentifier:toidentifier:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/toidentifier@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/toidentifier/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/token-stream@1.0.0?package-id=1121d220e3619b09",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "token-stream",
+        "version": "1.0.0",
+        "description": "Take an array of token and produce a more useful API to give to a parser",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:token-stream:token-stream:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/token-stream@1.0.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/token-stream.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token-stream:token_stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token_stream:token-stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token_stream:token_stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:token-stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:pugjs:token_stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token:token-stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token:token_stream:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/token-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/token-types@4.2.1?package-id=171e72fe36f2e133",
+        "type": "library",
+        "author": "Borewit (https://github.com/Borewit)",
+        "name": "token-types",
+        "version": "4.2.1",
+        "description": "Common token types for decoding and encoding numeric and string values",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:token-types:token-types:4.2.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/token-types@4.2.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Borewit/token-types",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token-types:token_types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token_types:token-types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token_types:token_types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Borewit:token-types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:Borewit:token_types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token:token-types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:token:token_types:4.2.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/token-types/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/traverse@0.3.9?package-id=8b1a05e62fb7f42a",
+        "type": "library",
+        "author": "James Halliday",
+        "name": "traverse",
+        "version": "0.3.9",
+        "description": "Traverse and transform objects by visiting every node on a recursive walk",
+        "licenses": [
+          {
+            "license": {
+              "name": "MIT/X11"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:substack:traverse:0.3.9:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/traverse@0.3.9",
+        "externalReferences": [
+          {
+            "url": "http://github.com/substack/js-traverse.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:traverse:traverse:0.3.9:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/traverse/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/trim-repeated@1.0.0?package-id=4707f97b4eb6a83b",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "trim-repeated",
+        "version": "1.0.0",
+        "description": "Trim a consecutively repeated substring: foo--bar---baz → foo-bar-baz",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:trim-repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/trim-repeated@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:trim-repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:trim_repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:trim_repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:trim:trim-repeated:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:trim:trim_repeated:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/trim-repeated/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/triple-beam@1.4.1?package-id=867ca1c3d07cb072",
+        "type": "library",
+        "author": "Charlie Robbins <charlie.robbins@gmail.com>",
+        "name": "triple-beam",
+        "version": "1.4.1",
+        "description": "Definitions of levels for logging purposes & shareable Symbol constants.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:triple-beam:triple-beam:1.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/triple-beam@1.4.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/winstonjs/triple-beam.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/winstonjs/triple-beam#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:triple-beam:triple_beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:triple_beam:triple-beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:triple_beam:triple_beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winstonjs:triple-beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winstonjs:triple_beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:triple:triple-beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:triple:triple_beam:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/triple-beam/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/truncate-utf8-bytes@1.0.2?package-id=a4cd60ed4d28ed9d",
+        "type": "library",
+        "author": "Carl Xiong <xiongc05@gmail.com>",
+        "name": "truncate-utf8-bytes",
+        "version": "1.0.2",
+        "description": "Truncate string to given length in bytes",
+        "licenses": [
+          {
+            "license": {
+              "id": "WTFPL"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:truncate-utf8-bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/truncate-utf8-bytes@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/parshap/truncate-utf8-bytes.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/parshap/truncate-utf8-bytes#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate-utf8-bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate_utf8_bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate_utf8_bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate-utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate-utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate_utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate_utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:truncate:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parshap:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parshap:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/truncate-utf8-bytes/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tslib@2.7.0?package-id=d3f6878231388b72",
+        "type": "library",
+        "author": "Microsoft Corp.",
+        "name": "tslib",
+        "version": "2.7.0",
+        "description": "Runtime library for TypeScript helper functions",
+        "licenses": [
+          {
+            "license": {
+              "id": "0BSD"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:Microsoft:tslib:2.7.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tslib@2.7.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/Microsoft/tslib.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://www.typescriptlang.org/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tslib:tslib:2.7.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tslib/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/tunnel-agent@0.6.0?package-id=fdd564bd2943f5f4",
+        "type": "library",
+        "author": "Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)",
+        "name": "tunnel-agent",
+        "version": "0.6.0",
+        "description": "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.",
+        "licenses": [
+          {
+            "license": {
+              "id": "Apache-2.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/tunnel-agent@0.6.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/mikeal/tunnel-agent",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mikeal:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:mikeal:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/tunnel-agent/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/type-is@1.6.18?package-id=26b4bd4c5c1a13bb",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)",
+        "name": "type-is",
+        "version": "1.6.18",
+        "description": "Infer the content-type of a request.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/type-is@1.6.18",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/type-is/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/typecast@0.0.1?package-id=89d78b6ec74b159e",
+        "type": "library",
+        "name": "typecast",
+        "version": "0.0.1",
+        "description": "Simple typecasting",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:eivindfjeldstad:typecast:0.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/typecast@0.0.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/eivindfjeldstad/typecast.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typecast:typecast:0.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/typecast/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/typed-array-buffer@1.0.3?package-id=131dc3292e117210",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "typed-array-buffer",
+        "version": "1.0.3",
+        "description": "Get the ArrayBuffer out of a TypedArray, robustly.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:typed-array-buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/typed-array-buffer@1.0.3",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/typed-array-buffer.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/typed-array-buffer#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed-array-buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed_array_buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed_array_buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed-array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed-array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed_array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed_array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:typed:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/typed-array-buffer/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/typedarray@0.0.6?package-id=34381d15eae55598",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "typedarray",
+        "version": "0.0.6",
+        "description": "TypedArray polyfill for old browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/typedarray@0.0.6",
+        "externalReferences": [
+          {
+            "url": "git://github.com/substack/typedarray.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/substack/typedarray",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:substack:typedarray:0.0.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/typedarray/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=b579583c7128019b",
+        "type": "library",
+        "publisher": "GNU Libc Maintainers <debian-glibc@lists.debian.org>",
+        "name": "tzdata",
+        "version": "2026a-0+deb13u1",
+        "licenses": [
+          {
+            "license": {
+              "name": "public-domain"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tzdata:tzdata:2026a-0\\+deb13u1:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/tzdata"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/tzdata/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/tzdata.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "1361"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=d9521b4a2d6d0070&upstream=tzdata",
+        "type": "library",
+        "publisher": "GNU Libc Maintainers <debian-glibc@lists.debian.org>",
+        "name": "tzdata-legacy",
+        "version": "2026a-0+deb13u1",
+        "licenses": [
+          {
+            "license": {
+              "name": "public-domain"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:tzdata-legacy:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&upstream=tzdata",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tzdata-legacy:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tzdata_legacy:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tzdata_legacy:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tzdata:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:tzdata:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/tzdata-legacy"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/tzdata-legacy/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/tzdata-legacy.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "1251"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "tzdata"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/uglify-js@3.19.3?package-id=929f7bc81a430f59",
+        "type": "library",
+        "author": "Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/), Alex Lam <alexlamsl@gmail.com>, Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)",
+        "name": "uglify-js",
+        "version": "3.19.3",
+        "description": "JavaScript parser, mangler/compressor and beautifier toolkit",
+        "licenses": [
+          {
+            "license": {
+              "id": "BSD-2-Clause"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:uglifyjs_project:uglifyjs:3.19.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/uglify-js@3.19.3",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/uglify-js/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unbzip2-stream@1.4.3?package-id=d5a42b3035bdd365",
+        "type": "library",
+        "author": "Jan Bölsche <jan@lagomorph.de>",
+        "name": "unbzip2-stream",
+        "version": "1.4.3",
+        "description": "streaming unbzip2 implementation in pure javascript for node and browsers",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unbzip2-stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unbzip2-stream@1.4.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/regular/unbzip2-stream.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unbzip2-stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unbzip2_stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unbzip2_stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:regular:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:regular:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unbzip2:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unbzip2:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unbzip2-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unc-path-regex@0.1.2?package-id=ac9aba0a81d8073c",
+        "type": "library",
+        "author": "Jon Schlinkert (https://github.com/jonschlinkert)",
+        "name": "unc-path-regex",
+        "version": "0.1.2",
+        "description": "Regular expression for testing if a file path is a windows UNC file path. Can also be used as a component of another regexp via the `.source` property.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unc-path-regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unc-path-regex@0.1.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/regexhq/unc-path-regex.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/regexhq/unc-path-regex",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc-path-regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc_path_regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc_path_regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc-path:unc-path-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc-path:unc_path_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc_path:unc-path-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc_path:unc_path_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:regexhq:unc-path-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:regexhq:unc_path_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc:unc-path-regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unc:unc_path_regex:0.1.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unc-path-regex/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/underscore.string@3.3.6?package-id=719cbb15880d33d1",
+        "type": "library",
+        "author": "Esa-Matti Suuronen <esa-matti@suuronen.org> (http://esa-matti.suuronen.org/), Edward Tsech <edtsech@gmail.com>, Pavel Pravosud <pavel@pravosud.com> (<https://github.com/rwz>), Sasha Koss <kossnocorp@gmail.com> (http://koss.nocorp.me/), Vladimir Dronnikov <dronnikov@gmail.com>, Pete Kruckenberg (<https://github.com/kruckenb>), Paul Chavard <paul@chavard.net> (<http://tchak.net>), Ed Finkler <coj@funkatron.com> (<http://funkatron.com>), Christoph Hermann <schtoeffel@gmail.com> (<https://github.com/stoeffel>)",
+        "name": "underscore.string",
+        "version": "3.3.6",
+        "description": "String manipulation extensions for Underscore.js javascript library.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:underscore.string:underscore.string:3.3.6:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/underscore.string@3.3.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/epeli/underscore.string.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://epeli.github.com/underscore.string/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:epeli:underscore.string:3.3.6:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/underscore.string/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/undici-types@6.19.8?package-id=c0ec3464366df4cf",
+        "type": "library",
+        "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)",
+        "name": "undici-types",
+        "version": "6.19.8",
+        "description": "A stand-alone types package for Undici",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:undici-types:undici-types:6.19.8:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/undici-types@6.19.8",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/nodejs/undici.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://undici.nodejs.org",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici-types:undici_types:6.19.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici_types:undici-types:6.19.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici_types:undici_types:6.19.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici:undici-types:6.19.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici:undici_types:6.19.8:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ethers/node_modules/undici-types/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/undici-types@6.21.0?package-id=2ec7a147b1861e7e",
+        "type": "library",
+        "author": "Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)",
+        "name": "undici-types",
+        "version": "6.21.0",
+        "description": "A stand-alone types package for Undici",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:undici-types:undici-types:6.21.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/undici-types@6.21.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/nodejs/undici.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://undici.nodejs.org",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici-types:undici_types:6.21.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici_types:undici-types:6.21.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici_types:undici_types:6.21.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici:undici-types:6.21.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:undici:undici_types:6.21.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/undici-types/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unicode-properties@1.4.1?package-id=77f2f0a8f7df086b",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "unicode-properties",
+        "version": "1.4.1",
+        "description": "Provides fast access to unicode character properties",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unicode-properties:unicode-properties:1.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unicode-properties@1.4.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/devongovett/unicode-properties.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/unicode-properties",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode-properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode_properties:unicode-properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode_properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:unicode-properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:unicode_properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode:unicode-properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode:unicode_properties:1.4.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unicode-properties/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unicode-trie@2.0.0?package-id=c0712c33eff88472",
+        "type": "library",
+        "author": "Devon Govett <devongovett@gmail.com>",
+        "name": "unicode-trie",
+        "version": "2.0.0",
+        "description": "Unicode Trie data structure for fast character metadata lookup, ported from ICU",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unicode-trie:unicode-trie:2.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unicode-trie@2.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/devongovett/unicode-trie.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/devongovett/unicode-trie",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode-trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode_trie:unicode-trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode_trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:unicode-trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:devongovett:unicode_trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode:unicode-trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unicode:unicode_trie:2.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unicode-trie/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unique-filename@1.1.1?package-id=cb6e79fb065b0164",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)",
+        "name": "unique-filename",
+        "version": "1.1.1",
+        "description": "Generate a unique filename for use in temporary directories or caches.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unique-filename@1.1.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/unique-filename.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/unique-filename",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique-filename:unique_filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_filename:unique-filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_filename:unique_filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique-filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique_filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:unique-filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:unique_filename:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unique-filename@4.0.0?package-id=deaed92dd166ac8d",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "unique-filename",
+        "version": "4.0.0",
+        "description": "Generate a unique filename for use in temporary directories or caches.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unique-filename@4.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/unique-filename.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/iarna/unique-filename",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unique-filename/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unique-slug@2.0.2?package-id=930467346c7209f9",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org)",
+        "name": "unique-slug",
+        "version": "2.0.2",
+        "description": "Generate a unique character string suitible for use in files and URLs.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unique-slug:unique-slug:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unique-slug@2.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/iarna/unique-slug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique-slug:unique_slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_slug:unique-slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_slug:unique_slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique-slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique_slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:unique-slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:unique_slug:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unique-slug@5.0.0?package-id=b1297fb43211d6e6",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "unique-slug",
+        "version": "5.0.0",
+        "description": "Generate a unique character string suitible for use in files and URLs.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unique-slug@5.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/unique-slug.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unique-slug/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/universalify@2.0.1?package-id=478e17a8d9d9e24d",
+        "type": "library",
+        "author": "Ryan Zimmerman <opensrc@ryanzim.com>",
+        "name": "universalify",
+        "version": "2.0.1",
+        "description": "Make a callback- or promise-based function support both promises and callbacks.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:universalify:universalify:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/universalify@2.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/RyanZim/universalify.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/RyanZim/universalify#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:RyanZim:universalify:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/universalify/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unpipe@1.0.0?package-id=7bdc8da7ff6ad05b",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "unpipe",
+        "version": "1.0.0",
+        "description": "Unpipe a stream from all destinations",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/unpipe@1.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unpipe/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/unzipper@0.9.15?package-id=96d1f3567742fbab",
+        "type": "library",
+        "author": "Evan Oxfeld <eoxfeld@gmail.com>, Ziggy Jonsson <ziggy.jonsson.nyc@gmail.com>, Evan Oxfeld <eoxfeld@gmail.com>, Joe Ferner <joe.ferner@nearinfinity.com>",
+        "name": "unzipper",
+        "version": "0.9.15",
+        "description": "Unzip cross-platform streaming API ",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:unzipper_project:unzipper:0.9.15:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/unzipper@0.9.15",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ZJONSSON/node-unzipper.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/unzipper/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/url-parse-lax@3.0.0?package-id=fe44fa8ce8ee75af",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "url-parse-lax",
+        "version": "3.0.0",
+        "description": "Lax url.parse() with support for protocol-less URLs & IPs",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:url-parse-lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/url-parse-lax@3.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url-parse-lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_parse_lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_parse_lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url-parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url-parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url:url-parse-lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url:url_parse_lax:3.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/url-parse-lax/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/url-to-options@1.0.1?package-id=e31e5498dbb100a3",
+        "type": "library",
+        "author": "Steven Vachon <contact@svachon.com> (https://www.svachon.com/)",
+        "name": "url-to-options",
+        "version": "1.0.1",
+        "description": "Convert a WHATWG URL to an http(s).request options object.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:url-to-options:url-to-options:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/url-to-options@1.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url-to-options:url_to_options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_to_options:url-to-options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_to_options:url_to_options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url-to:url-to-options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url-to:url_to_options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_to:url-to-options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url_to:url_to_options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url:url-to-options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:url:url_to_options:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/url-to-options/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/utf8-byte-length@1.0.5?package-id=91d2330fa076a0de",
+        "type": "library",
+        "author": "Carl Xiong <xiongc05@gmail.com>",
+        "name": "utf8-byte-length",
+        "version": "1.0.5",
+        "description": "Get utf8 byte length of string",
+        "licenses": [
+          {
+            "expression": "WTFPL OR MIT"
+          }
+        ],
+        "cpe": "cpe:2.3:a:utf8-byte-length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/utf8-byte-length@1.0.5",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/parshap/utf8-byte-length.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/parshap/utf8-byte-length#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8-byte-length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8_byte_length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8_byte_length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8-byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8-byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8_byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8_byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parshap:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:parshap:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utf8:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/utf8-byte-length/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/util-deprecate@1.0.2?package-id=5aa8474b38ae743a",
+        "type": "library",
+        "author": "Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)",
+        "name": "util-deprecate",
+        "version": "1.0.2",
+        "description": "The Node.js `util.deprecate()` function with browser support",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/util-deprecate@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/TooTallNate/util-deprecate.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/TooTallNate/util-deprecate",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/util-deprecate/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/utils-merge@1.0.1?package-id=6f20808d27c78dba",
+        "type": "library",
+        "author": "Jared Hanson <jaredhanson@gmail.com> (http://www.jaredhanson.net/)",
+        "name": "utils-merge",
+        "version": "1.0.1",
+        "description": "merge() utility function",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/utils-merge@1.0.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/jaredhanson/utils-merge.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jaredhanson:utils_merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/utils-merge/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/uuid@8.3.2?package-id=75276f930d3cfafc",
+        "type": "library",
+        "name": "uuid",
+        "version": "8.3.2",
+        "description": "RFC4122 (v1, v4, and v5) UUIDs",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/uuid@8.3.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/uuidjs/uuid.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/uuid/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/v8flags@4.0.1?package-id=60ade9588799c895",
+        "type": "library",
+        "author": "Gulp Team <team@gulpjs.com> (https://gulpjs.com/), Tyler Kellen <tyler@sleekcode.net>, Blaine Bublitz <blaine.bublitz@gmail.com>, Nicolò Ribaudo <nicolo.ribaudo@gmail.com>, Selwyn <talk@selwyn.cc>, Leo Zhang <leo@leozhang.me>",
+        "name": "v8flags",
+        "version": "4.0.1",
+        "description": "Get available v8 and Node.js flags.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:v8flags:v8flags:4.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/v8flags@4.0.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/v8flags/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/validate@4.5.1?package-id=ccebf638e9fd3787",
+        "type": "library",
+        "author": "Eivind Fjeldstad",
+        "name": "validate",
+        "version": "4.5.1",
+        "description": "Validate object properties in javascript.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:validate:validate:4.5.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/validate@4.5.1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/validate/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/validator@13.15.35?package-id=d86489c4bc1d875a",
+        "type": "library",
+        "author": "Chris O'Hara <cohara87@gmail.com>, Anthony Nandaa (https://github.com/profnandaa)",
+        "name": "validator",
+        "version": "13.15.35",
+        "description": "String validation and sanitization",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:validator_project:validator:13.15.35:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/validator@13.15.35",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/validatorjs/validator.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/validatorjs/validator.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/validator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/vary@1.1.2?package-id=ef1054337f6d6829",
+        "type": "library",
+        "author": "Douglas Christopher Wilson <doug@somethingdoug.com>",
+        "name": "vary",
+        "version": "1.1.2",
+        "description": "Manipulate the HTTP Vary header",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/vary@1.1.2",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/vary/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/void-elements@3.1.0?package-id=c20f7d8a863db46e",
+        "type": "library",
+        "author": "hemanth.hm",
+        "name": "void-elements",
+        "version": "3.1.0",
+        "description": "Array of \"void elements\" defined by the HTML specification.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:void-elements:void-elements:3.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/void-elements@3.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/jadejs/void-elements",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:void-elements:void_elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:void_elements:void-elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:void_elements:void_elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jadejs:void-elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:jadejs:void_elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:void:void-elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:void:void_elements:3.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/void-elements/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/walk@2.3.15?package-id=01da09009ec4151e",
+        "type": "library",
+        "author": "AJ ONeal <coolaj86@gmail.com>",
+        "name": "walk",
+        "version": "2.3.15",
+        "description": "A node port of python's os.walk",
+        "licenses": [
+          {
+            "expression": "MIT OR Apache-2.0"
+          }
+        ],
+        "cpe": "cpe:2.3:a:walk:walk:2.3.15:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/walk@2.3.15",
+        "externalReferences": [
+          {
+            "url": "https://git.coolaj86.com/coolaj86/fs-walk.js.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://git.coolaj86.com/coolaj86/fs-walk.js",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/walk/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/walkdir@0.0.11?package-id=f1205193f13f39ea",
+        "type": "library",
+        "author": "Ryan Day <soldair@gmail.com>, tjfontaine",
+        "name": "walkdir",
+        "version": "0.0.11",
+        "description": "Find files simply. Walks a directory tree emitting events based on what it finds. Presents a familiar callback/emitter/a+sync interface. Walk a tree of any depth.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:soldair:walkdir:0.0.11:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/walkdir@0.0.11",
+        "externalReferences": [
+          {
+            "url": "git://github.com/soldair/node-walkdir.git",
+            "type": "distribution"
+          },
+          {
+            "url": "http://github.com/soldair/node-walkdir",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:walkdir:walkdir:0.0.11:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/walkdir/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which@1.3.1?package-id=41ea0ec5c3df6504",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
+        "name": "which",
+        "version": "1.3.1",
+        "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which@1.3.1",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-which.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/global-prefix/node_modules/which/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which@2.0.2?package-id=1222522e2e485736",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)",
+        "name": "which",
+        "version": "2.0.2",
+        "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which@2.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/isaacs/node-which.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/which/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which@5.0.0?package-id=35565647196cbf3c",
+        "type": "library",
+        "author": "GitHub Inc.",
+        "name": "which",
+        "version": "5.0.0",
+        "description": "Like which(1) unix command. Find the first instance of an executable in the PATH.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which@5.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/npm/node-which.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-gyp/node_modules/which/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which-boxed-primitive@1.1.1?package-id=1c5150f5622ba818",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "which-boxed-primitive",
+        "version": "1.1.1",
+        "description": "Which kind of boxed JS primitive is this?",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:which-boxed-primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which-boxed-primitive@1.1.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/which-boxed-primitive.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/which-boxed-primitive#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-boxed-primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_boxed_primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_boxed_primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/which-boxed-primitive/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which-collection@1.0.2?package-id=15815161b3b5c910",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com>",
+        "name": "which-collection",
+        "version": "1.0.2",
+        "description": "Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:which-collection:which-collection:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which-collection@1.0.2",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/inspect-js/which-collection.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/inspect-js/which-collection#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-collection:which_collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_collection:which-collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_collection:which_collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:which-collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:which_collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which-collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which_collection:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/which-collection/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which-module@2.0.1?package-id=17fef2e739c99bd0",
+        "type": "library",
+        "author": "nexdrew",
+        "name": "which-module",
+        "version": "2.0.1",
+        "description": "Find the module object for something that was require()d",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:which-module:which-module:2.0.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which-module@2.0.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/nexdrew/which-module.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/nexdrew/which-module#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-module:which_module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_module:which-module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_module:which_module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nexdrew:which-module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:nexdrew:which_module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which-module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which_module:2.0.1:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/which-module/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which-pm-runs@1.1.0?package-id=511b12aae9b5f098",
+        "type": "library",
+        "author": "Zoltan Kochan",
+        "name": "which-pm-runs",
+        "version": "1.1.0",
+        "description": "Detects what package manager executes the process",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:which-pm-runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which-pm-runs@1.1.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/zkochan/packages/tree/main/which-pm-runs",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/zkochan/packages/tree/main/which-pm-runs#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-pm-runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_pm_runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_pm_runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zkochan:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zkochan:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which-pm-runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which_pm_runs:1.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/which-pm-runs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/which-typed-array@1.1.20?package-id=fcae901f7f234cb1",
+        "type": "library",
+        "author": "Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)",
+        "name": "which-typed-array",
+        "version": "1.1.20",
+        "description": "Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:which-typed-array:which-typed-array:1.1.20:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/which-typed-array@1.1.20",
+        "externalReferences": [
+          {
+            "url": "git://github.com/inspect-js/which-typed-array.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-typed-array:which_typed_array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_typed_array:which-typed-array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_typed_array:which_typed_array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-typed:which-typed-array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which-typed:which_typed_array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_typed:which-typed-array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which_typed:which_typed_array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:which-typed-array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:inspect-js:which_typed_array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which-typed-array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:which:which_typed_array:1.1.20:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/which-typed-array/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wide-align@1.1.3?package-id=5c7edf2206958f5d",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)",
+        "name": "wide-align",
+        "version": "1.1.3",
+        "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wide-align@1.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/wide-align",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide-align:wide_align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide_align:wide-align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide_align:wide_align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:wide-align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:wide_align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide:wide-align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide:wide_align:1.1.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wide-align/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wide-align@1.1.5?package-id=2f5deab669904e50",
+        "type": "library",
+        "author": "Rebecca Turner <me@re-becca.org> (http://re-becca.org/)",
+        "name": "wide-align",
+        "version": "1.1.5",
+        "description": "A wide-character aware text alignment function for use on the console or with fixed width fonts.",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wide-align@1.1.5",
+        "externalReferences": [
+          {
+            "url": "https://github.com/iarna/wide-align",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide-align:wide_align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide_align:wide-align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide_align:wide_align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:wide-align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:iarna:wide_align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide:wide-align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wide:wide_align:1.1.5:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/winston@3.19.0?package-id=af1d6f4cfc747231",
+        "type": "library",
+        "author": "Charlie Robbins <charlie.robbins@gmail.com>, David Hyde <dabh@alumni.stanford.edu>",
+        "name": "winston",
+        "version": "3.19.0",
+        "description": "A logger for just about everything.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:winstonjs:winston:3.19.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/winston@3.19.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/winstonjs/winston.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winston:winston:3.19.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/winston/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/winston-transport@4.9.0?package-id=365414d23adfc5d2",
+        "type": "library",
+        "author": "Charlie Robbins <charlie.robbins@gmail.com>",
+        "name": "winston-transport",
+        "version": "4.9.0",
+        "description": "Base stream implementations for winston@3 and up.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:winston-transport:winston-transport:4.9.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/winston-transport@4.9.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/winstonjs/winston-transport#readme",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winston-transport:winston_transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winston_transport:winston-transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winston_transport:winston_transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winstonjs:winston-transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winstonjs:winston_transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winston:winston-transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:winston:winston_transport:4.9.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/winston-transport/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/with@7.0.2?package-id=f241c9ed4f41ff10",
+        "type": "library",
+        "author": "ForbesLindesay",
+        "name": "with",
+        "version": "7.0.2",
+        "description": "Compile time `with` for strict mode JavaScript",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:pugjs:with:7.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/with@7.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/pugjs/with.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:with:with:7.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/with/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wkx@0.5.0?package-id=842b66eb903e3244",
+        "type": "library",
+        "author": "Christian Schwarz",
+        "name": "wkx",
+        "version": "0.5.0",
+        "description": "A WKT/WKB/EWKT/EWKB/TWKB/GeoJSON parser and serializer",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:cschwarz:wkx:0.5.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wkx@0.5.0",
+        "externalReferences": [
+          {
+            "url": "http://github.com/cschwarz/wkx.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wkx:wkx:0.5.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wkx/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wordwrap@1.0.0?package-id=b911c29de2bf7ea1",
+        "type": "library",
+        "author": "James Halliday <mail@substack.net> (http://substack.net)",
+        "name": "wordwrap",
+        "version": "1.0.0",
+        "description": "Wrap those words. Show them at what columns to start and stop.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:substack:wordwrap:1.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wordwrap@1.0.0",
+        "externalReferences": [
+          {
+            "url": "git://github.com/substack/node-wordwrap.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wordwrap:wordwrap:1.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wordwrap/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wrap-ansi@6.2.0?package-id=cbfbb7822072903f",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)",
+        "name": "wrap-ansi",
+        "version": "6.2.0",
+        "description": "Wordwrap a string with ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wrap-ansi@6.2.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap:wrap-ansi:6.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap:wrap_ansi:6.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wrap-ansi@7.0.0?package-id=b15a62ebd4d4ca1c",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "wrap-ansi",
+        "version": "7.0.0",
+        "description": "Wordwrap a string with ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wrap-ansi@7.0.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi-cjs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wrap-ansi@8.1.0?package-id=3e75b684ded1ef93",
+        "type": "library",
+        "author": "Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)",
+        "name": "wrap-ansi",
+        "version": "8.1.0",
+        "description": "Wordwrap a string with ANSI escape codes",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wrap-ansi@8.1.0",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrap-ansi/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/wrappy@1.0.2?package-id=9e7700cc01592b12",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "wrappy",
+        "version": "1.0.2",
+        "description": "Callback wrapping utility",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/wrappy@1.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/npm/wrappy",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/npm/wrappy",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:npm:wrappy:1.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/wrappy/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ws@7.4.6?package-id=670482146c83d660",
+        "type": "library",
+        "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
+        "name": "ws",
+        "version": "7.4.6",
+        "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ws_project:ws:7.4.6:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ws@7.4.6",
+        "externalReferences": [
+          {
+            "url": "https://github.com/websockets/ws",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/engine.io/node_modules/ws/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/ws@8.17.1?package-id=c740f277708480a9",
+        "type": "library",
+        "author": "Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)",
+        "name": "ws",
+        "version": "8.17.1",
+        "description": "Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:ws_project:ws:8.17.1:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/ws@8.17.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/websockets/ws.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/websockets/ws",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/ws/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/xtend@4.0.2?package-id=961b704b394b9dda",
+        "type": "library",
+        "author": "Raynos <raynos2@gmail.com>, Jake Verbaten, Matt Esch",
+        "name": "xtend",
+        "version": "4.0.2",
+        "description": "extend like a boss",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/xtend@4.0.2",
+        "externalReferences": [
+          {
+            "url": "git://github.com/Raynos/xtend.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/Raynos/xtend",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/xtend/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/y18n@4.0.3?package-id=cb7009f90513c997",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "y18n",
+        "version": "4.0.3",
+        "description": "the bare-bones internationalization library used by yargs",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:y18n_project:y18n:4.0.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/y18n@4.0.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/yargs/y18n",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/y18n/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yallist@3.1.1?package-id=91c0363893b76787",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "yallist",
+        "version": "3.1.1",
+        "description": "Yet Another Linked List",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yallist@3.1.1",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/yallist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/node-pre-gyp/node_modules/yallist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yallist@4.0.0?package-id=6ff65ae32fc308b3",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "yallist",
+        "version": "4.0.0",
+        "description": "Yet Another Linked List",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yallist@4.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/yallist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yallist@4.0.0?package-id=ebf539c8f0cfa1bf",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "yallist",
+        "version": "4.0.0",
+        "description": "Yet Another Linked List",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yallist@4.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/yallist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yallist@4.0.0?package-id=88bb3e58ef355edf",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "yallist",
+        "version": "4.0.0",
+        "description": "Yet Another Linked List",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yallist@4.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/yallist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yallist@4.0.0?package-id=d66798877c986375",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "yallist",
+        "version": "4.0.0",
+        "description": "Yet Another Linked List",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yallist@4.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/yallist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yallist@5.0.0?package-id=0b515ba55614743d",
+        "type": "library",
+        "author": "Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)",
+        "name": "yallist",
+        "version": "5.0.0",
+        "description": "Yet Another Linked List",
+        "licenses": [
+          {
+            "license": {
+              "id": "BlueOak-1.0.0"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yallist@5.0.0",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/isaacs/yallist.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/yallist/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yaml-schema-validator@1.2.3?package-id=aaef2ad8ce881f0a",
+        "type": "library",
+        "author": "Ketan Saxena",
+        "name": "yaml-schema-validator",
+        "version": "1.2.3",
+        "description": "Schema validator for yaml files",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yaml-schema-validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yaml-schema-validator@1.2.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/ketanTechracers/schema-validator",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml-schema-validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml_schema_validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml_schema_validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ketanTechracers:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:ketanTechracers:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml-schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml-schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml_schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml_schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yaml:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/yaml-schema-validator/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yargs@15.4.1?package-id=2f0e67180312e9e4",
+        "type": "library",
+        "author": "Yargs Contributors (https://github.com/yargs/yargs/graphs/contributors)",
+        "name": "yargs",
+        "version": "15.4.1",
+        "description": "yargs the modern, pirate-themed, successor to optimist.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yargs:yargs:15.4.1:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yargs@15.4.1",
+        "externalReferences": [
+          {
+            "url": "https://github.com/yargs/yargs.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://yargs.js.org/",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/yargs/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yargs-parser@18.1.3?package-id=827c460c5ebe0ff3",
+        "type": "library",
+        "author": "Ben Coe <ben@npmjs.com>",
+        "name": "yargs-parser",
+        "version": "18.1.3",
+        "description": "the mighty option parser used by yargs",
+        "licenses": [
+          {
+            "license": {
+              "id": "ISC"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:yargs:yargs-parser:18.1.3:*:*:*:*:node.js:*:*",
+        "purl": "pkg:npm/yargs-parser@18.1.3",
+        "externalReferences": [
+          {
+            "url": "https://github.com/yargs/yargs-parser.git",
+            "type": "distribution"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/yauzl@2.10.0?package-id=7c6e4166ba89d3cf",
+        "type": "library",
+        "author": "Josh Wolfe <thejoshwolfe@gmail.com>",
+        "name": "yauzl",
+        "version": "2.10.0",
+        "description": "yet another unzip library for node",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:thejoshwolfe:yauzl:2.10.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/yauzl@2.10.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/thejoshwolfe/yauzl.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/thejoshwolfe/yauzl",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:yauzl:yauzl:2.10.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/yauzl/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/z85@0.0.2?package-id=866e9bab4ee23af1",
+        "type": "library",
+        "author": "Michael Sealand <msealand@gmail.com>",
+        "name": "z85",
+        "version": "0.0.2",
+        "description": "ZeroMQ Base-85 Encoding",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:msealand:z85:0.0.2:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/z85@0.0.2",
+        "externalReferences": [
+          {
+            "url": "https://github.com/msealand/z85.node.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/msealand/z85.node",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:z85:z85:0.0.2:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/z85/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/zip-stream@1.2.0?package-id=0180651c6d08c060",
+        "type": "library",
+        "author": "Chris Talkington (http://christalkington.com/)",
+        "name": "zip-stream",
+        "version": "1.2.0",
+        "description": "a streaming zip archive generator.",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:archiverjs:zip-stream:1.2.0:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/zip-stream@1.2.0",
+        "externalReferences": [
+          {
+            "url": "https://github.com/archiverjs/node-zip-stream.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://github.com/archiverjs/node-zip-stream",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:archiverjs:zip_stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zip-stream:zip-stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zip-stream:zip_stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zip_stream:zip-stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zip_stream:zip_stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zip:zip-stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:cpe23",
+            "value": "cpe:2.3:a:zip:zip_stream:1.2.0:*:*:*:*:*:*:*"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/zip-stream/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&package-id=90e7d5b74b631f9d&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1",
+        "type": "library",
+        "publisher": "Mark Brown <broonie@debian.org>",
+        "name": "zlib1g",
+        "version": "1:1.3.dfsg+really1.3.1-1+b1",
+        "licenses": [
+          {
+            "license": {
+              "id": "Zlib"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:zlib1g:zlib1g:1\\:1.3.dfsg\\+really1.3.1-1\\+b1:*:*:*:*:*:*:*",
+        "purl": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1",
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "dpkg-db-cataloger"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "deb"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "dpkg-db-entry"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:7b57942929394e731b49e8f1863a4da2cbd1b9fda48d9f1e75a0a28b2d89d01a"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/var/lib/dpkg/status.d/zlib1g"
+          },
+          {
+            "name": "syft:location:1:layerID",
+            "value": "sha256:7b57942929394e731b49e8f1863a4da2cbd1b9fda48d9f1e75a0a28b2d89d01a"
+          },
+          {
+            "name": "syft:location:1:path",
+            "value": "/usr/share/doc/zlib1g/copyright"
+          },
+          {
+            "name": "syft:location:2:layerID",
+            "value": "sha256:7b57942929394e731b49e8f1863a4da2cbd1b9fda48d9f1e75a0a28b2d89d01a"
+          },
+          {
+            "name": "syft:location:2:path",
+            "value": "/var/lib/dpkg/status.d/zlib1g.md5sums"
+          },
+          {
+            "name": "syft:metadata:installedSize",
+            "value": "181"
+          },
+          {
+            "name": "syft:metadata:source",
+            "value": "zlib"
+          },
+          {
+            "name": "syft:metadata:sourceVersion",
+            "value": "1:1.3.dfsg+really1.3.1-1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "pkg:npm/zod@3.25.76?package-id=ea8efe4fe69bdf44",
+        "type": "library",
+        "author": "Colin McDonnell <zod@colinhacks.com>",
+        "name": "zod",
+        "version": "3.25.76",
+        "description": "TypeScript-first schema declaration and validation library with static type inference",
+        "licenses": [
+          {
+            "license": {
+              "id": "MIT"
+            }
+          }
+        ],
+        "cpe": "cpe:2.3:a:zod:zod:3.25.76:*:*:*:*:*:*:*",
+        "purl": "pkg:npm/zod@3.25.76",
+        "externalReferences": [
+          {
+            "url": "git+https://github.com/colinhacks/zod.git",
+            "type": "distribution"
+          },
+          {
+            "url": "https://zod.dev",
+            "type": "website"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:package:foundBy",
+            "value": "javascript-package-cataloger"
+          },
+          {
+            "name": "syft:package:language",
+            "value": "javascript"
+          },
+          {
+            "name": "syft:package:type",
+            "value": "npm"
+          },
+          {
+            "name": "syft:package:metadataType",
+            "value": "javascript-npm-package"
+          },
+          {
+            "name": "syft:location:0:layerID",
+            "value": "sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"
+          },
+          {
+            "name": "syft:location:0:path",
+            "value": "/juice-shop/node_modules/zod/package.json"
+          }
+        ]
+      },
+      {
+        "bom-ref": "os:debian@13.4",
+        "type": "operating-system",
+        "name": "debian",
+        "version": "13.4",
+        "description": "Distroless",
+        "swid": {
+          "tagId": "debian",
+          "name": "debian",
+          "version": "13.4"
+        },
+        "externalReferences": [
+          {
+            "url": "https://github.com/GoogleContainerTools/distroless/issues/new",
+            "type": "issue-tracker"
+          },
+          {
+            "url": "https://github.com/GoogleContainerTools/distroless",
+            "type": "website"
+          },
+          {
+            "url": "https://github.com/GoogleContainerTools/distroless/blob/master/README.md",
+            "comment": "support",
+            "type": "other"
+          }
+        ],
+        "properties": [
+          {
+            "name": "syft:distro:extendedSupport",
+            "value": "false"
+          },
+          {
+            "name": "syft:distro:id",
+            "value": "debian"
+          },
+          {
+            "name": "syft:distro:prettyName",
+            "value": "Distroless"
+          },
+          {
+            "name": "syft:distro:versionID",
+            "value": "13.4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "645fbadb402adfd1",
+        "type": "file",
+        "name": "/usr/share/base-files/dot.bashrc",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba135c7bf840c9171bd3a3aea4156b45324d8d38"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3dee894213fc1183318d254b1b3fcb21f41e7fc879ba81d39252f7996b67f980"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7c1faa88b37a0b2f",
+        "type": "file",
+        "name": "/usr/share/base-files/dot.profile",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d979f382adb7b03d225cd4d3d3b64d0375c99eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "996f60727f48cbe1496fa20bffd5a434a190407db2cafc2c1bfdf54d3bfc0372"
+          }
+        ]
+      },
+      {
+        "bom-ref": "875619b4fafa262e",
+        "type": "file",
+        "name": "/usr/share/base-files/dot.profile.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e1da45f59b221ace5d2cc31ea5ddd6de7c83968f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "70c70cffea32e8a79118d592f94727b24e9cf36c82ed8abca536d59224147b92"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9770ca454ec535b",
+        "type": "file",
+        "name": "/usr/share/base-files/info.dir",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3551f8dfbf114c159f692d5e823099cdd53b16cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c58a258cb9c410c29486aa8fa37f4e5b738bfeedc2b8e97be1cd6cff1df28459"
+          }
+        ]
+      },
+      {
+        "bom-ref": "63c9c6b9e3414d4f",
+        "type": "file",
+        "name": "/usr/share/base-files/motd",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8b55aac644e9e6f2701805584cc391ff81d3ecec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a378977155fb42bb006496321cbe31f74cbda803c3f6ca590f30e76d1afad921"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b0396e84284f3840",
+        "type": "file",
+        "name": "/usr/share/base-files/profile",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "069fd424829b7f75706af3fc9303a5fe2ece0bff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8fec28102e0c371e6f2ecb949b95c1ba802260766b18c2445882b082418428b9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "71dcc053fad82738",
+        "type": "file",
+        "name": "/usr/share/base-files/profile.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f564180899b7b160eef0a52331b0ad44c5cc677c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c8a3222782665785755e9a58a61468f3aaf6e2bfd62101b7ac80c3b4f8984532"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ae2c4df74484923b",
+        "type": "file",
+        "name": "/usr/share/base-files/staff-group-for-usr-local",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e2bdd9c1f6bff4d437032d71154e32d0c74a2c09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "24f49f765b6363ba8326121b46cabad2ac5c34532cc8322a645d60afe158c4f0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fe40fbc0e42723c",
+        "type": "file",
+        "name": "/usr/share/common-licenses/Apache-2.0",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b8b815229aa8a61e483fb4ba0588b8b6c491890"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a47fba0f5eb20554",
+        "type": "file",
+        "name": "/usr/share/common-licenses/Artistic",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be0627fff2e8aef3d2a14d5d7486babc8a4873ba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b7fd9b73ea99602016a326e0b62e6646060d18febdd065ceca8bb482208c3d88"
+          }
+        ]
+      },
+      {
+        "bom-ref": "182f22847c7d4e61",
+        "type": "file",
+        "name": "/usr/share/common-licenses/BSD",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "095d1f504f6fd8add73a4e4964e37f260f332b6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5d588eb3b157d52112afea935c88a7ff9efddc1e2d95a42c25d3b96ad9055008"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fd9923521ddbe901",
+        "type": "file",
+        "name": "/usr/share/common-licenses/CC0-1.0",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "82da472f6d00dc5f0a651f33ebb320aa9c7b08d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499"
+          }
+        ]
+      },
+      {
+        "bom-ref": "62e421449e582d9a",
+        "type": "file",
+        "name": "/usr/share/common-licenses/GFDL-1.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b1d77f84fb2bc29ed2482774473b77764fdd8968"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2652c22ba086f92e55ae4a9f9c890ad4766ffd7814a73d318e22a597edf857a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "728ab4b2891a2020",
+        "type": "file",
+        "name": "/usr/share/common-licenses/GFDL-1.3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "715f995f11805ee85601834220c43b082f457ea3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "110535522396708cea37c72a802c5e7e81391139f5f7985631c93ef242b206a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8e569324d51d9bf4",
+        "type": "file",
+        "name": "/usr/share/common-licenses/GPL-1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ef34515d063318cbf05464cb043757f54ea5520"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "49c007bafb5ad6dd9f9d4dae4d3ac0461975498150c05d684c551f0914ab486c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1c3f290f835ad6d0",
+        "type": "file",
+        "name": "/usr/share/common-licenses/GPL-2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5b48b90e1bafdbede57b01227ade30d51f4b2a3c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d543c9cf269978e8",
+        "type": "file",
+        "name": "/usr/share/common-licenses/GPL-3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "31a3d460bb3c7d98845187c716a30db81c44b615"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ff542199b74e0346",
+        "type": "file",
+        "name": "/usr/share/common-licenses/LGPL-2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "23b6c0407391cbcd669f3be57101abf490f3f2dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cc535c21133c895b56b374c8a1dc1eb948d99003ed2b47372069456b62f42b24"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2dfdc7b293e35fad",
+        "type": "file",
+        "name": "/usr/share/common-licenses/LGPL-2.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "714f44a04b7807f4207e645d57aa73240e7e5d69"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "20e50fe7aae3e56378ebf0417d9de904f55a0e61e4df315333e632a4d3555d95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2093ed44a29036f7",
+        "type": "file",
+        "name": "/usr/share/common-licenses/LGPL-3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a8a12e6867d7ee39c21d9b11a984066099b6fb6b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e3a994d82e644b03a792a930f574002658412f62407f5fee083f2555c5f23118"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cb164ccea6c834a4",
+        "type": "file",
+        "name": "/usr/share/common-licenses/MPL-1.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee93a1907dafcb7901b28f14ee05e49176ab7c87"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f849fc26a7a99981611a3a370e83078deb617d12a45776d6c4cada4d338be469"
+          }
+        ]
+      },
+      {
+        "bom-ref": "50cde292034d9a9f",
+        "type": "file",
+        "name": "/usr/share/common-licenses/MPL-2.0",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9744cedce099f727b327cd9913a1fdc58a7f5599"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fab3dd6bdab226f1c08630b1dd917e11fcb4ec5e1e020e2c16f83a0a13863e85"
+          }
+        ]
+      },
+      {
+        "bom-ref": "53d7c642525bcba8",
+        "type": "file",
+        "name": "/usr/share/doc/base-files/NEWS.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a8cc23a89c0864b822229b6c26c66d9dcba59445"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2d5dcea919681d92d097ef4f0556224d05fbda98d2ee73e1294121627f367cd8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1b41ab1f2f9905c6",
+        "type": "file",
+        "name": "/usr/share/doc/base-files/README",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "59c09bdd86c7ad0b8fba2c580a2ade685c40c25e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "95552e3c597929b3c436a2de2225c3685f740484212e3f944726c3c937447aba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c7083f1c0f2c05a1",
+        "type": "file",
+        "name": "/usr/share/doc/base-files/README.FHS",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6564fdf9f9f97e17460f5d55e4a6118077e1ae7e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "099e7f4bdeb4ff34ee8d4ef7f158a21adbc59db46a354fd2051f6d1959e70fbc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9d257875a299ad55",
+        "type": "file",
+        "name": "/usr/share/doc/base-files/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ca9ce32097409e1d8edb4a8dbf6763eb72ce229"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "42c66effcf1a179c3b23451729dc59bf3735e5c41dc59e0a228c588cb3587ec6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ce78145f07537f3",
+        "type": "file",
+        "name": "/usr/share/doc/base-files/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48a964e14ee8c52aa1529efc1040d358e384ecec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "576859a65409c99cb1632c8b3de4b3deb26910800832beda76aca33d00720134"
+          }
+        ]
+      },
+      {
+        "bom-ref": "13dafd0f418fd5c4",
+        "type": "file",
+        "name": "/usr/share/lintian/overrides/base-files",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "87bc8764445c236005a958394fe768dc52c8c3a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02120b9c96091120933c60555f951a206cfd75fd70d5aabe388202033eddd2fc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bc2dc78124d01b24",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/base-files",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "390c7f804ac0d1bbfcd4bf4b614c6dc637d59d8d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8389ac1cafe7547811e35183094f34470b238605f41f673d53e9b0102d1c261b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b7ce0ef4c483e546",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/base-files.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "65e556a0d358e2f85fbd00a488580125367dc2fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "604c0593fe8573f900f603521224d55b0e4b99978f0197892eede80334fd16d1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "522a23aa553979d9",
+        "type": "file",
+        "name": "/usr/share/doc/netbase/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "82d77f071e25ad1d6744919eb61af82f0cc4474f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f12000167f242ed7c722889e37e3ab8eee5133ac0c6861fcbe3b51499027a294"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc8ad845573d9aa9",
+        "type": "file",
+        "name": "/usr/share/doc/netbase/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed888a1f31b753739cde9435ff17fbab81aef830"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "795b66147ea5ad692991caa7008ece551fb0fa88b9c53656223bd1518dc58ab2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eda4d4cf0900f9a5",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/netbase",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "225bb01a2cd2e4237ade61611d7a41abdde5911f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b44f4feb536c195a150c6b83001dfa016cb40f35ed1a5972248eddd8677a254"
+          }
+        ]
+      },
+      {
+        "bom-ref": "feeedbf2bec912ff",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/netbase.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2dda7038760c2debb3e769a27d26dfd7f8ef8a14"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef0276ef8c499705809b3f72480078d8065ba28da0fb99e5c12bfedbe1e2f4cc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "960ecd94748092ba",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata/NEWS.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "214a8f9bc8c950365011c2f9514ab9c0d8c713c1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "70b372edce5f0ddf6436f1e8a95af03cb5e8002f25a565b4a6ad0eb3de24045f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f56b91843fadf1a",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata/README.Debian",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f78a0e53523eb3cd58d2ba9a189350e6e2f95629"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b1f0b2ab552f13ad6cf8aef7e1f02fcd6cdc0a1be967db13f29d1285e4a4d87"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d61df55cdf6d2ce",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8d2dd1b873150d8033fc9a4f6f868e50cd5cdece"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c0c09cbe1c10a3c9e3d6e4b541a54ab9220252a1a9a222161ac0115d192774fe"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8502e9326bbf6de",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "410db8f100d8aebe8b238e0e1632439de13aef1f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3da6f4ed54559c6f7d4d53ad239f470bed0ccb7e407eb6c9026b59114884f0e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "000d7c34ed64f1f8",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aea2b97caa943cd88b5c1e03d1ac7055425f9aec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1ba8c24218d61635",
+        "type": "file",
+        "name": "/usr/share/lintian/overrides/tzdata",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "945bf790174b5c29a79045dcdbf8c4e4028ee9fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a5727695ce21f9c8ce9e111d20475268f426caf82b8a1b68e0775de5fbdf093"
+          }
+        ]
+      },
+      {
+        "bom-ref": "930363af98bc4a15",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Abidjan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5cc9b028b5bd2222200e20091a18868ea62c4f18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d2efac4e5f23d88c95d72c1db42807170f52f43dd98a205af5a92a91b9f2d997"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a927005ae47556c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Accra",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e51b14ae73c9ceba6b940ab31fc39566d5e392d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7346770dc7af569c724fd1ce816d7149ffdff3e303420059faa1557cc959e115"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b363c80dcf5dbb14",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Addis_Ababa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c3ec6c02b82cdb393255b31b88841e58585c7d6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc87a606ec2e31f061a7806193472eb39181dd3b1a8a3563f404992bc693a77b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "61ed18def11e051e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Algiers",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "edb95d3dc9238b5545f4f1d85d8bc879cdacdec8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bda1698cd542c0e6e76dfbbcdab390cdd26f37a9d5826a57a50d5aab37f3b2a6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bbd56c59e295b87f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Asmara",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "da26c35de6001f6ce436ed72481197975da7ef62"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "65af76431c1dd400e1ada6687e648e0fba1f80138acccdf7987cd3e1cd01b199"
+          }
+        ]
+      },
+      {
+        "bom-ref": "31cf91a0b78f3472",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Bamako",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7015e94ea3ea52f57df9fde2988ddbfffd785c8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a212ea76ad201e8a956438bd008cd333ead81dac3ebcd2df4fcddc5b0f59165e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c0373f72ef2ff61",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Bangui",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "95e4df1f88558c46071352063438fd7efd740d24"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a72ce103a74d3432bfd869efa0276a8eb4f83398f93d94e922f793b9ef7beaef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7dc92d204f9526c5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Banjul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a756377248320782695b94c651f9f38435957c1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f511d8d1785320b80330d02f1d8ff3a6619f71f09539a73daba97f91cf630f5e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1218c605df61c46a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Bissau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "adca16c6998258a9ccabcc8d4bcfe883a8d848f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "223bb10cfe846620c716f97f6c74ba34deec751c4b297965a28042f36f69a1a9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d955bbbd7c78917",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Blantyre",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e86f9fd7e39b1cfb6823edcb39dd1164df936bdf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "de96b327c8198764a41bc035efd36b63075f618e7db479ebf451226a54d4bd42"
+          }
+        ]
+      },
+      {
+        "bom-ref": "04fc66ff95ee8f9f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Brazzaville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a15d91431af650e7aafdedf68d45ec31d86f1e0e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4680eb49f8aa6b167969f6e27221d859792357cefe0285eb03f60725db664d57"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e94fb8d13d9d3a61",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Bujumbura",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eccd392d987e133182ce336005a4714e9e5fad6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c880a655aba172cecd4ae8eddd5f8d4cdde07686f00223e4adcc086dad320e7e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab8f2fcc06b89158",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Cairo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "428e1f5f708eb4c131f29185bd602223027b3eac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2dfb7e1822d085a4899bd56a526b041681c84b55617daee91499fd1990a989fb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "49e2b13b851b37f0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Casablanca",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8299b0d609b0f62013f4320df4b92583c21071fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e11a956f0fc5dd9b9ca29202da2bc027c583c23e7044e0c007aeed0697577200"
+          }
+        ]
+      },
+      {
+        "bom-ref": "04a00c1b9d30aa12",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Ceuta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "029ce64badb36722c9e2191f3ce858c514aabbc1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0b0fb6fe714319b37c5aa22c56971abb2668a165fc8f72a6c763e70b47c7badf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6ead8d9af9a49fbc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Conakry",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d9eef5864a0db2b82c647282aae34c3152de54a1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "93b62b3d76c1d4a477d84d232c576f9b9f21e428a42635db94eaca2c59b7b2ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8286349c50aecce8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Dakar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cc33bc67d266dc2d49dd08b413605d6e974eecb3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "40733be9374ab5a9bd38be2be2664e538f97a265bbe7d898a6167d3800cb228b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "156743ea3e029aef",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Dar_es_Salaam",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3ece541c6f4d5b8c6407a3ea0c83ac812970912a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4fc4f312a5287024c7f8473d753b6d1bcde396138d778adf5fce60dddcc9b53f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "96013442d50b23fe",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Djibouti",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f985b7ced38006f4cad1c92ebfd87f35f5c9e1f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b92bac77f2dd9edd59397c0315e116fd0dc4fbc1ae6cd266687a2822877959f1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7edacc1f330cabb1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Douala",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0225f31e516a27e2c3e3bb4f1a92995c95a6bee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3b014a5d1cbee2524ae309a895cbe0fe47da87c12016fe8cc2562ac79906590b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ae5ce8356bb3edc1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/El_Aaiun",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30b58415b36d7646e0a3a3c2b04738f778bafa09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "516082a902c9c5df2ab13630f36933f56d6cbb05b94d1827670df5b03583cf6d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f4360374575d5edd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Freetown",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7687166d1782cd3455d5552766a083f9729b4688"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "77d05b2ed586a9d22f6e4a791ec0634256dc919faac6279bdb7db388a9c1f67b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c42877fae3a0c6a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Gaborone",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "867be7affa61e2f3f2c7b18896ad5b897d3f2ddc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3ca27c9dd26ccfd118a270eaee39195154cd63f15700d14de650bf7493cec628"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fadbbdbe0bc5e9c2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Harare",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c5447a74c8348dd55bce2544becd5e94db494814"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "22720486f3e24b8e4b4f746afd2e0020f22d3a6c055b79579457e3efc2373ee5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2786fc6cef2b60fa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Johannesburg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "65c0d4ab314cb72b8d8c768e3d0c3218848b61f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6c1bcc752668e77585a308ae8543bd0bccd8e813865626e809bf94f3fe3d977e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "af574014161bf1c9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Juba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48173811f532aabc17b3798c40fad46a3df0e543"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5159c8a843c9c072d3302fabe6a6501cdbfda29a1856c29dabeb5aff95d4c3f4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cfdfb1cf2c4146bd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Kampala",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ff253770d5916b2b1e96aa2585c07e47e1b2f4f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e23eb14b36a74840f4490a272ffc7b1f271a5829a349015f878ddb2bf34d9aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "462fd5036800fb45",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Khartoum",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7cde30d5acfd99119ef22162c1f8bcafb86eaf03"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "318583a09dc070222d65d029a1e3a0b565830f1aaec13a27e6fe533863fbd3ea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5cfdfaa737430528",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Kigali",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "648695b8be4b148b52f35dcfc294529efcbb7b06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8cd9c1bb40c4452e61520a9dfc9a409a67109bad6f41f413c786998d00cbc9cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0832911c93cb2032",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Kinshasa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3724d5c3dd6dfcaafb01d9cebc8a087cbd2a39b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ae6d0e96d674a4c232cb01faf61a954340d84ea92a71a63ebd060e1c67d8c08"
+          }
+        ]
+      },
+      {
+        "bom-ref": "365b0eca13e56c6c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Lagos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30ba925b4670235915dddfa1dd824dd9d7295eac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cffeb0282ccbd7fba0e493ff8677a1e5a6dd5197885042e437f95a773f844846"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ad3ef65b1721e2d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Libreville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b9ba63e019dacff0390829874008955a6ade749"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "44575c7c30a1281ec495adb7a404888ed4d7e41c0234f13767ae7b1a1458be73"
+          }
+        ]
+      },
+      {
+        "bom-ref": "af628ff420a9c6cb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Lome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68eb6f1e3a7769a5929611e8784299f588d33d3b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b031c585ed04311c7c7c14b2ee23ba49cb22ded8ddee8adffc9f14de68d2ba8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bccca30a036452ce",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Luanda",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c137669c8f29e290a40f2283ea8da6410ccf09b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c87aa48fc0f0043c6d101335acc8c7ab4ffc2707c14a8f5b1d6d1abf3bdec69a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b1127fce9c76f38",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Lubumbashi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c2519e82a4e4a1f7cc483375f8a0be9677b2c9c7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ed509eccb6e51d5cd529388c57692a641a5b9313233897a1bfabdb612a415c04"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01ad221fc97af4ca",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Lusaka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5f2aba3bc50e1b5fca46c49942dba5580dbaaa95"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fac7c446a8dcddffc75a7dca5c762444f74df9f83c70cc505b138db85242dea4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b73a4ce7a3eb375d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Malabo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1dbc54024377111937bd6e111ae482445d3b935f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d17cee7263820e7a14499ba087cd792f4f4b358bb4c874f24c42537ce975704"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db9bd6192d15ce49",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Maputo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b0ff96d087e4c86adb55b851c0d3800dfbb05e9a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "444ed3a710414bc6bf43eb27e591da49d3be3db153449a6a0c9473f7e39fdbcb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc36bc45d1e90fa5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Maseru",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec8714963f44f02c100bafb8d8def8cf5b3a177b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "be0b75733f8dfc6ff35bd69c3d0f94abc72e1d6897c81f53d0ba7da1d72227b6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2e524ff6eab33662",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Mbabane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c426025717e52a7a341db2a5d8f03d2734480b6c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b0b8a11ab3cc1a97295b0bcde33b1129de82616b2f83987687926e100d3adf91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3027a76bdfd1630c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Mogadishu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "abe168cbcc5083974ad6c71c9353384a8e0e4340"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cf5c8032414fd86bdafddb2cdfd6813730f7ec4a08cb92b22a5f1403490fa7e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "35d7102b50403ed9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Monrovia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "81b045ed68f73a8806c5f2104b573b0479c19bd0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f95b095b9714e0a76f7e061a415bf895cbb399a28854531de369cee915ce05d5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ff962043cfed976e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Nairobi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "289d1fb5a419107bc1d23a84a9e06ad3f9ee8403"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c89b2e253a8926a6cecf7eff34e4bfcdb7fe24daff22d84718c30deec0ea4968"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d519021656e438f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Ndjamena",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "035072509f30da9a5a27b48910ae180f9c6b4b15"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f13dc0d199bd1a3d01be6eab77cf2ddc60172a229d1947c7948a98964608d0a3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5cbb88297ad3dbb6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Niamey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a6200d9483bd6a84a86eeae28d1e87cf48360cf0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "78a49cb93c76e4f036933c36ace93e46ea1d7ccf58c7b086dd8f1c5eb441a400"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4e3aa097249fe6eb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Nouakchott",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8d1be259ee1a362657c8cf41a697666f3f527497"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7fde47dac81d3d51ed1bf257f8834faa4da20d4ba1d85b824f86bf2cd79ac801"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3ae30f6e45505a4a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Ouagadougou",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a9307b0a57ad23ee7866849d5d088b09a398cd29"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fe2dc2c6ab2ef71c41bb3542802a3c18a2d657befa39f3e61321c12677d16caf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8f4ec48e2454571",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Porto-Novo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "334499ff26ab816d7e15aef1606d3aaaa034b86b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "30a8a8c8c9337afff37986d7c36afe814c8b56cb75e958dd89bca1ef6dff731d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "446bc400ebfd57ad",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Sao_Tome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7d2cac076d99bc5e38ba27b67113317ad496d3b1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "31d8f1a50dbaf2ecc9ed9c7566ba0552d454c2ab09e85ff263701857d157c352"
+          }
+        ]
+      },
+      {
+        "bom-ref": "83526b59152d9a82",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Tripoli",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fabf4010ab003c26947df60b5e359781670caa70"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b5769b460fbd13ee9a46a28d1f733150783888a749ee96d2cd3d5eba3300767"
+          }
+        ]
+      },
+      {
+        "bom-ref": "da41d69a7df5e77d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Tunis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c44e2d3c1e351f1004ab69ea559feb8ccdd65f64"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "38554c10ce1e613d84cf46deba1114093488a5c165756c6c576b84a1364850d2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "efc273427bb8b58d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Africa/Windhoek",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7cab3d13d3213a13658ce399f74cc878cf8953d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6e86fb9dacc1f86a59d59a8b924d023c60bf05fc76e0b05d8443b0192b3b87b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "36173dd37a983041",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Adak",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be58a7c839146fa675eeb6dad748c08d0647542c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "201d4387025000a6e13c9f631cb7fccd6e4369dec7224052f9d86feb81353a53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a3d75e6777da23d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Anchorage",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "275760f2eb22160c578089566f68042a5f4d2f57"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a190353523d2d8159dca66299c21c53bc0656154be965e4a2e0d84cfd09b113b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f15f1c9faa133d5a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Anguilla",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b56405c5331a039220756566b1420ecd5fe74926"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "434fbfb6b97c6d6ef4a036030bb901a49c74b7a4df8b6e0a1dcfd3cedf8a1fc1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "756fb2218fcc70e7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Antigua",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf3bc75f6436818554f2f960bc375e1d66936d80"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d63c0dde8af51ad22539678225d3f58c760f0f8971dc5e43783644853087b14e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b18b2faca873687f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Araguaina",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c2cafe3c9cc0e76ef48bd039886653c87ef1af50"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1babfdc18159f040785907c8b2a45b6e288a7766f6ee3ed9b797458c16f3c76a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9c078d124499d36",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Buenos_Aires",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6abf99d18117ac9f9f85da86569a11b6e57aa32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26653c941c26cb6f6047a3a67b2b6f15d311c7a39b24a9d834798bc8c9975f63"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cec92e6aba3c1ce8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Catamarca",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8c0ab8c1684ecbb2b92ed2d37273ee9eced805d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8c0895d719898d1121d5be3e5160167431cace744d788709b5ee5db9320456d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4d886a4203cf900",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Cordoba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "839495859f8144c95a8900b3f966957c4a6fa589"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ba788d8a184c1e7af85cae16a7088f527ac04f460f9afcea07a7f48512ed5ef6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e5e78fc1995ac529",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Jujuy",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68cac9239d1e2b3dc9f558e7ac9b9c88e1f28756"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3c69807a1ca90b18f45c27a70925aaca50c83db28b2b40e5af024aff6e03e7dd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cad2b9a2d9949757",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/La_Rioja",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "153ec9a9448ab7546772546ec75da4d6822544df"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "526e97a155e1b2beb669dd665ae79b7ba358d191dab81751f6d3060e0a823878"
+          }
+        ]
+      },
+      {
+        "bom-ref": "708e7e640084b522",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Mendoza",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88785394dcc03b8944e17b2f11314df6bfd29de5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c5c395b6f47255814053dd32d90630a72421a4c2f2029efe171be4bb89209747"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed6a1adeb250a6f0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Rio_Gallegos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3ebbc01799ce451c6a335bd9b2eb47c2b01fed19"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "17d64a478a3c80b1d7ed006e22331aa4621d9b3271a6ac1ba2e3e067932a0e96"
+          }
+        ]
+      },
+      {
+        "bom-ref": "03dc15384b42e8d1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Salta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1d5d7fc65c024eefe057a7d13c74486877a0d0a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "875298ac33486a9bc3918862d4f681f160f5a9639ee2f8618032560c2195e237"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4966dabf3f39d6a6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/San_Juan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "249fa2bdee94870c9b91fba646178f6a2c7bef04"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "008d8696d03cd263cdce11f163272e13021b3b500d5f222a05064ca63a8aa9d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5d96f0208ee68056",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/San_Luis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c26fd1f57a712d60e6a799aa5afde207f208c05c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d88b4645c2d52b6c31f0cc89b076c8041780914e01f8c379c7567137267b5091"
+          }
+        ]
+      },
+      {
+        "bom-ref": "30ad3dc182f5935c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Tucuman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "764ae9765ecd997f840efc9f361cd0a29427d986"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b703be16ab4d255f173b3593bc543ec6711c582a035076378295481b43336dff"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4233433a95e49368",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Argentina/Ushuaia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df4328f70c770b73f3b708f9c1bf7b163f7a4839"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03a21ba55958f4820fa1228c15147d0cc44e7705d44837361ec012b9e3929eaa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "535cbcc46ce1af47",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Aruba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7617563c6fe86e6b8c1c2ac36fe9fb001f362453"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e05ef0b458a717e7c83d8bc16c50e3a74a719fb5f3725b1c4fe7569a1b07fcfc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2a8601cc74ab0a4e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Asuncion",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "05cea6a80b81602d4443860bfa93ada62b4bc76c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f727c68843615cd81ddbfd311d5b05fa12de264192a91b3ecc3f4ef78e4a2567"
+          }
+        ]
+      },
+      {
+        "bom-ref": "98bf3b10589f76e1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Atikokan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c29c262e36f69ff18874e0df8f46c7af5508c1ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e1af781ad3c751d43edac773f568a7b0a9fd57f4223385e6163e3c1533cc7920"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb6e4064dee0db08",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Bahia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "685af2a0b61116c06655987805a46c466c7106bf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aa2edd03a1687c384bc553267762fc6cadc779a42773d5fe8e28a3c327e1b378"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78d0ee1fd408de72",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Bahia_Banderas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "33e0f3d5c7eace9077bacfa4f2b6e1e4b374fdb5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "32fad7189e4bcda1ce7a0b89ab1b33c63c4c85569f1956e4fa88d711ceff6042"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cbbbf1b3e7b781d5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Barbados",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5904a49c6c0ce8f10178fe13174ed9c964a8312a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a66be42bae16b3bb841fbeed99d3e7ba13e193898927b8906ee9cdb2546f4b1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "531f9881dfc53268",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Belem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b30f11c517b9a6bc6c4e551c81b42f5c1395c2e1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "69931482d1437473484a9ab241161b992d88043f81012dc26899e1bbaa272c26"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c41264e73529cb1d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Belize",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4728ee967fe9745f4b614e5b511da1c08bd3689c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a647cb63629f3dc85b7896b5a56717996030a7866546fc562d57b35e7adb930b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc46986c8218f0c3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Blanc-Sablon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "247313b6f6c2e1ad65a0a3006d951e0a436ae57d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b5537964f9883b7bdcdff6b2a3083aa9bbe385e838389b43153f72f08b96df7e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bdf481aa3df157e2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Boa_Vista",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "26f298366ec94e19abd9bf582760eaa0ed4f34d3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74cb5a1b5d641a526b8092601961036590269cefc77d3dcbe17f2923bd8b2c56"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1cd9402eab5d8113",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Bogota",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41393f1eb00480acda3e4b7e3c179b6d07891450"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6757ab9d9646431ba513c28558761670cdd25758e7dbf404735434389cc745a9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6e90dad068718794",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Boise",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e0608b89be80aaa6660eee5964203ad760b0659a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ec742c34f262521790805cf99152ef4e77f9c615c061a78036a0ec9312b3d95b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab8f9bf6ec29e6b2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Cambridge_Bay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dcfc3c07c7366b75916af1dccd366fd1077e5b18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff8c51957dd6755a4472aa13ea6c83ecd7930979e7f4e624fe21f4d3a6f050ba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ce6b15872c7b301f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Campo_Grande",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8eda418d84bf314b30e7092f5332e4aaf395b57f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8083625e0e62d9ee9187635ba366c5aa13c024be05e1c02a1a705a9e45d30d7c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee590185b8644ab3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Cancun",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf74e0c9c8ba2365819123eaddd6817606064eaf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11d574370d968cced59e3147a2ae63b126cbbae13b78fd4e13be2eb44c96246e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "473ec27ded4b5d00",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Caracas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a2c3809eed6fd4ead7c2e161460b7c2245e3064c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "99434c15d0f364b6affde3c0d68701766a950627ab91e12ccd3205a4d0a6e49d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c99a431e12b5fad9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Cayenne",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2c881b996db473d14f43e61ca76810b5dfc2069c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e24ec8bf5c285f86ada9e3caadcbcc403d9593d4e699aeeb5bf016fd1eb6a427"
+          }
+        ]
+      },
+      {
+        "bom-ref": "86e6a23b458ac94e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Cayman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "19d734b426acc9a6693adf04984ed7997f331e9b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a2ab69b8045ea3681c799a08704335f1111f7373e21f4ee08e8ae84eb408fc9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ca7ca0ffeb959a32",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Chicago",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0a037f985f6fa0b392c95c7afb247f16a3925a7e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "feba326ebe88eac20017a718748c46c68469a1e7f5e7716dcb8f1d43a6e6f686"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3e54f49e0c3aadaa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Chihuahua",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e0c67cc4ed5fe366fb39d9e55b02082254606e47"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dcd8336de760f00cc0ab1b1b4121b48d5471f8bc58970d62de4c7e63397ed887"
+          }
+        ]
+      },
+      {
+        "bom-ref": "506f71f2d0e6f6b5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Ciudad_Juarez",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fe11c20a18788db4260afcaa5d952c219f4777d2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8abe1bdbb0e216b84bd07e1f650f769c46be041a0f7cb588cf7a61537ef77601"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5548cf230167b730",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Costa_Rica",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2d1fd66de0198ddfcc1958fbaaaaba9cdb7b1d8f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef8ad86ba96b80893296cf4f907a3c482625f683aa8ae1b94bb31676725e94fe"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a7ddc62e933c1c8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Coyhaique",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ab8432e1c16003678c884db36dbd93ce3def42e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6de65753a2f0e63c765a9ddd3519058a87d71a66b674ce83b2abc94fd0921dd7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1812b123548d199c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Creston",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4f0aa95a64b82c5cd06dc73afb3fffa37e145ec3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74d39aef5420436779ba1edc97ec5999efbcbb79cc47d189ecf4a4b562033914"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c43b09a433730507",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Cuiaba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed31161916635d36d8a24e97bb43c83cecb02319"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "19126a92145736c3947208d975d43144825d4586b0f6933f60b59bba7f3c7648"
+          }
+        ]
+      },
+      {
+        "bom-ref": "68c52c15ae467f8a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Curacao",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88581cc94985e8f6692d43d148c1c793fb220360"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "646108ca5019e62cbfac806c5d112d1ff65f5912242c8f5d4233ff108ca7dec6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "209dbea6fab77bde",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Danmarkshavn",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3bfae70ff7ffa8b928ba4bf0bcb5452d09ec0407"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6116407d40a856d68bd4bf8c60c60c1f5c3239a5509df528fe0167bcc5d2bb3c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "65d0f0b05dfa61d6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Dawson",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dc241cb66d50821505cc7708d43ee9b1e77a36dc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ac01e1cae32eca37ff7b20364811bbe8c4417ff7e3ff18b9140ba2595420261c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8367754582412733",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Dawson_Creek",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dd98b887a02f1ae2785d5d6fe7d77e91ec5aae83"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6895c2c8fe23de0804e3018237e2eb4bd8690ffe73587cd04de4802935843d43"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9dc4fe73bc5b0516",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Denver",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "faa7d6cf4178d032d8ba8a4d77eac0fd47f8a718"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "32e819c00a43b3c348f539d700d425504f20b8d068c16418d26fa9b693e775c9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e22fc10f7cf996f2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Detroit",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6597537b399eab91a66e32bb4edae466de96a146"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "85e733f32a98d828f907ad46de02d9740559bd180af65d0ff7473f80dfae0f98"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6e0c1bd5054dec2c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Dominica",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bcff62237fd34abc18ba24c9dd10608e6852826b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7e7db465be161ee7c531100137bf880f3acee56b1874e20661be218ae48f0a8c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4df22654fd4a4da3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Edmonton",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4f441f7a62122e43a963260550efb1a1ff3100c2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f939087dcdd096f6827f4a7c08e678dd8d47441025fa7011522f8975778ad6f1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ebfaea3901a38447",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Eirunepe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a8e1bda8dd087d157ed049568d57dcb7ef5e126b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8f9784c648c56aab42f83f172b4ac6ce817dc8481b4a54db3ea546f562a111af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fb6e2d911e08faf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/El_Salvador",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "45b4b952081502968b04b36e7cae24b987e9f532"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "82f18df0b923fac1a6dbfaecf0e52300c7f5a0cb4aa765deb3a51f593d16aa05"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d627cf8074c3ea3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Fort_Nelson",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a453ec818cd948cc2492666443d4e39637ed7040"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ab7ce0ebdc3ad2a73eb990074eed3b367466d9c6f75d10fea0c78057df2d89d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b1ccc6f347255d9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Fortaleza",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "538e62d07963e59bf9884b70bcbde2f9eb2c865e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ae3892074ab5701b8c0ce33da2b5bfbb07b950e2c1c1395f8c5a2dc0e61ed665"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ebb7a107f0e731db",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Glace_Bay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40ba9843662a853c1d3643395db1a75c1164951f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1bc0c62c609aa47fda60217f3a168be50a277fb14e02000fc1e94ee61b425817"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f0fc95a9b112edea",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Goose_Bay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21d4df7695accb7b5164e41e28452f9655cd91a0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26068bb9e8214af5f683bdb914e7c882982fb2ac591b29163a1019586a506516"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4edb9a7d1982ee52",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Grand_Turk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48735366abbf3760087cd1533f24415136763745"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e1838510f2bad017a5dbf7c2b18eaf499c5470c24a8e22adc8e7ff4349211305"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e8f9c45b82466087",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Grenada",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "22c51e5eee62238f0bb0194178ac827af426ebbb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c9885c70cded8b2588d77c3834a38a148e0836ccfa5c5e7e2bc25f6033aae7bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3f2fb5bf332f7012",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Guadeloupe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7736231d77c559a048fefe32162aab135afbe815"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "add9720f2ed382210e7a64178c261615160071b7d576af02633317deae9cc702"
+          }
+        ]
+      },
+      {
+        "bom-ref": "153c598b1d2e8c25",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Guatemala",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e0d50c845873aa466c9a2b020326d57af4d39b3d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "76e81480277a418e76c87907b943f88d15b3a39c78dfd2108a06980af105e3a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8f4fefd90e3172c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Guayaquil",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "104819aea721a86e274484ddbc58c331bc404226"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8f652e228fb846048e95335fbbbee6859f76c1a35378a152be6a157a6268a13d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b147e0e2401032f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Guyana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7623e796f8074a16a88a78e36445c26c52174474"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4746cebc24430bc49121ec6686c76e3dd1db6d13f02361af883f68b44c6252b9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "843bd114c527e9ea",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Halifax",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "93568fd7e148b3f61fca5f36f8ae0a5b3b107fe3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4d9a667393f05a82df4df42843f6f7535ec113689529278d911d07a3c99b4e7f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "355c917f0124db62",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Havana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "51c1a7a700e4028481e506e58faf22f9677c5e29"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1d441e02e281b04908e522d98eaca75c808e51539a8e42b3287e6bf8ebf939d7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4b7b2d70f6cec42",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Hermosillo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e055ab758b61beef7d8a4ee5a6b38d789c5f6b2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b160a7acb4b992ee05a86e4f4aaba16d2d9a35caa6d601cb6b1542a5bb372dc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "551d756add609192",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Indianapolis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ad1a26bddb9304a620b2c6f7ec9f3a5226622906"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "90d2b2f4a8fd202b226187c209b020833300edec5ff86a463ccc685e8707532c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "44c6a71f8d06af13",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Knox",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41fdfe70a9789d427dc4be468f559a97ee9fcf54"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0acbd9e412b0daa55abf7c7f17c094f6d68974393b8d7e3509fb2a9acea35d5f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a307dd03b5a40301",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Marengo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0530ef4b3396d7031cc5e4ff82dc42c10f2f89a1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7f7b50fa580c49403b9ef9fae295e12ad24bee65b319a8e809e81ae4c10949b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2a94455cc1fc7488",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Petersburg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "570cef94f900163bce34b3f85b9ea5b36df92146"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03cf0e1ee334460de230b1e32a05eafddda36427554b2b5442cfbd5b429c1724"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8824ce73fff3354",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Tell_City",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "20594c1309a07d4691ff9af0a77782b5e2d95c61"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e1d5aa02bf58d815df2f8a40424fbcd5cde01a5d9c35d1d7383effc09861867f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "725c56fa669873b5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Vevay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3959be4d9e86c9c1a7f8febc46554584b2a7ceff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1fb551d86fbfb03fc2e519b83f78358910b515608f8389b43060f73f53cbcec9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5ab05c1699fcf585",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Vincennes",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f9a3d65b42b008c5a85c73934fcf94eaeac4b931"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eb6980c53ec03c509aa3281f96713374ea5ef9fb96d7239b23a9ba11451c4bb0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a9823318d6871ab1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Indiana/Winamac",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5d169fbd02f628dd6fdafbbab7a7e4a6da54fd21"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "69918cda347c087f411d252aed7ca08b078377a768ad72cf5e0db8e97b1b47ab"
+          }
+        ]
+      },
+      {
+        "bom-ref": "65bd13f6a8f6f0c4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Inuvik",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1291de8f6d914ee264f0b27a55278ff12a00ad7a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e89fa66a90e7ae4f40d4bb6cc28137e2da92cbfb9f79d70404dc62c64ac48c8a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d7ee277468fd5320",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Iqaluit",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "210193fdb9be1a88f5d245ddf3dce819469be233"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7de3a7c40374374afe335aa592b03824cc9ac28734b6a69ed2288108f0c0b389"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4eadf10db13e5247",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Jamaica",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "77453a2772c127d0b213f8580ff7890cbf7b4929"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c256a089e50f45fe7e6de89efa1ed0b0e35b3738c6b26f2f32cf2e7f6f29c36f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "608184fbceab5c9c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Juneau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "740e88dcd737d076404c386330bd379d55ee8281"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "93b8716f46864677e713e0c18b72e472303344fc807f4fc7c34bd515f8c679bd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "da5c6680e9e18ff5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Kentucky/Louisville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a63a322042aab6a2583de2f636a5eb15f71eae33"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b4fd3bdb157f9ffbc8423c71709efb0067868fac8bd4a3e99f77f089db3d8355"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4ea48c69b9899918",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Kentucky/Monticello",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ad63bf4d1228ab308b2ed6758c21fbebb56395db"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2ed7720a8f3906b5d0b3aae51fad589bef0aa961c7e8fc003a30f44318487733"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f55d328c39643999",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/La_Paz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2313587ef9525a48ce8d50135a928966361a8899"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86a7c3f0b407ba97598638b67bddfff69390013f91ee6bb3ce33f49f27db1576"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c29e9bcedc595736",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Lima",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6387a81464dc5da3d084b18bfee6cf550e0ada6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c78139c3527099ce26ef2f432b1bcab23aebe3998630ddedd1e556e7c4c66cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "839b70ed779f2495",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Los_Angeles",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a4f1faebf0f0d032290ef87bb9973c2ff8f84074"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "68977bb9ad6d186fefc6c7abd36010a66e30008dcb2d376087a41c49861e7268"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bd5ebc0d0f438841",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Maceio",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "77bd91d30eba1c3e5faee2b171d504cee244bf07"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dd1e439527b7da44039a8495216a5cca4da8eeaa21afeae58b0a834861483324"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d0dc4965deff892",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Managua",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "566a887308e8e16a9cebb62f3d4124b42c331674"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c41cc5d350079f61367c3f10772f831c57b7e94aa878da4a3df0a176e04a59d9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a8b3e6175f174ae2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Manaus",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "acca1895b15d0dfc4ef7c52f73676d65494939e5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "17a44b38e78e8bd972999890990f6947cb45a4f67a120b8d74f7ce73a0615c31"
+          }
+        ]
+      },
+      {
+        "bom-ref": "21b92819c777f0ec",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Martinique",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "caf0e4c5fdae59d1b6c1278ad7ac84bf03bcb0a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ccb3cd24394d9816f0b47fdcb67a37bdec9780b536016a65eb9e54ee9cd2f34"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5d95197b4bae4f52",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Matamoros",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "638e4541bddbb0164c8d62590ff1bb97f88b822e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7eaf8fa9d999ad0f7c52c1661c0f62be3059bf91840514ceb8b4390aee5a8d6f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1be58b3fcc692f24",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Mazatlan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44c28415e815f8e2b53604195f85da07b04d829d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0561f636a54f0353ecc842cf37fd8117c2a596bb26424aa0d5eba3b10be79f1f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f7d338d86d046742",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Menominee",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88fd8d108c020a3294eae6c83ad187cf0b01a602"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02bbfd58b6df84d72946c5231c353be7b044770969d3c1addf4022c46de0674e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5adc79bf069fcf8a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Merida",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e07f8356362c517ef41035a0394a59363cebfc0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4953441c26b38e899fb67b8f5416b2148f84f884345a696e1df4e91cfd21dddd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d848f968f74ae5a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Metlakatla",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9f327158b98652913af4d66c5257cfc014340536"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b709a27864d563657e53c9c5c6abf1edab18bfc1958de59d2edace23b500a552"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee6261f45c15d672",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Mexico_City",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f46bb76507fbd52204eef47c12c9320bd7945af7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "528836f85316cf6a35da347ab0af6f7a625a98b7a8e8e105310477b34c53c647"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e4d7d8ce81a151ed",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Miquelon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68f776f49ab4d606a095a3903856b79739072329"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "979b7104961ef474d166520b71b48bfc734362b8d46f4a2e79c372ed012483d7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bef2c96b36ff40d0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Moncton",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c08e5d548c3bb971f1a1236c397ded4f7227d769"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5a6bfe6e4f5a28a7165b33a9735505bbaec739fc1a224d969a1dcb82a19cb72b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d0c7b659294df278",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Monterrey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ceaf09cf6075be4ff98b5716e65d197c9f302864"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "622c5311226e6dfe990545f2ea0df6840336811e065d73ea394e2dbf42f7906d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "acf61381946fbf7a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Montevideo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f82542b80df1b6921fc9a3f20de1a7c37bcb6ffd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7501011389a364fb724632972ba67e6cc1c9745aa9c21233c431f8c74e2b2989"
+          }
+        ]
+      },
+      {
+        "bom-ref": "60a61c76fa8c498c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Montserrat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "70066c0c822c4e6d490b0bf3e4dea4e129ae99fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c5048b50bdc8f0e2e1ca4643fea2eda2375c64df32c6d4ca7d36bf23e5165df7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "15035baf740d53c4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Nassau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c592b2705f6cae2e3a848e4d840fb8020bb0e777"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "304a41fcbd71dd49f0c2a8cec0da83bc27e04183ce9e10768dec0bc223b15788"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f559b29e533bcd3d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/New_York",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc9337182ee4bad790b527f56bd3d2130691d693"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e9ed07d7bee0c76a9d442d091ef1f01668fee7c4f26014c0a868b19fe6c18a95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8a64060deb1e2fac",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Nome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1e6cf03e0c8fbb7a079090cf164e73291681bafc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "da2cccdfe3fe3ea27dcdae8c761cc57ccbcf14dabb1a29baf6d02f1303de636b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "313a118a6e4c3e6d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Noronha",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ddd3077848063388b0850642d94b3451c8ab835"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7de7910228d0a8aca5660a9ef389ca86c14bc9c4f9cc8066ee62c8bddc86c38c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a093f879480b4665",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/North_Dakota/Beulah",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "99080962e50069d5e6a206bff8931a67b5afebe9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aad81ba8dbbc3370241c5da7fbfa12a6cd69613e12c607256e490f29b5da047b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aab403436572fdb3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/North_Dakota/Center",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "16ee5640265f404a2a64cbb48547b834b780cf71"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f5959b2bd60a92ab942f2054152dcbaff89dc5bb7b57bcb85b810ed0a9f6d2cc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b340834ea8d28085",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/North_Dakota/New_Salem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d1defaee32cee5fdaaa1405460d9ee4e4dceb55"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0c7fdbb107ee5272b6a1b75bd3a2a08ac3b85cbaa1b75d815ddae052c659bde8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5d7b0313f72a7608",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Nuuk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9e682b8e92ffa5ee7844cca6378ccbc0c8b8a1eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2865eb30df98918a550a02dda5c7f030543bec4b11006b235021b7c8052f55fc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b82ee6bf9d0d59a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Ojinaga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "346cae590643f608e6c31870966e576f2c194936"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f7f10ffb55d902673695c1bece5ee75d8a1240cd428f4d3a97726a419b59ed1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "685a52869b30986c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Panama",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a94fbc2d567e41723f03629b6c9a864260108a17"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "91ac80fe976931c490d058c8ce8b5d71ffa6d4961f6ca13ea9c153f0b0bccea0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "090a86b491340bb6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Paramaribo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "76aabf80ff59002355d79fb03c282dcf4894500c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67b519bcd96077ea845078c43d85c890b35382331c0b393d11f51412653277b3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b79cc15050325171",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Phoenix",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3f54df3a017c38626f04bd9576a0a11663303fd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a5973d2c62e2cbf2520f2b44e4a2ee9d2f455c93f0f45bfdeb4533af1584664"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b853926907a33f12",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Port-au-Prince",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9901445a7bf4a993111d087ef812890dd44a67be"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3d64025de083a23297dda54b85d54e3847f851b7a06fa409055ce9d83bdc8e3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d2bb1d447fdff61",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Port_of_Spain",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ee1b0d3b895b4195e0b580b67c0b2ee1010d29d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d7b813d9e39530528917fb32a700cfb9d905c061228eb45f90153e68adc52fad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f2e3d335f46942eb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Porto_Velho",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "323d3a00b7012a11e609c1889d84d3b809d8e1ef"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b92315da16568fe572061141c02f79d3071385f3778eae8a9727044a64132ce0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f6d856116fc016dd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Puerto_Rico",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fcf8be5296496a5dd3a7a97ed331b0bb5c861450"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8491e557ff801a8306516b8ca5946ff5f2e6821af31477eb47d7d191cc5a6497"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6a286f16867eadfd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Punta_Arenas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8be47376d5c6a7545b1f5ce7d643163e2738ada8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b51e6e21fd77e7501616aaea36d9979e14169ca444989699a8a0736964553134"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d368ce86f1eafdc1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Rankin_Inlet",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f517c389db4ac89bc79cbf8ee5736f0cad7bc7b9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9d782a8cbdced815747a6f9793ca9545165bfd7d324261c4eaf9924af23d2b37"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c445b2ed2b1920db",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Recife",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "729dde5b8256b5811d81587ffe94556868d8025f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6c9fc7134f89162a38fa8c29674a4b3bc5376a2d1f886bbc4072f40dec4b88b7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ddf27cb135bbeae",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Regina",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ecd6b0c718b65c0c90e8097943a899c0b0cb60d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ca3a93d3ca476c80987bcdc7f099ad68306f085a91bfb4dfcdedd8f31b97ba4c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ce711e338e835e25",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Resolute",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c01bda981211a1387a2c18d7a57165e72da83d95"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0a7314d9d048fbadefb7cf89d10d51a29c7ef1bf694422e386faf270c21e7468"
+          }
+        ]
+      },
+      {
+        "bom-ref": "345103040408b149",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Rio_Branco",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4b4db121d39b9cbede3e78f144ee0bffa743e8ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d20a49525e3a8506e9d0fe978f54b4340ac859e02bcaeb835e3b2576f0791871"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c06b10612d2b5810",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Santarem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0d3a12f5ca9f1958391ce2538e90113366d9008d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56664ff52e693ee705c72a80395f74f049965d066f8028162e6949253525d0b1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5fe4e4396c81740b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Santiago",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f8b4089fb3afeabd825e427ca3b9d2a6e934ef12"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d020f0d77742314b28aae32ea68260ba99330143610cae84d2557151103ba2c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f268d3956e339cf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Santo_Domingo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a135300f73df9c427db37aa9ba29e25f83463211"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0cab5a123f1f43ddb26c84d3594e019b5eb44bda732665156e36964677a7c54e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "31899b902c9da9d9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Sao_Paulo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d83862964e9a4ba52d147a824f6f28cd4fbf666b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "04c06744ee3fe078ef3b8b779e38eb30666bf993e67a092fcaf2fc28f63a64ce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9e36caa8546e4795",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Scoresbysund",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1fb005c62e9186e375c0565c3539d7f739c31e8a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2beaa488c08216039ef1c70f300040fa50e373dbdbeb0a65b8138255f88174b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "855d8c0ab52f166a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Sitka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7bb2fd466acd0399f44f56c2ed9a2a0353fb2f82"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a24bb164dfb859a7367d56478941e17e06a4cb442d503930a03002704fc5310"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2fa992b58490d511",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/St_Johns",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4336075a81adbebeb26ca297ce309dc595b86463"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "af5fb5eee2afdbb799dc9b15930fc32d941ba3ac2f8eeb95bbb0b6a43b263a02"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dfeb4559381d7b86",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/St_Kitts",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8650003c5445719bf811a5a41fafe67841258986"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "afc412c84fb12ae86faca5a8e0878cbf91c32dd3c4b7485ead82d4533d0059f6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f76423ea4855b315",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/St_Lucia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a91eac7701417067bf7f6b8d635a59741125e983"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "236ae9122a1b4b1cc9f8e7a2f59dcf167198b208d5cc058bea4642d60a2d94de"
+          }
+        ]
+      },
+      {
+        "bom-ref": "faab045603cc17bc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/St_Thomas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "16bd3f2ce6deb13ec0c1f136a0d91dcddf081a21"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b1f38380e227d9d815400286437a6fbdd8ef838e724683db5f4655a6f351553"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0aa82cba8e886b34",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/St_Vincent",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9f3030aa1b5fe2189230828dad9070a7142318b5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3549bddd8952b7e47d6a5d04d501d522521e3380e3b04e864cf13b661f5ffdef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "26f9ab63b3461b4e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Swift_Current",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e607b1ddf124e4061e437365e16404633bbdc4bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "45128e17bbd90bc56f6310fc3cfe09d7f8543dac8a04fecbbbcd1abd191f3c36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be15044e21be3ac5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Tegucigalpa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fe5537f0f326f4513aaf98ba68268b0798e72e0b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1333b3ee7b5396b78cabaf4967609c01bf0fb3df15f5b50c378f34b693c8cb0e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ad9b2e279b8990a1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Thule",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c4e304073f4f90890439ca6205d60e20d2495f16"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f31b8f45a654f1180ee440aa1581d89a71e2a1cf35b0139a8a5915bbc634da2f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "246e32d4a4ba7d86",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Tijuana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6ad63533ea183b2895759a9702ea96f0fff98759"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8c2e7b321726e6345912da396796bdb3672bfc4bd1a91c65ee58b38e004d4ca5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "27b8c4c3d15c9ab0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Toronto",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a6d038ecff7126ee19ebb08a40d157c9a79964cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a587a1a1607439f7bac283e1815f2bdbafb9649a453d18e06c2e44e6996d888f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cba9aa58397b8374",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Tortola",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b54b1d241ae640d6266bd323de6b255f9b4870f4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2630eeb7e722f660ef4df14899437b18d2cbc092f66304427c0538257a08bda2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "687e254d35f2fd83",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Vancouver",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b42a450523068cc1434b8774082525d8dc2a8e4f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b249ca1f48d23d66a6f831df337e6a5ecf0d6a6edde5316591423d4a0c6bcb28"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc1b551c82dd9e5a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Whitehorse",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4a8f00d33b5ca551a16cedc68cc8528fb4c111d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4eb47a3c29d81be9920a504ca21aa53fcaa76215cc52cc9d23e2feaae5c5c723"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b23fbe0585ba0c8d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Winnipeg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "684c62d80d16a9256c9123074466cc5d0288daea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ecffbf610ae77857289fb40a4933a79221a3129a450e7dd9e3c309d6aabc541c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4228581bf8cd9829",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/America/Yakutat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f115ac1b5b64b28cad149f1cdf10fb0649fe5c48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b45c2729bbf0872ca7e0b353027e727bf2560ddc6309eacd0edee83b05303b63"
+          }
+        ]
+      },
+      {
+        "bom-ref": "742e09b662fc9a80",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Casey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6ff40c638a543a34f1adc1448c1eb92366a1b76"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55e68b3b14df0f28df197ab9525f7924420c5cd587496fb4377c8ea12ed52be7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "458da40140052d53",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Davis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "91cb86205c48468ecdbbc5cf91de015fd1d55014"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c1d76744ab443edd793304d4cd0bb1b57f31fe5b1c5cb48b99a88df3a7cca92"
+          }
+        ]
+      },
+      {
+        "bom-ref": "89ca2c79e2a9d175",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/DumontDUrville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0c69f2a52d7ba4687044d19076f8778f52f2981"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bb609a35ef45882fcaa9d546b9d46cf558149238c53bac702a16b248da182a33"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4e6bef942f5d9db",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Macquarie",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "99cbdcf1d9afe0907b96f0ca06636bde4e5383c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "89eed195a53c4474e8ad5563f8c5fc4ad28cab1fe85dfe141f63d4aa9cdcc1ed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "793e77c372ff09c1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Mawson",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce9fafbd02c8d51fbc9a96be61b5e93df92d3678"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1232056ea45daf664905a2355efa16469b679d6d4b16b961c9dc430ee2108d22"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b5e3425bbde1226",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/McMurdo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb3f7a6e5fcc4afa8f57a639e1a7f451c617a29e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bfcb3bf057d9b44e1c5fab524e1493c8c05f24fcd78785de5ec9a06e9733a322"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9008e1975a3277f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Palmer",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9e8e95b3eccdcbb5b3f6bdfb9a91f7b9b8248deb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1d3658d0cf2d77ba14c794443e04421eea8a8395777e32448b895804d2f812d8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "afb26d57720c552e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Rothera",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88bc94b25fec0bca5356a8a3c509cbc3adcf6c85"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ffd358f9ff2f928cd062b8db5073f96237080a0d3e2eec80f4f9c878ad76dd15"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b109286d3fb8a2e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Syowa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fed591101e1b06a43c1e45517f816bf492630172"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "505c1d07be893222938513db045c0cd92e2bc8cd9c4daded545f8e6248b59caa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "adaa2c30760e8881",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Troll",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d46ca6dc89ac8d73007507f8ae9db1ed6c43761d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7e3718a69c2bd459e312cb1e7be44b806380373a14c9f8ec7be4462b8e8f4761"
+          }
+        ]
+      },
+      {
+        "bom-ref": "04077cd23bb6e6c5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Antarctica/Vostok",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ccc7d15d0af513c6976996e1d39352ed7dba8ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "29f7edc1dccae8f90c0f3d1df83df3e0728806063d2aab2a1e74e7aac3ccad48"
+          }
+        ]
+      },
+      {
+        "bom-ref": "33931e36764d31f6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Aden",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d96e3388ef1fe3805a77b2cd4cbf9432ceb0e9f9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96a3ebcde1fc338ef6911805551c31d7f16f271fa27e8d0fe68421dba876e898"
+          }
+        ]
+      },
+      {
+        "bom-ref": "59390d06a104f123",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Almaty",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e0146d33450990d97e6dd177ac1ca6004da60c7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "94f2d65e4d9fd66598450645908aeaff91e486872c5018acd0cfb285d0c77014"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78a1264220a8f1fd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Amman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "57cfde6f53f3cced42946916e888d54403d08969"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "42fe1c5d7c3b28141613cf367208f4923437c21d6fa55d68ac9dafd898f1af65"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3112f86fddd40616",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Anadyr",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ce5effbc1b12104beeaa46f9886e45eaf13d895"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5aa2a71e8e481d2599d3c776b12e72b47b6fd0c40ca1cccfdd6f736c30eb6d85"
+          }
+        ]
+      },
+      {
+        "bom-ref": "29d5f3e073f87edc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Aqtau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5db0290cbd570ffb53e8c6a545873ddb2ee23326"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e27eb9e0566d0ecb1749f850b338d91b93a6b5b136ce8d4a6e259c62b149834d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "912f151d1139f788",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Aqtobe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "503ea07ccb02ec48462fbdf51f051737f2005281"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d681474dbfb26dc4ea2d79b4af564e5607583131e51a836cf8f82fbb1e747771"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a797f3776c7cae6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Ashgabat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "58b5f9b3781cda97e215333cf07284b2f8f704ef"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fac7c69d1ba68a8eff06cf30f581f8c510d6823077c01796edcd02e7a42a93ae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a9f3f8ea202e815",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Atyrau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88cf25cdea7ed28d832d783b47b06e038aeede4a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fd4f02394204f671bf1ca75d644d50d2c3eecf7accc1f8f099f9d50d8fef4a68"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c4c43638d3aaf16",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Baghdad",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bcfde35ccf92ddad05e63ae49f275eb67c9afd90"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4bea65288e3308ba88d22746001124de84536b3372ac88f64fdf3e12d5ad643f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7a4204429379f9f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Bahrain",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25eccac8d5d675d0d550e1147faa2c73ca71227c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "94b760c3b4252e939ec05f7adc78b6b73a41bf790998285fc3b150ef692c39a3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b044c03c97daf976",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Baku",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2242262f170c28641aba438b583994ed9e6c48d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ebf86af7c4861b48f4240f2a631f7a59c20c6522d6e30e3ad105e1fce33f71c8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e0c3a6bd31e954e2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Bangkok",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d2f3654d198fa02fed46579cf57bb2adbe09ed8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "85fff93d57a041c1524bad028d2f340bb87e4c63ab7d0e27726f3737c5666649"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78278ec3ea9c2767",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Barnaul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "661d813cbd1b68751618b205e6ff172e45dca6f4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df37948a62d332b219134bd7e971c5bc1dcca2a131a156c4e424a6e86574cdfd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ebb8a758d57e49d7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Beirut",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fba8b66863fcd6bcabec3a13467e0b3450650ad5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fd9ff664083f88bf6f539d490c1f02074e2e5c10eb7f590b222b3e2675da4b6a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "170684bdd01cdb4b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Bishkek",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "31dc024a65b49ae0806079677bf2cf1e07d77a18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "20ea14ca300120b0a45eed6b8c222a4b002e7d16059257396000b88dd855c3a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8fabe3fdd6de0e36",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Brunei",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f598427c44f7c5783730d32b9f47aa9ebeac6c98"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "36cc4dc9f07f0bd5cad91a69715752f6a981a7108f2d5d00da0453e7b880bf2c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "62878215901415a4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Chita",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6eb2b91f9f0c64e6bcfcef7735fdd470c90aaf18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2db4a54b6decc0590035449c83cce4351d2298035635f388698777f476cb7484"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7cf2ce551ee595f8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Colombo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "10cf440cea30a8286c6ce17d5cef2e37c2913a40"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c39d8bedb813e26e6172046e7af20f63cdf1cad7e406690b86728cc29d7a2ac6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3fbffc6c308e2a3d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Damascus",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5a78c9e5c2b86fc9dd0dab83920ea739b020b02"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "12d84685e6875a6cb922b2c273d3663378ef0124051edf13b01174ec8d6d81b8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b9b429d3bfcb16e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Dhaka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b87b3f2a00a1baa11f7a3e7ff40b09451f4753da"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb1ba527629586f2a9eab9592ccc9da70ee85d58ab93eae2107fb5f35c4f139e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e21d4d3d579a3a41",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Dili",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ee687d00c9b6813e20196906f15b7f6aa551410"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d80f6e166c12c28140e68d9e9352c0d2e72884f9cce368215af0fd0f94dd9c99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3a396f8af75d925a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Dubai",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "06f88ab61b092bff63b9507aff7d0e947814449a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a667613e16894702b038dbf18993467854880a3956cf263d265147bfe1fdba96"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1779c3ac8942f83e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Dushanbe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7657ed74ec2c085f04ea4b7a6eff5fd0aab90da1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9286279d85ae16c057775bc97d9b06769c276c51c4c2f9060664abaf1dca22cb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "49b05f28880d6152",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Famagusta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7f718a82b28e4fedb4e6501fc94ca2a6ec758c8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "085adcca077cb9d7b9c7a384b5f33f0f0d0a607a31a4f3f3ab8e8aa075718e37"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bc0928c88ec0bc86",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Gaza",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "169848cd25c3fe443c5d0bdd5c96d68a949cfe78"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b7463171440be7754d2a729b2a28e7d0e13f31aaf21329e89da6ec7be893b73b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1bec0c71d81e03b6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Hebron",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "201832bdac94204b130b3d01a26f608357e8da26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e98d144872b1fb1a02c42aff5a90ae337a253f5bd41a7ceb7271a2c9015ca9d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7aa49b28e34ca256",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Ho_Chi_Minh",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4808c01d2da9ba8a1f0da603d20d515e3e7a67e6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2e7bf5be950d017068f2fd1bf5df40429cbe004c8ee506b6220d0fbc3923ae65"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4308b30f4136a6e6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Hong_Kong",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0c3205dd5ec08d17c2161af789df8d05b1bda1b6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a5fcee243e5ab92698242d88c4699ceb7208a22ee97d342d11e41ebd2555a17"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0c64da480339ed40",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Hovd",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2296df5a26073f76f1ffb20d191dbce4682303ed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "667e0f2c6943f944490ec6c2868af96ea593cee022976b5bac6256d23e532dbb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "57462a49a3537fac",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Irkutsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2864270b9246fbd64432723540b5d0c645773f26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "215ba85c2c1d788f8a2147c5904b7ac818ea60fdd5f464eb17efd62e77df1739"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75cf18620624f49a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Jakarta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be35b8895cd70cc9c5744d30260e82f0421a9337"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4ef13306f4b37f314274eb0c019d10811f79240e717f790064e361cb98045d11"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db94c808a04371b3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Jayapura",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "70cd707f6e144cf0cb40af01a70b9c4739208e48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a1cd477e2fc1d456a1be35ad743323c4f986308d5163fb17abaa34cde04259b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "498366205ffede1b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Jerusalem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89e42d27cfb78255ae18ee02f5a4c8e3ba57dde0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "254b964265b94e16b4a498f0eb543968dec25f4cf80fba29b3d38e4a775ae837"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c64648c8d2042702",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kabul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "007257116e23e759f69a1f9469289ccb420ac2a3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "25911ba3c6d28ff2fb1e75d49b68005253650af2654498459121c2839a378209"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c466dd5f9168900",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kamchatka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "65417acef2e15dc96a3fadba5e777a15de301eba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "298d4f949bd148d918ff9872241c63e430f079e61541a04ad396602f791d7026"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2af83c14535bbdca",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Karachi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a4c69f1551a0a9bdd8d1817c547bd18218b570a3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "881fa658c4d75327c1c00919773f3f526130d31b20c48b9bf8a348eda9338649"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0b7731300d182742",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kathmandu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e95dd3054b5992d6af40f0102637ac70fb01063"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fd1b1f79259b0abf24338611262ed7bfa8401221d6d7820586c5ec7e16cf8e83"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bff0aee88eb0f0b9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Khandyga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f71032aa4097281a21cb14ad18b0ce968072c6e4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6ca7e6c3a939a980d0b041c6dccbfe5588acdd8842795eea8a30f17f140d9ff8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "02a9b8bab5db102d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kolkata",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "856df72f3f593ff1e183505d743bf65e40a30aca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e90c341036cb7203200e293cb3b513267e104a39a594f35e195254e6bc0a17cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4326d6c870adf11f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Krasnoyarsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e53bab69df8783b0452c4fe6cee478f53ff30616"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f9284ff5c16483d98762c43cbc9f72c135a025135ff2dd3597c3a36bc4528a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7dc4121f65659aa8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kuala_Lumpur",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7426824f1a6626d2bb605c4fbc5a8956c860688"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "16c33d8c3ebac8eddde9149085d9224330539bad676a2f3ff34bc6d46703d24a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c6bf0cc367e21f29",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kuching",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "01f030c6205d997110c5f1534ef4e5d473a4a5b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f9aadc9627f48cf1b4d0789248621aaaa23c6554a6eb142d4460c0d4f46cd74"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2fa23c1d5f69e0a7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Kuwait",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21e4d8cab31652c0a90123b3e20800c210b859fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a65c6e8397449b5325d884f1d9e23ed765b2a2b98394e0010ef896e6648c653a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "44087f2fb29ed3f4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Macau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bbd377edbc12abe7cd74edc80086dd21bb34a6ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "32f02447246cac0dabd39d88b65c85e5b8761617918c8d233f0834b88887d989"
+          }
+        ]
+      },
+      {
+        "bom-ref": "deb416ed1c59103d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Magadan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "96211bda9e69f825d6f6d2458492283bbea76633"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1dc704117050bcc98ba02fc913eccffcc94b019d5698d2d02df337b49b79e4ce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "427d6fb80d5a99e9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Makassar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2d411fa607c974fe3d77ee18612a21717d226b5e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a126d0aa493114faee67d28a4154ee41bbec10cdc60fcbd4bfe9a02125780ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f6cb59512215ebd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Manila",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1cabdadc66cf3536c77a812baa074080b2140ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f314d21c542e615756dd385d36a896cd57ba16fef983fe6b4d061444bbf1ac9e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b10e27b25395711d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Muscat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e7c175225fb2e86fe7f9dde1d01363360fb9c0d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4d08ca780545a5026472af7a37542e3efcbf96a6f6f1f0b44070aff23dacb99c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "906bf59cd8f52d53",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Nicosia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "642099c037f5f40aa6152f7590e3cee90b7ae64a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d149e6d08153ec7c86790ec5def4daffe9257f2b0282bba5a853ba043d699595"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0893df882f694d86",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Novokuznetsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4b405bd7a0850b135f533b1a4eb8ea0fde55c214"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a72c71b5252d6037959859340a0f85df795a652d222ad75ef7f1899cbf5fd0a3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "542e7066f96ed814",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Novosibirsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d31a883a3106afac08e77c6c26e4df993495fd17"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e4adbe1b1d794e19477e89725bce52e73444b4070c8de1c16162b813cc762dd6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "87c59e798c3e3729",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Omsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cc2ca1473edd947d932efc43a7faf5316e8ed670"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1f25c8588b495c12951d4cd67103e2d4c99de992e6664f90851528f4abf65ce2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "13ebb12c5d0bf16e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Oral",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dea286d2b5a24a0a4019081cfc824a5cb8bb25d2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5904f8a91982f5123f965f3307d16f9002fc7b319bf2aa2a59def9193942ee44"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a2d723f77a77c243",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Phnom_Penh",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5993030fb7d28cf552abb733c578247e7c0ba572"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "04849aa17a4de959c28b15e92c6863700c4056d0a428139555ceaa4e96acff16"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2ae42ff045ef1b8d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Pontianak",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce2c32e874ec64696f76be4439aad95cc7e3c4e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a7397c2e2ad8cabf5cff7a588f65222a8d2b7ac21b6ec613de1b56298d4fc14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01056279501c682a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Pyongyang",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "99b004e8e97b94265617932951e7227b635ced64"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ffe8371a70c0b5f0d7e17024b571fd8c5a2e2d40e63a8be78e839fbd1a540ec1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b81615f02eb575b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Qatar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3352b4d6bf9fa56540b74bb08b1fba21feff3acd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c2494663758f1a9fb3d4e5306ff28e1f3453c019ddb7545f0e0f54b6db77e86e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b06e42f9af31999e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Qostanay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b66a13bf29a7a75aec55ccd8613025c82362973b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c88e59fc4083cd454e8c916cf23e2eaf0eb8e59956785f31717141ed5cc8bbb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f6965c076c14a0b9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Qyzylorda",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1029e05cbee401ead5647ab31fa882f94d3d4fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2592cd37a36e2e4a9a5847956826625bf80be81ac814bf65afae622bb9b254f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4da46249b67d12f6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Riyadh",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1294daffe7ba6c5b2e7624128fe453685be1ab02"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a02287eee69f37c475a3e8a35c6a13e54d49671c2fa0bcc9bbfd82ab28b68543"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9aeb0e5dc37b49e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Sakhalin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee80f34440707ea2f820cf45bfe499281db7d769"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c73028afcda28407bec971300ba39688cce8f5be99fa8425dfd348914e4785bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "87e952e12cf28879",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Samarkand",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ef6591b37b6bf24a0dfd2e34517f2e8749e6e358"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cc929246dde512f77a42f83d6f8f500323b87132725674cac8f61ccae7691f19"
+          }
+        ]
+      },
+      {
+        "bom-ref": "471573d3f405a496",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Seoul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "53c1223d1f4dec149d0cadd6d488672619abf0d6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2c8f4bb15dd77090b497e2a841ff3323ecbbae4f9dbb9edead2f8dd8fb5d8bb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "81b136d628b55277",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Shanghai",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79360e38e040eaa15b6e880296c1d1531f537b6f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "64ffc2e43a94435a043c040d1d3af7e92d031adc78e7737af1861baa4eeef3e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d7b32764133132f3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Singapore",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "67497848634496fcba203626ea34b123c4021aa9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e67952267aa709f212739bb4e302d8b59d6240c5ac0eaaaee32330e71d7da12"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1866211e18a8a1fc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Srednekolymsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "198de53b4845f2446117d7342c740effc63fd0de"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "79f69a4fc8851eb71c729f9564a34cbed4ee3cb3631b957d247e4a287847dd22"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3e36a9629d56f5f8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Taipei",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "515e1ab82b216406f364cf666dae998e4b8dc6f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0cc990c0ea4faa5db9b9edcd7fcbc028a4f87a6d3a0f567dac76cb222b718b19"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1ded5628eaffee77",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Tashkent",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c21bc14086925d0281de00e574bb9bc3823da10b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a944fcb6e757d2472fe2c6c83704e64d9946c774ef3a3f9f8f7600b55f0b3b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8c3662db8999888",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Tbilisi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb2131e239ab454c2aae1ca21190c8a759dc8027"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cd0fb66d5ab9fd449449bc0deaad2abd68c3f875e429a1f889f315ab59447883"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f2b0ebaa636a1c53",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Tehran",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "92a081ad822c6373b2d70662049a007918688ed6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2dbd87f410815edcfcd7d14be84de0040ef0d913a22203e0c7e7f4f17a6a915a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ca0402ed0c4b23b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Thimphu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fcaade6d380cb19c1f6380147144efbbc9211fcd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b69d341510c98a956b7407be3f7d400beca437600bbffc9e87722898b362325"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2807aec0796a1690",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Tokyo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41852e7fc829ff3ace521bc3ebc60b6e43b56da6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a02b9e66044dc5c35c5f76467627fdcba4aee1cc958606b85c777095cad82ceb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1ef1289added1408",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Tomsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f31a1670b453fdbdbddb35bcfcace8eb805c7f15"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "72bd142d981606741fcc38897989aaa40ed7a39411ceeaefac7b2b6d9b2784e4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b04a5f4cbe0ed48f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Ulaanbaatar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e21ed806ee58826e66b5cf106792feaeca546763"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a9491746c4dcfeeec1f7427150b4aeef2cca6c6b467ca71f10521ab063c2d9e7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "96f03dd71df163f2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Urumqi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1891b18b9e9d847e831069a5990b463ae7e7a4db"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "17564e759643b151f00c98a792c47e86372a3f3a8e963bddade648585ba52716"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e92df5b0b1d97e8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Ust-Nera",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fb89c588e5f3ca0661a0110609f12312438d4419"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cec1bc9209f0d0572ce4dd96c0d4d59af5a44e5a707fb3a8f32ebc1dc5e3632c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b3270cca403bed79",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Vientiane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "caea055230cd37567c0a8b81a85c67377adbf893"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6648d5ba8e941c079cec7d4d5a6634d1d45a8866b3080c21bff53dbd0b7d613d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "210b7dd859294654",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Vladivostok",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "544159be37df642f3b3d15a817bcfa6ecac04de6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5cc40b321e523db23a0b847750ee0a85b9c6e2159590735e7730907aac4593a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f1251d08b218c1fd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Yakutsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df0da336139bedb1f16437f9f8c1de06a83e844d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3cf36b446820f6379f39433ee8cf17a9a226f8495f991652580b5218a2f33574"
+          }
+        ]
+      },
+      {
+        "bom-ref": "764b212c9d3f20e7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Yangon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "10c4f4d196227070b7b896fe50429cc6db268d37"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fd81c04aae19e5871420b21d844ce0dbb0862f36ab5073c31ecd438f44203463"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e36eb5f06eb19ae",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Yekaterinburg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "412eea5b1386b6960c6b85563f9a14b37c886ea0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e0dc845ba5e3af852c58f87adc720f2381ba193fed546d57920736c5bc068f30"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d85816fe6595a270",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Asia/Yerevan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aebbc748b4b2537ee6ab504b77b75a4a28339135"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "14cd29500e0d6d35816ff0ac2792822d5acba0d99a77b9e304aa85ac9043a311"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b992cd3a2b24cbdd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Azores",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9580f27faae2b4644f4a16ca79e45382fe83f917"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eba843c5a2bcc459e4b4b32ba4dc640f8af58069214be3c4a657aec33b86440d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c13680c3eb7c5df8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Bermuda",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44e7011574ab916094cc410221bcff4960831155"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2cd18a7ccb2762fc089a34f2cd7acb84c3871c3bbba88ebb45b60d2afbc8d792"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6549ebd01143306b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Canary",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "395c4e66b52d9181e31450d07b5365a10ec26aa3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ca62bdb9faa986f3630cade1ce290de067e4711dd07820623cac9573a16395b0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4be3582f43c7ae03",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Cape_Verde",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f0dae92d97c27b1f5b54602a399c2986bca120ce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a3dda92dd2c55ff6fdbd48aadeb36971ae2dba920edddc7dacdae73dc03ce3be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f819e52895c23de",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Faroe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dd6b1178a2066e496edfcd2426d44ea5dd23a3d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3626dd64f66d6a99d847f9b22199cc753692286b0e04682e8e3d3f4f636f033b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0156467f988321f7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Madeira",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "18738836410da9e19de07a766494d71f957f6e36"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "95863ce4c0b9f8650a1319b7e778b1c2d643c5ab186af4d35842efbf94572f11"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e4a57653d7d2290f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Reykjavik",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dca85c80179204018293e1b58a04d89e86a6ca5c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "99291a4411992de52b9bcf0478771a5a711ddf95a7f808361b5d07b48dc6d9f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9148913a28bfd23b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/South_Georgia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0eebf6463b6b9013787275aa2cd096e0c8698b7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23d48070f3ee9b2e977fd3fb760d9a135ea8c700c8ab2285aa29c94c2f97b203"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7de0888019ee178f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/St_Helena",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e37214bbd267cbe81d4febd457cac21ae972d1f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a6dfe04a0d3889bca9b71df65370184b41c8a83efb4eb1222da544478d0f6d5d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1cea50f4aec2c67b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Atlantic/Stanley",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "54cb6323653fdf9d5cd7f23e84d5388d26df9921"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b221235d302e4ee9bfe171ad4bdf0c044df85d6ff9c605d28445f938c9d2163a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c36f406d8aa4daf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Adelaide",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "91e31f0fe53950a7e8ac0bd66964069d4d7dabe9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "95dd846f153be6856098f7bbd37cfe23a6aa2e0d0a9afeb665c086ce44f9476d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "77b950dd8f8642de",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Brisbane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1cae3c294b3bc9e1d4a1e1e5457f63abb6b554e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "796e90cf37b6b74faca5e2669afb7524ccdb91269d20a744f385c773b254b467"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2d98e58b083a1600",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Broken_Hill",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f8d2d9322173a3390737371410592ecbcb9e858"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "de4ff79634ef4b91927e8ed787ac3bd54811dda03060f06c9c227e9a51180aa4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9b423a6ec5c00bd5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Darwin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fa21b92f3596419128a660acccf2f1cf6aa66ab0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7e7d08661216f7c1409f32e283efc606d5b92c0e788da8dd79e533838b421afa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a39d1502e8388717",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Eucla",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b88617cf02910b054381b3d1affe4d5a42e3f051"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b5f97186f08e84d1d5c8756185e039647c32d686203127fde0329b7e9e6feee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "02b8a7dd89240105",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Hobart",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "db8884f4beb55ae0c292403cdb8ffc47c18effcd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "18b412ce021fb16c4ebe628eae1a5fa1f5aa20d41fea1dfa358cb799caba81c8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be4e83813c245cbb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Lindeman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ac554523fc5300e535323ce58e46f8adb72c2e5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c4ce94771db6a0b3682d1d58ec64211ce628bfc9f0df140daa073f35543624ae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "006cccfc47fdaf1f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Lord_Howe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "811fd8de8b43dbbaec83a262809bb9fa6162244c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a323c5433991a963eb497b7da4d1d09848bf3ef5f5d64d9c9649f388e4bab9df"
+          }
+        ]
+      },
+      {
+        "bom-ref": "94c4b9ab9aa6eabf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Melbourne",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6f744692e6c8b73de1eef051814f00e0d159e6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96fc7f31072e9cc73abb6b2622b97c5f8dbb6cbb17be3920a4249d8d80933413"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8d08a27397a38c4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Perth",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb00a26c7ab0df1054fa1c4a71f0bd836a9be5f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "025d4339487853fa1f3144127959734b20f7c7b4948cff5d72149a0541a67968"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f436810ff78722b0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Australia/Sydney",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca9f55088c536a5cb6993b1a5fe361c0617bc4fd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "42c3857585b16db2f8ffd47ba19faa60f473340de8d4fe9320ea7be861605906"
+          }
+        ]
+      },
+      {
+        "bom-ref": "682158c1d9c72e8b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2a8483df5c2809f1dfe0c595102c474874338379"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6d9f378883c079f86c0387a5547a92c449869d806e07de10084ab04f0249018d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d74fc1584a8b5bd4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "694bd47ee2b5d93fd043dd144c5dce214e163dd8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d50ce5d97f6b43f45711fd75c87d3dc10642affa61e947453fb134caef6cf884"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ca6c9c2927c1906c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+10",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df25f8ee32cd9ac7f9d3fdafb6ccc897e0675a5c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "244432432425902d28e994dd7958d984220e87a70ae5317b1f4d0f925b3eb142"
+          }
+        ]
+      },
+      {
+        "bom-ref": "25eca8ef2116459d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+11",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "326fa090be74ccc8e561a72ff2833a9a80460977"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b56bdcbd830509a13ad27255bc3aeba2feecb49becd4a4183b2ae1977773714b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0ad174a2cc5a6088",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+12",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9813523e1f092d2f0c0cd3e5f13e2738a51cb350"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6fbd0712112babc2099aaf31edc399cb8791fffddfab9b871e98ef3c1107a8c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dffc2297e97d1deb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3c40ede5206526dd50a7f8d710afad3da46c12e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4fa129e7386c94129b61a10215407a8142a1de24d93f23285b59238689f1ad4a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c663a01f586b9754",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8f68d2cb81ec1c386f80f820d6aaf54b7444f5cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "406a18ac4d386d427e3b32f7eddb763194f917158d2e92433d55e025bb2d6190"
+          }
+        ]
+      },
+      {
+        "bom-ref": "682c2f9b14300926",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+4",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "32cfcd637174d91744d7dff4744e199750faf9d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "456ae43648bec15ed7f9ca1ed15bee7c17ba2eb595a643c98226b94106049c1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f90ab6deb859e3d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+5",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cef7ce7bf61e746cc1ae39bbab9112bf1dfdc455"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a1199e0b8d5d8185d3fb3cf264844a5cdf48bdd2f60dae674eec261b6fe9ac80"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5606b32bd3309778",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "750271da92432a39887c376cd346144d785d4445"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "77a7409f089e8f2148da7ec0cc59455b4685013eb360d123048106d2ebb4b1b4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "610d915109e714fe",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+7",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6ca6def25e8ec04a636003be3f3642e9b165b5f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4ea8d86f3774607a71d708ac160d3c275f704e983aced24b2e89e0658fe5a33b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ec967036342c1a93",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+8",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5c83913964f148a5e9d5add7eb511586880f4373"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b61ffc6c832662044f09eb01adb981851af48d03bbc2177bd0b898f477f02729"
+          }
+        ]
+      },
+      {
+        "bom-ref": "08411e05874d8e88",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT+9",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fefc384f96a7e856e72e7d723eb2638cb3e7d469"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "42ae44ea2512ec9309232993ed8a2a948f0cb6ab55cb49abf6deb3585b5673d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d6c3a6557496d9a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0ab7ceaed57872977f2162ead3e08b3a2984757c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef7175794f2e01018fde6728076abdf428df31a9c61479377de7e58e9f69602e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a2a0fd0198e7fc99",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-10",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4081769004bdca6d05daa595d53c5e64e9da7dfd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ca5963702c13a9d4e90a8ed735c3d2c85c94759934c3f8976f61f951cb522b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0f74603e9b3a71ee",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-11",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "268a542f171d142870c273ea63d2b297e9132424"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f64bbf67ea9b1af6df7fdaf8f9c08ac5a471f63892dc08a3fabedc3315920d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8147225108bf7d25",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-12",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7a7f58e042a671281dbf35baa7db93fc4661a80b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "99ee15ea599623c812afc1fb378d56003d04c30d5a9e1fc4177e10afd5284a72"
+          }
+        ]
+      },
+      {
+        "bom-ref": "83a21e0bd6c426da",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-13",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9f692f0a177436496fa8381438ee7ed1f9ae3f1a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c5b99b1b505003a0e5a5afe2530106c89c56e1adedea599ac1d3ca004f2f6d1f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c98f9f54475311bf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-14",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f073c38db02ac6096f4f32948eda1574a34d9d0b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3e95e8444061d36a85a6fc55323da957d200cd242f044ed73ef9cdf6a499f8a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6110a97983fa4a93",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44c80b54e02666339300ec84db1f6f5566b5ba92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bdeea158b75eba22e1a9a81a58ba8c0fa1cdc9b4b57214708ee75f4d9d9b6011"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b5da82d9d3db569",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3de0e41581d474c91db326d9e755fe1b11172983"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "37bee320b6a7b8b0d590bb1dba35d94aef9db078b0379308a7087b7cc5227eca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "06221b4355537d6f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-4",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b81f76f5a16830f56841502d65c3d271a0d94ee4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2d2928e5f547a8f979cdfc231aa91b31afce167beda53ea8ff8c58c4dcfd9f9a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "da6d063ab28bcb3e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-5",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4978924cbee929c87b2726c9d9b4d2d5d7590da6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8b69247931bd7c1d14ec000e52bde63d3c027dedd3bc433216a8d5dedf065be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e400e55b2e541624",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "773e9072d36b0f3dca58dc5de24b9947f3fefdeb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "25237e454029849e747e922fedc602eae9ebb6bcfd4b55a66bea620c79467bb7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6fc320ac0e03a807",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-7",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c3c180b690aee6c0320e6703f2f781618c4221e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd500e17cc54f53f444a7c3af1cd12157a5cbe4a28a5a8b04d1d336de7c71d25"
+          }
+        ]
+      },
+      {
+        "bom-ref": "22f6d53d679e1f79",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-8",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "280e22a595351b1fa0fdc3b3a3deed4e4840e31a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4bbc4541b14ca620d9cb8bf92f80fd7c2ae3448cf3a0b0b9a7c49edb7c62eeeb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee340ef3e3242402",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/GMT-9",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f62a1c06f8a901efa933208ae9501c9a2f78a269"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "239bc736650af98ca0fd2d6c905378e15195cc1824b6316055088320a3b868c2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c953d5ae4d30ffc5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Etc/UTC",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0b8991654116e9395714102c41d858c1454b3bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b85846791ab2c8a5463c83a5be3c043e2570d7448434d41398969ed47e3e6f2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b850551c0440af7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Amsterdam",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1caa90c7251a050d3d56127fd21f5fb54dec1cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a70f079e056dddb53942b473bbbd2a3a67faf5323292592096f554b5ef67b4aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5bfeffe36fbb504d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Andorra",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4fbea0614a049786c42ba65ea8bea4b12a7a6ef3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8130798c2426bc8c372498b5fef01c398ba1b733c147a457531f60555ea9eae8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6c524d3101a5b5b8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Astrakhan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f68198e49b8568c0f1f0109464da4d553c466171"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "65e183663c15551a1e47e27ae36cc49cddba04f2f9f1589324b6f09e4ee92d79"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b1412b672b82edf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Athens",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd241e817c1f999471c30d301238211a16f95866"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c363e14151d751c901cdf06c502d9e1ac23b8e956973954763bfb39d5c53730"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2dc9b8f06e21bbf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Belgrade",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "961a2223fd1573ab344930109fbd905336175c5f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a95adb06156044fd2fa662841c0268c2b5af47c1b19000d9d299563d387093a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9a7bfd6dc6faf65",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Berlin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "918341ad71f9d3acd28997326e42d5b00fba41e0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ee475f71a0fc1a32faeb849f8c39c6e7aa66d6d41ec742b97b3a7436b3b0701"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7ee44ecfd436a77",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Brussels",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d90f3247c4716c2e1068d5ad9c88ca2091bec4e8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "812f55aeb6e8cde9ddf4786e15eb4256b21e82cf5f5d28da1bad17d94570cac0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3443014d1d5870f9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Bucharest",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7176e5201942e3b2db81c853b0215abc86fd0ae7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9df83af9b5360fa0cc1166fd10c2014799319cdb1b0d2c7450a7c71ff673a857"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e37b760ad0d00ae6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Budapest",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "91adb207dce9a1bfffd91c527c87591862b5befa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "94dc2ac5672206fc3d7a2f35550c082876c2fd90c98e980753a1c5838c025246"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db7597f7dc168b7c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Chisinau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7844165a0987ac858065a8b9e0b304c657757c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b4941ae82ed7958f8897d198bf937e7ccf5460065caca2728e2a471cb3e9d93"
+          }
+        ]
+      },
+      {
+        "bom-ref": "42bd6c17a2e2ef32",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Copenhagen",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "76ebb86b9bcd6ca766af94c2182b65cabacba932"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "abb8806e477bcbd42f6c08ba5c664450e4f034309161646ef55402c54ad9d355"
+          }
+        ]
+      },
+      {
+        "bom-ref": "99e4deaee4d2cdb1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Dublin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2122cd57243fa8c021136373cb21454c0f80ff05"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "40e8d2a1c3b572284da39f6f4245b1bc814f452c44f5aa73d0a011571d5ccc43"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7fa1c25e893753c5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Gibraltar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "122f8383ab55c80eb33fe83cb2c8e870104260ee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6bced6a5a065bf123880053d3a940e90df155096e2ad55987fe55f14b4c8a12e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e4306349ec590041",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Guernsey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "115ab983357fade1e8adf15c145c8265cf973a32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "63454225987aa547bd9b47d41f274ee90de8d52c66c3c624d42508da55cf8cb0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "37b025e7a1b94527",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Helsinki",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3f01ceaf46492fcbd8753bc6cff72ca73df6d1f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "184901ecbb158667a0b7b62eb9685e083bc3182edbecdc3d6d3743192f6a9097"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ae9423f9887f1d7d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Isle_of_Man",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83a6f93c88b340212d80ecc4103b5e708d3da856"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8c20e22715c8950b0a30c68f191d9fbf2ebef60189279f2ca99cbabc14ec1b12"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a627cbc3b9ce675",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Istanbul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f8e94d99f4b59c4e819fdc581b1fd596d443cbbc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "264e308e7743b5afee2d673c5b57567636dabc925bb0be513939996e856718a5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cda1e591060f2825",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Jersey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e35cf0a296a73e09a708107b74c5a04fb3971c7f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ae8f42ddba0b50ac3b52b23f967a0cd0da7cddbbfdbc711152b38d4146b673d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e51d2d65ad5f163d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Kaliningrad",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a02a78fd9fd74fa6cd9abe6546273519018d5030"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b3b19749ed58bcc72cec089484735303a2389c03909ff2a6cff66a2583be2cc3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6a3f989486915815",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Kirov",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "22357ac98d315c82d585badfb9afe934a709f107"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fb4f665fe44a3aa382f80db83f05f8858d48138f47505e5af063e419d5e0559"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8eb373c76b0866da",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Kyiv",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "946d9ae0ff7ee36e2d8809629da945ae868f4d65"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb0ae91bd8cfb882853f5360055be7c6c3117fd2ff879cf727a4378e3d40c0d3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e559788336655dfd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Lisbon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b9298daf385db9e18080b3d9f46be2c944714ec1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "92b07cb24689226bf934308d1f1bd33c306aa4da610c52cd5bce25077960502c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "149645c197e0e7a7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Ljubljana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a6183ba40c890d7f7997afe8a9842361bbc857a2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2267951ff4cc76cebc3e804b8cca03648c169ec16ce0cbf9e5dfbe51e748043f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7619b24ee840241a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/London",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1beba7108ea93c7111dabc9d7f4e4bfdea383992"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c85495070dca42687df6a1c3ee780a27cbcb82f1844750ea6f642833a44d29b4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d76d1821249e7d01",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Luxembourg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "efcfc52aa249c0515ebaab94ed3d98e191e07950"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f7be03bdffd7d50212286d732224c92487c66afa1b3b6d475154be1dfcac39c6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1ca867870adca836",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Madrid",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "373ee9e3d0ba9edf1ebd6497d5f1ffb50a62984f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9a42d7d37ad6dedd2d9b328120f7bf9e852f6850c4af00baff964f659b161cea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ad4f0d4b79b1a09e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Malta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eede4ec7a48fc8ada059d1462e2c090eda8c6c91"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "12129c6cf2f8efbeb9b56022439edcbac68ad9368842a64282d268119b3751dd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3dfadb38d16bfa74",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Minsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d76a2c501c44525f7a4afba02107be94266aaac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a03e6d1f1f2727b60777c5b4e69839783b5dd787ff5edb352777c5c5494dbda"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f3b0d8417988e7fc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Monaco",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9eb927aa739c775cc3e390b7d65719be9170ecd1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e74b956576175ea7e7afe2b8b6c48d976e8265b463bbae42f924e9f35f305fce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4436608e4d09d92c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Moscow",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d4d01723421789b2d2b54ffedee60283e94f5e65"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a69287d1723e93f0f876f0f242866f09569d77b91bde7fa4d9d06b8fcd4883c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a5c4fc43bc0f982e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Oslo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d8838a66441249a79ab65c959eff3dbd379a1a06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51d0844618f5258a71de88e68a5691a32568478a8c035f8f12fea11b09e9b090"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c2803f434764dd39",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Paris",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f065dd54ad27c008caa5e96b7fec1e7859fcc003"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ab77a1488a2dd4667a4f23072236e0d2845fe208405eec1b4834985629ba7af8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "210d50ae2fb4bbd0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Prague",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c95c20c6a17e873cb68c1b064e6ba98852aaa27d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1bd7dd8545e6cf1eb9d419f267a57b00e60857d115e5a309326e3878968b2d9c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6783490cdcd9831b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Riga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "799671bdcad326eb5707eb620342c69bac5e6580"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "849dbfd26d6d696f48b80fa13323f99fe597ed83ab47485e2accc98609634569"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d60f344d987f8ac2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Rome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2ef35f507ab176828a5c751f702144ede463e385"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d5ade82cc4a232949b87d43157c84b2c355b66a6ac87cf6250ed6ead80b5018f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2aa37119ff6bb6d3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Samara",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fbf746a5736db94ae499d4bfd93b8022a4e7f2c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9d72f42316d3eaabb5d0236e6831f1c785b539a02769a293b4827d37d5113285"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78406b451bcdbf92",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Sarajevo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4f20170e7f4f29f21170ce80eea092f277458fb8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a3e49aca8bf331e3c6d0faf68ab466cde901c8051a8674e926acd2c66deaff57"
+          }
+        ]
+      },
+      {
+        "bom-ref": "82a69752bc2b8327",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Saratov",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4a2bc09478d0fcff32dc2c4fddd9be29dc10245b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ca0c23bd7375dd381a5b18e0eb2b161271d6371c2b56d9046eb93cb7d6f3555c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aab35b3b890cd148",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Simferopol",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1773f7624c418081fb3ab76ac1a64ab60f2e9be"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b7397bc5d355499a6b342ba5e181392d2a6847d268ba398eabc55b6c1f301e27"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b250871b0a501a78",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Skopje",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7b58851e47db58ec69309054cab75166ce725f62"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "50301171643800580da77e75187dc2f9ec2e0b40860578248c9c3dd0c348dcb8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0fcbd33b8275d7fd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Sofia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "541f61fa9ef15b102f8661b684ad9976bd81b929"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "84240a5df30dae7039c47370feecd38cacd5c38f81becab9a063b8c940afe6d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "31fef068828c46f1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Stockholm",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "318f50064cedc8263f9883058b2fcf2ab17ba783"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e0a7819287cfa9cdd78978ff13436d235830d48f5ed1ebd87a4584db2d87768"
+          }
+        ]
+      },
+      {
+        "bom-ref": "887b6d434a62e715",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Tallinn",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dff1b1743ddf6474e691fae0a6dab8ee93d81789"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e1ae890b4688a4ccea215ecedf9ce81b42cb270910ab90285d9da2be489cebec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "93063bd322389895",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Tirane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b9be3df7968b0c46feed0a46349324179daaa84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ced959c824bd5825de556f2706e9f74f28b91d463412d15b8816c473582e72ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6da134301b1df9cd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Ulyanovsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c374e42e8ca36446087f9bbbba154aac78ade345"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "73c01de69ec22a3ff570203b95546970fa9b417198697f3772ebbab88171f818"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc229c49b685262d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Vaduz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7506d222b6bc2a1ea5b435cfb42d624cba4a09e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7b7adba7d5cbdab931406b197603bdb12f5b9952ca7e91cf8f17c5d729955c8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bbcc50a122dffa7a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Vienna",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1da9833989405bd5ff21d58013704f9f00cefd7b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6662379000c4e9b9eb24471caa1ef75d7058dfa2f51b80e4a624d0226b4dad49"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d844535422ad6f37",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Vilnius",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88bfe2ba142bad0856984a813ac8b93939fd6b3e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "505cd15f7a2b09307c77d23397124fcb9794036a013ee0aed54265fb60fb0b75"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c3e87acffc0cbc8b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Volgograd",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a4deb32b25919c4fbeec94d043abbdcc27b45bd6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "46016fb7b9b367e4ed20a2fd0551e6a0d64b21e2c8ba20dd5de635d20dbfbe4b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "77638b943bf346a4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Warsaw",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "011e06118f3e209794b175332ffb109e2583e4f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4e22c33db79517472480b54491a49e0da299f3072d7490ce97f1c4fd6779acab"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c5e76f0ddedd3ab5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Zagreb",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e39288f28df39d863141dbc771b897663d5bba0c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "799e8a8826651db19a97b6231c4aca1813391e942ddaf289ceefcb1f868e620d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9c20875c16f981b7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Europe/Zurich",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "782d7d6812933a263ebfff012a0120d480071b1b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2b9418ed48e3d9551c84a4786e185bd2181d009866c040fbd729170d038629ef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "483cdd68a4d55229",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Factory",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d970812ef3dca71b59cc3dab08ba3391d4dd1418"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6851652b1f771d7a09a05e124ae4e50fc719b4903e9dee682b301ae9e5f65789"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7152a1525f97c05",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Antananarivo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0bb320226cc29e4a4698db1346d6989367f1fd44"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c045fb862767cb86ae329a1a808dbfb8d04910550be71a4fcf5ebe5e5824c99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ddcd840f756bf1f2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Chagos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "20e78a05202ee8fdfc3ecdc06c53ffa5b41b7198"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d9eaeb5f329d1487295342fe5d18521f184d69b2336c8e655d5dcfaba96de346"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1020d99212a0670",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Christmas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e17fa64511871e3696a2cabede22f25a54c891a1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "091b425a489f23f6570e58e9e6dbe6a9ace1031b239848b1eed0f1ec23855b2d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1832556a247cb00a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Cocos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5fa389f7caae80b219769e37dbc5256578943ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4cf1a8ba68d9da36e51d7e8e2f58fb5179c7b3d51ad9e211eb8637b904d97c8c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "345c3866eb0b2a16",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Comoro",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f718ec27068898d7f08b5ce37dcaf8cb04667f0c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4f2dc7f436427a68c992f877d9c331baffef0f65023fd9bca4c0dd697e88ff70"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eab9b6596bd6d150",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Kerguelen",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6ff775d5e3ecf1da48a9d6ccad34c0723bf69573"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "993f72e2d4c318a331e6fba16e526c416575bba7878b1fdefa09a88ac8c4e908"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fd6069ae6191f39",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Mahe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15f13d46ae9eeb3c27596af0c0218caf6a283786"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a0144cd0e7274c509ab19d5bad430573a876f63e8378aae989f08be5d9053fa6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "051f7a4deb81d8c7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Maldives",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce36944fc0ff3169fa4e7830eaee2756bf477244"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "17bddf7d57c1a14a07aded3e0f0b2242b60970ba4f396f892469379fcf253395"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b78c30a423592d2c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Mauritius",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "689162855b79e8faa59b13a6712031285e751d32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "667aab7357218a695c889b1804e97436f2079eb35d0b19dc1b159ccead4f05e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9675fca334808cf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Mayotte",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0fd6b7080df4ff3f3984e3d3195c12370e7ec3f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ab52952d2b74e897e330f67b329a0a4c7d34e9e585cce1ada8a10cbd4d11523f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eaa8e0a02e2c80d4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Indian/Reunion",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "735d33ec8ffd3f3687a1f7627144dd0544327c52"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6cd43bc15d219dfb98653d350d5f87682f0518e2ee08faa03ee5fbbef1dd08e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "551a5c187716594b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Apia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14aa27462a5faee1a52ef40a9368f895de4852d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "33740ab29ef943b1f55f769e13ff59a90962f5a12434209072d650e6c10abb4d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "df4b730095a5a0f4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Auckland",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "78d4d3a481c49ab7ff31722bced30e1c31e8bc98"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8000e3a323e8fd0212414e9426b020707a771c368ca0e151747f9ddb7b814b27"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4479e74a7f16da0e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Bougainville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d71be2e85de3d835c87622fd8eade7c3e902ffb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "85613ce9e5e7371faf0016e9efe61222a5b279c1cf30858b7ed565a00a0f84bf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "34abb387a9c614a1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Chatham",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c1f61e17afb35ed7112dd165af69fb1d59019ec0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c617b155ce657c9fea02fd9ddc7ac823a95f452c4a6580408d8db3a58902184f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "00b8a259950cedc6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Chuuk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79d05a0afe33d871cbe1d87edb2a00177403c88c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1faba48c1b9392bf8daa049689f4d9aa6c0ba3e890ed1db0f5696fb8ce0a1047"
+          }
+        ]
+      },
+      {
+        "bom-ref": "753db06fc14ad603",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Easter",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "726b80771cfebc39996d16c9d6e1002931f0f5b1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "41bb9b06cff1425bcac1e027bab8721e320ae238bbec68781bebac5ee97a5d53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6dfa4af7b4df9ab",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Efate",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e69d42d66b6478df4bd2a631f4cd3763a942a875"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a12c4d710631e7ed45536ff21f31c8fa14fe74c25c3f1cf2e1799d2355315c0a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fcd4dab2c930147",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Fakaofo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c34621b50b6fe39927d1b39bc277ddcf1db182b7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a8ea1da5330a8f3b6f6485d52defdffe467a59c1e5f5f08b13d66ccaf74528b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "beec98660bed83c3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Fiji",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "270361925ed84f38d72b5c7d85b13e62a5b77abc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8c1e456ceb029c7550436a213e25844143e11ba2726c1dcda20dea4fa5894342"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b038801329b0311",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Funafuti",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf40860d1a209fee8fb0671b3e8cb95a1ec89fc9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3df36747c8f10d8478944b8b55d81ae3ebb9fa6db3b11e971e7d33145d2d5648"
+          }
+        ]
+      },
+      {
+        "bom-ref": "42f8fe032f312f89",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Galapagos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ff648042958297445dcec56f99dc672836db6b55"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc625460e8d28888e83413b6a9dab6de2b0b309e0d0959370ca21119e0dcf010"
+          }
+        ]
+      },
+      {
+        "bom-ref": "724cee391b3c7efa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Gambier",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "00f0f6608983d465851e49229bfb8ede4d442a67"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8004bb82bd471ffaded2e6272fa796a3928627e07941a88cf26576718e664311"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b53497bc59d234c6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Guadalcanal",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d2aeb6f99fbb109cc8f8dc33e85607c95071865"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3389135aa69241a57500c8722d2be6c2804917b5fd89cac82dbbd0270a7de348"
+          }
+        ]
+      },
+      {
+        "bom-ref": "54db45d1c3f60bc5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Guam",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e89887209cf2ea7f4223ca7298e9377b233eaba6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "131f739e67faacd7c6cdeea036964908caf54d3e2b925d929eb85e72b749b9f2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7263653ab794a8da",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Honolulu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5d5313bee3a467f7b5311b263c7d38b52f182164"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7f03d1bf5264e7ab023a2ef9b997ddfc8cb6936692407c770762b9c549523f33"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b2e7b6ca7b5be72",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Kanton",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5445af61425cf6e3b4b2bc0fd4a97b71147d822a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1cd4c02abb07fd1d96dd046529c98d95de4a71774fd328170a3128bdcd62fba4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "38f2f989be9be964",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Kiritimati",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e83c7bbcdcc83e6934be64fd0a229232365084ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8589353a8cfe2e3d4fb9909b355d96248bce2ed0b04b0ab6bbaddc6f567edcd4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ced6dd1ce5e6b5b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Kosrae",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb5492ed1cfbef462c850a6c36b2453d6dc5ca80"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4348eb6f8cde0eb77ad5b53857c4ea8cc73421ea7cad667266a274baab2e9f1b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ca5daac74fe253e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Kwajalein",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "418d0c6d24243e19ccbf30c3ba72a3b72951182e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4e667fd1ffb2490fac6810254575747f8f48b709dee755415e7eab59cad6a874"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9bc4566a7b65a33b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Majuro",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2cd093b1debf0347cafb40c4d22490e55d334a5a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0dfce301c3b5ce88ebe20b9b61064890ca9e20fdbb43f45e06ba3190145192a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c94d706c7086362d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Marquesas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "def12fdcc1acee6a96e7855cc43382fafddc412e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "153c4f2535ad938f0b55bdcdd94eb828ba4bb26beed03401b9b4c283e76fc863"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d5af9232c43c4e0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Midway",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41fe30afb68b98e336f5fe43086ab7fb274fa5b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9b903c517a790a878e17f41acd44f8782af3963a4673ae296d93ab906494cad9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "088f21e14003cc23",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Nauru",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fb4f15ec890f2db5cf829699cb96948630b9ec46"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f4048a80b1c1fbc9ec4c42b5029cdf4c7d3242d6cd026197f8923bb87662aa70"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4d6d1ba4e38b3c13",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Niue",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b44b2ad62d2fbe5ee390347fdcd8c29659ce2e9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a5957c6e927711edaf92326745a31e5acf5c6920f3216da85086d39b9a9b833"
+          }
+        ]
+      },
+      {
+        "bom-ref": "676a557623880c3c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Norfolk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ad97c313e51f794abaa6e2dfddc8984330d1e296"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0cc757d419b5f25ccdba2096cf07de1d43111973d2f2fe405a787efc45ff019c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1c67948b99d4d8e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Noumea",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba9a1ab97d0229d08be4ea87688f76517829f248"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b641f1c67c6c5d33aacf76335a2d269214c220e37383e5bb12949131d3e329d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9c0279af62080863",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Pago_Pago",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4c388c7f9a7700517fc6577943f3efe3bdddd3eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c262b62985863aad47f13b0ef5db2e5cc917b5d38002de9a2ea83ddb0883458"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2035e39944e7cf78",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Palau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9065568520f50f092624dd58098648b7d2e4fdd3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "68dd876d3d2b7aac0aaed2ca0caf4cdb36f47748a474d953aeb9ed571747ebaa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "16fdedc1f916f474",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Pitcairn",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "193bd97bcd130c2a9147722c9136e8e23ddbe6f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5388c052ebec44da32f17acf6b5e98a5c5c272a1c9634bba26f08d80f1163b57"
+          }
+        ]
+      },
+      {
+        "bom-ref": "baec12d3e9220dcd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Pohnpei",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e48f1c5bada841c0740549d8bb38cb9fb6ff6038"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "394e49033055cfca49245832fe283191982e924f13ac0e3bfb81f97a11f85bf0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11b4200cbc01ce77",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Port_Moresby",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "331542d6faf6ab15ffd364d57fbaa62629b52b94"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9c1dfa1c15994dd8774e53f40cb14dcf529143468721f1dba7b2c2e14ae9f5f0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e8fbbe8f47830475",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Rarotonga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e4519321d37b1ab7fe54a4490ad92b1b0c6a5b22"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c0f12ca176f20e7ba17f39202ef52a852ceb331fc50f8dae00f96e48f321dc17"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a2e017fc37dfb130",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Saipan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a17a9f10a36680f61222a8545e4d69d0c2326e43"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f1d685991ea1f04d186f9c9920b6d5905220348b5291a34be8be71f4aa717774"
+          }
+        ]
+      },
+      {
+        "bom-ref": "651088c6967cae5f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Tahiti",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1a32f10a8437c55ca9653afdd99774897ea79123"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0517dff46dc4fa258a84e591d56bb4d99d223208ebc035d5f9736ba88b577536"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7be38cd0adbcbaa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Tarawa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "244ed7d52bc39d915e1f860727ecfe3f4b1ae121"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "53268a8a6b11f0b8e02fc67683ae48d074efaf7b4c66e036c1478107afd9a7d7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bafa1b2593ba74a6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Tongatapu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f76d2ef606379bf8ffcb4d9d0565501c70041df9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a9a4166a4c06626fd1d8ed4f400be25abceee6e8dc4f194b547cf40097da016"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5052f37b5be3d780",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Wake",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2c91e4673e7c6e06778a7fda12fd80d0e17c582a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "483c1f91de23a0b0bc408712c2683cf69f720267bfe028d763b0b998c2ec22ea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "05856de93225efad",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/Pacific/Wallis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "99d5769ad124c605a5ac98aa9eb8a88ef3417d77"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0e68cea3f0d2ef4ca81686b2baf04dfb081bbf4262c9a4d9d2eca7c08239a468"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d218e00e1a82ecd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/iso3166.tab",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "658298663cd122665c3f4b2019be2663aab26185"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "837c80785080c8433fd9d4ea87e78f161ac7a40389301c5153d4f90198baeb2a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c25c1e3b707e789",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/leap-seconds.list",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5dcadd9bc19e6af182f36f5ce0fc3e2ab5deb19"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "506e737d1a950148f0daed3c75a55ad497a0f2fa1a82661a361882dd8f4b2093"
+          }
+        ]
+      },
+      {
+        "bom-ref": "836b4771ba1c75e4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/leapseconds",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0729dcd5b138f1d7f28e687ff5a73c4c92f06f7c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d6c8c0330527d995de5e50af9c07b929fa9d69d92e723cfb623b4ae6fae6d3b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ac391dba940fbb42",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/tzdata.zi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed180d70b5cf5d6bb9be7e351010f2ddb1d8ac61"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a3d1b06c4214c390288bf989f543962aeb8a98f6da374527a2de0501746d513"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb0bb5d20f00445e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/zone.tab",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4f9c2681dad62e7eb99c7ed3a376a04d2cc581e9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "586b4207e6c76722de82adcda6bf49d761f668517f45a673f64da83b333eecc4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fed6ba2277ca98a9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/zone1970.tab",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0409ecccab58b2cd0d5aa758d2a518354dd83bdb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e9d9fe30942a880f756b73f649667d8647a1ecf2131149445d9cc24c65e4ee8f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b0afc08418b5f194",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/zonenow.tab",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b70baa4adc9ef3f065a4501814912acd0b9dbf20"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a3c79f87a5a2b64748e106f994e2f979c04fd9416de7b92a1669c39d4ed84b0c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b21bde815981b92d",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/tzdata",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ce6f1e3bf98323680d9f3a27b7238232232e6bf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cceef28384ff713ff583a9d17059d61ff420e43974a10cbba58cd6cd4b2a029b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "894b2b668952a6a7",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/tzdata.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "483ed8b2d22843feda239c3edd710554de9c92fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8229a7a88ff9d1e759461f114e9637d72623e9880fc539edfc16e7a51ee4260b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2a894aa92100ee6b",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata-legacy/NEWS.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "214a8f9bc8c950365011c2f9514ab9c0d8c713c1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "70b372edce5f0ddf6436f1e8a95af03cb5e8002f25a565b4a6ad0eb3de24045f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3bdc594cb7a1bce4",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata-legacy/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "da27f219f5831c5d642795fbf804cae82efdb500"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8491eecc093b69f9d1316f49163ec6c113944d8167be314a6780e89909d83502"
+          }
+        ]
+      },
+      {
+        "bom-ref": "646b56beedd73b9b",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata-legacy/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "410db8f100d8aebe8b238e0e1632439de13aef1f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3da6f4ed54559c6f7d4d53ad239f470bed0ccb7e407eb6c9026b59114884f0e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "12141f13a70d55ba",
+        "type": "file",
+        "name": "/usr/share/doc/tzdata-legacy/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aea2b97caa943cd88b5c1e03d1ac7055425f9aec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "472002e45cd782d8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Abidjan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bda061f8aa2517793e5a0c28a5dafd8d9479813f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f4233616006266407f7cb61f082a30b7346cfc41cb473faeace08240db03ebaf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2d633afd3fd1a12b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Accra",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "beae7c725defb2e182e426856c7dffdbcb0d33c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3db7416ac43089c7fcc53dec6dbd2b334ca4e06652e771e6355dbad41bfe7b4b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eecd794f476c9d07",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Addis_Ababa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79e3a8346c6a96bd507886ec3ce8aec49a95cae4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "924c30d67fc68bdb12ed7079c18eb1ac03e5d38d4a83363bb61d30ec13a1111a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d663dda2dffa9b3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Algiers",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0a4505f2291513c110705ec63eb3ba21e90a0bce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d02d23d1418aa96f67421bd719a2bc0e18eb7fea9dc577a3f718a9f88572eb34"
+          }
+        ]
+      },
+      {
+        "bom-ref": "17a72f82c216dd42",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Asmara",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e957c2a54366b4e75258c1a22d40c03fc83e275"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8ea2865e4163f6c640c6f143dd9e6260efb1ab5f60070f3498666a87ac578bea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d016e070cee90e50",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Bamako",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "96e67ce1fdc97ee9ed8dda78a9d11108d91df8e6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "857f355e21e759afc90abd82df25fd15b1618d3c53981a38dd863daf01ce1c91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f70191829567e54",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Bangui",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5801fd99f890ded7b0c6023254d45fc4d620e04d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7c00c1a36b0e148511d10ae04dbc3f6ded3d5fdd516585036e8322967ff8298"
+          }
+        ]
+      },
+      {
+        "bom-ref": "69bad9e878c40ea5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Banjul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5eeab80341918c09a1ee4a17447ddfa89cf34771"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4a4d3217c11262eb2b37da2b2ce12403e795f0d83154a18cfd4c834152829d71"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a2ecf9949e9e35f5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Bissau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9732d8fd2c7f9afd53029fd598a15e690df37e87"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "abfd4d46b7f68e7833b05af8e17ed098c86aae1b305add3990c4d955b51c8613"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07c00f28bed7b2e5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Blantyre",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e2d42d22c26241fb82352c3386717b900e7824a2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b123be3f9639b3ec39d7a1bed93ba1625d5510ca798f8870eec17a48912b4974"
+          }
+        ]
+      },
+      {
+        "bom-ref": "acb76ca296c126c0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Brazzaville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5d9c618f24b9b3ec43978c97491c2312c09ec2d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f6ed353cdd362672909d139fb8321ca2e6c2e2c6f0cb5c37e4d50aa24602f50"
+          }
+        ]
+      },
+      {
+        "bom-ref": "690e4f9506ae2d21",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Bujumbura",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "90f0228cbd76399a35952a932f357ebd765c2dad"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4fb19b40ad2ba4b67aa995431d5ffc9430585e84fb6fbd73bba464ecb86ce411"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c140fde5263eee5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Cairo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b3e9ca230bd40565122e7dca72584b0e338bd154"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a8245264ff0d0ffc60149218436d3e6e8e84ff32c042dc15a416f31666112d8d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5f1d3366db5fd171",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Casablanca",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "01912cf0fd8f0602ab59dcec4d08f29a1e481b11"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03fd202ba98d914fc76a27e342d677c19dba8be46c3079daeafbd97a9481f581"
+          }
+        ]
+      },
+      {
+        "bom-ref": "106468f6ed59cb3a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Ceuta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "321d0017b3840cb9f9210d8a110e1ec704795794"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "45ad241f670667961640bc49249327fe45086b0644d6f89d2efe552c9c77b561"
+          }
+        ]
+      },
+      {
+        "bom-ref": "710d897012f8d644",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Conakry",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e1d24142f4295cea6d9616bfb7698241de84273"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dcc482ff0caeb033d42b73443b74b95f5a253f7a2c20cb0f0cd68f88110f7269"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c37ce2718103d2ca",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Dakar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3efc5e3c960b402f8d5ee0aef6df6edba4a11a13"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cc6238b7cdec9110603b4784c99136cb458396ef83cd10393a2a705f3871f394"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a1ff1b0e7b5a68f6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Dar_es_Salaam",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f501f3d18b95328c7ff228042a1422ac84abb224"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aad4c1a1310c322ca068f02d0ac4fbe1541ff1e8555963d9c40cfb5298515941"
+          }
+        ]
+      },
+      {
+        "bom-ref": "367cfb08f0914fd0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Djibouti",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce9aebbdf9928cc32967e0ca54a3411007334d12"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bee0c61fe4c69adddda2e7e56539ba495734c4f9e517833c1e3b5763f53712e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d3b220538455bbc7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Douala",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ebeeab1959b17cd2384392f1d7c1f7c6bb0d9559"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2e738c3dee7261034d769a4127266914ef110eb37c09a588daa93c46324df838"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dadb7ce0de90b0ec",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/El_Aaiun",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c4eb8b6b9b4d962e0c3f4cd408d9452128158368"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8e7634d74b2f98a99b5e2c97b24ee0f5d4e48df2220beb4bb38fb68a2b93cb8d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8f30c8236383d55",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Freetown",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac1aa43cfe0422e893a6ca69e916d75408407653"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "18acc7f5c2a1ae73bc352d8db0cb29908b10bca010738c78229a77484e6f583e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78497b4bae98842a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Gaborone",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15523fce89986ea4ea382ce66eb4870c49d19cc4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a1328397fb3c42c1b61ff98cd8f3699bf100dc7d0361e1b2455d0dce37d9144"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ec5cceff3475fc61",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Harare",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f33d087477d6d229a2eed7ef5ac3ebcbb535984e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67521bc3d59040eaaacdac46cffd947acf6b12d58c706230a52e4b35d4df89a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "33228a7681e090d6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Johannesburg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "464ff72e4a583e592745cec1ceb4327f5f160244"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "170db51e1f05eea6e9a14a085884136f4aa78e000b1aa8605806e09ac2cf94be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "88ea1de6beebda6f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Juba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15653f1b6792fcce5546542406c254e72d95bcb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9ed0073fe89423937cd7847b315c793813c7a0a729fd067559d7a12993630256"
+          }
+        ]
+      },
+      {
+        "bom-ref": "28e764b50b18d0d5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Kampala",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1792009dfc5d07debd794a56a381695fe7098d93"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "046fe2d451adea1ee7e452a9f18754fa82f1cdfd1536f8d440fc155a7fad4203"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0cd540c00f8dad09",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Khartoum",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a90646304297255cdec671d8cfb84af6abe2bdc5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5fb7ac496978d461f873e95044333153dc47e4d4172505122f850f1b45c7f33f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0bdbb09857dd31a7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Kigali",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "31dea4da50a3651634b34b3def9673981cd016d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "78dcfb2f45afbf26a63800b3cc11c81eaba3de311390e7b5c7220b0b34a7dfdb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6391f90e46ac4efc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Kinshasa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b1b69d9f2488f8715a58b05a62236205ab0ea7b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cc0a5670f8148ac8315ce8b33f18ddea985d6fefff3423dea09687358613bb97"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8329ebc92b54f681",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Lagos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "82cebd14ddd353a0f32d37abc5a367831403df8a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4dd77f825f7133e6125b66c9354c7a4158a45bdcd68b9a8a33a8bc8951770d5b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f30aa999746860de",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Libreville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "09f64cf4637b9ced81300c241da307d98d9e6155"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "666b48c9f1bf6b4e6f623e623264b506b0ff379c50eadcf33fb47b6b14dfcf3e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1fe032995ef33744",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Lome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6887f5da64c2367bfeac6172fd4aa8160388b4dc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0edc54a84d8034c170f6a4e61d4737a7ace34ed743902557efff4291adb88f15"
+          }
+        ]
+      },
+      {
+        "bom-ref": "49896f13784be1af",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Luanda",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0c74fdbb7eccc93928aa221c64b1d32ff844d68f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "08ab03961ff6e4a207b98b4b8f7923d52bf12c982deb737d2907ef756f0471be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1e3f06e945493c2a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Lubumbashi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ede995631fd1f49a3b29e96723a3456eefa30cde"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6cdf4877fca59f4a0c0a06d43da9c4e10815c31e3d4111d254c582440f1b3842"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eada9b7d5bec5058",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Lusaka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7242f8a901174f8bb087780dc4b524e9928ecbff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "97b8cbc27c78466e1d3239ae267a67b1fd3daa2ce80ef4318996fe54f0b127ef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe7589ebe5e8399f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Malabo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21ed94683ec74d72a2c9c645653d6b3f46c2b8c9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "868819a8d4161e09ab1b8e8386e23f1c978378ae21ee2c1e9770184b0c19886f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "16959d1c19b5cb02",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Maputo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e913cf5a23c351d96c949f951b6707c59124f19"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "104f9c0d29896e42a1eede8db7c24ecfd252fbf2edccb86b707526281f52bb8c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "89a58f44183cbf77",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Maseru",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "13f6937d6e13c57af763d51dc053104e6e059c53"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d62b960bca99c47068f12dff2dc88209f3a6f885a53458cc5935cee45121084"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b2ec9cf8d062e99",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Mbabane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "986db46fc03e5e6ca1e743da0d28a7afc5833d39"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c16439331a5cf5300505303eb605362dbe54e4827bb986226fe896464001a432"
+          }
+        ]
+      },
+      {
+        "bom-ref": "756a7aa5f7d291b7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Mogadishu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "39d2a78874cf820ad4fa2f2828bf3c6963f7c33e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3b11f333c0681fbb09e54f3d878d8c222730ee39953f6cbf512bd7bbaf71559"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b33316779aca13b8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Monrovia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25ca500a76fb043cd2677911cbc8ada47a9a270d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7f08d659647669a66b01775a4a05c0a105d54593f1077aecee1df6f76cca3ad4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4dc9d66e2e06bc2b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Nairobi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3b9351b4692d33218fa9ac6f9e6f8cdd71e159f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3aa7d8468964feede0a79c2295b2545cd666714f7f8f173a7df597a58c6703e7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "558e3405fdd88aec",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Ndjamena",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f51f1935d7aefb47b5fb3017e17f68414d7d5eca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "768c12a3f11682eeb1f6cd0ba9282196a35e1786d37e107645819eb7dc0cce9d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "70016032d6cab763",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Niamey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "534912d0e7a81ae2941ce4befdde74dfc5a522a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f7736285467b2b68e8a71e8b4981d1e04a2db5445448e8be36ae15bb7b953577"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed18210031351a0b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Nouakchott",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c3c351e8c0c9d03e78b5385e6d40dbbafbbfa5f6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e975ad3ab451829624b13d4186e9943c54e933f60f4ad9105ced00d2c93ffb42"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d6a44a3eb8b8cf86",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Ouagadougou",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14a0e4df9c5b1c85aae3f4bf0a7ca62e011b2349"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "45db327564613a8236fe26ad27bbcc7367c57988def1570b126d276cd14b5ad3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c347b391d05ceaea",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Porto-Novo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d264883a6d3423f56a78cf59b0f66ef46ea5e769"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "17e1c231aececc8efd591e5253f0bc1a4c3e21bff1c2bd656f68c2b9069b457f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0dc3a5725c2410bc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Sao_Tome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ba7bb9a67110a431e39ada050e4c2c0fd7deca2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d276a52c133e1fd3d6d37d15265a883e65155050f4bc4b5d92f38a6fb46c937c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d409a7003aa3238b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Tripoli",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41ccc2a1721705dbaa48fc1aebd56a0ee4b7bdd0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b7a209b9c51b16703eae332b7145f7d45b9a4b0f5a0fae3bf129616a2cae375"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cf53d669e68d868c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Tunis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "818a62a445da18482141f6375974b1d61982e619"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a892830b9eb033baddf9279b3348286ff9c9b05ff761f3fd28bad037e6496f5d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db850d47b04e037e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Africa/Windhoek",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9cd7fb2cbf9cc7069c0f43c80c12a00ecc443349"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b229e77f5f935574748331a836931531c856f51a6c39cf59092b9abde0976dbe"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a9776dc6ef4666aa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Adak",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8910beeaa86bdf6ccfb70ac9dbb96ed53a314ec6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0a34da27e56939efe9de64c2cc247cdcfeba2b8b9e50c7874a37f2686fdefd3f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1cf097ee5ba0a64",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Anchorage",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "efebf01f223b786b4aaf83e6339211fc44d6d182"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "15dfc71e1a15500bee1deec7ca1d9b6d48f90303369e6554a7654c698631930f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3060b014db86f751",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Anguilla",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f0ce0381f7819c2037a985c6c20c7b8852a11cf1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "368c0a5c9e92a833d976d9c4f526ced4975a172d583c2b47693b02731e823be4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e1b3d1881f2167a2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Antigua",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "42496976b1421bda04e3952a3580667be7cc6533"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c60332a66770858904fc6aec5a19e124595ec03c001ab8ead41352df53ab4ea5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb9791f3dee7b945",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Araguaina",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bf0ba4b1583dc498e2366f7e6d6b6ce3134c974f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f64e9c23a80b7243ecfb2ccda042c122b8938d218758e1d13d638c8bfb0fcef0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9598b631afadbe7a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Buenos_Aires",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3902af7842f9b7a2b752801f50bc6e7d019b309f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5bbe114444683c1394aedfcdcb50651bf142b1641bfb4eda8eaccf6b00c577bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6adfc692c08fa3d8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Catamarca",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "94cfe18f3802f2b4db15e5a0092b924d40f11e13"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9485357c05421b291776e56fcceece8cfe48dd334d2698108e8d4a836c3532e0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4ca6779e3ca5e42a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Cordoba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8adef1be479d4d1ef253a092e7eab4854f0d3d4a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "18907fe2cfc55bbf51f21958bdcdbc809ee8c2f5c68e59a8d712c2279150c8ee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc6f1a09a7d1ee2e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Jujuy",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c136dc30cf77b8a97153ffbcc71fbc9564e9285c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "18344222894ae5988d301ab87150cf36d1782e05ea4749d77e94f711e5a3687c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d5691a2adb9bb18b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/La_Rioja",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d7b8e0a0c760b331ce5ba4f7dea8355e18f8a8c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bc55341f54cda1455748ccf3f0996fb7c9c0c65805e1d838c9f0f96677b3b166"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ec911614c5418ef8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Mendoza",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "24af0e95e5ea5f4c1011fbd0150823db541262a1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "09728754c717a119dd518bb15c5ddfe6703b2ea075539c940d3cd1fa01b6d59b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a251c64445281e84",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Rio_Gallegos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7674aa3fbe22be937149cee1674e75a76e86245"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "28c7d6070a16cca26e8fc8e19bb4a4fc619da0a95b67da58266f74cf48fad075"
+          }
+        ]
+      },
+      {
+        "bom-ref": "85c612c3f87fdfbd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Salta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "018ea5c878867c3f0e7642c8c7a4ea5ee7d53bab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fd63998194309a2ef277b355b78343110bb353fecdfdbcb962eaa7ec24b0626"
+          }
+        ]
+      },
+      {
+        "bom-ref": "483cc20e03233596",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/San_Juan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "34a1efb1cb54a7de5bd133900922a23dae031fbf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cbc5ad702a832d9c2606128988d08c960d2859305231c2d64dc534008a1a2b27"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3d6e73570259a306",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/San_Luis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b9c320b677ec6f3e22e1279fa60a1800e8a36ca4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9debc2f03d41847c27507e63cdb05dd521720d381fd3c72affde649d142545e5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ca14e37658b0e1db",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Tucuman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d18e7cf00892a3c15c0dfb5a8cf04031291f5100"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0c64cddbfaebd13aa6e0e769b394be2938e67a977694fbe67137e0dfb7df6f76"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6835ba4a7b003475",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Argentina/Ushuaia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eab37df98c3eb5f46ca8a17cc72c49c88379215a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "91e4d4c3c0931ddeecc8b4da02020a14d7d8cd11ebd4915b024770283b270414"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9d969f3de3f9142",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Aruba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e861fb0fc4d58a6a6d5daff742c31e5e7a365281"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "81fab610ca62b324c53eaacc06a9f0707bbf3b6edf57999f45e64a81573b05c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cdb8ce00dade553a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Asuncion",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4aa27ff28d3791ad62e1cb7009a3564ceb1022d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8964200355d58e4172e42a43c727eb3a65a3e45fd8aab968e1e401b324e61f3f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c4ab713acb1b1454",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Atikokan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "60221e6658d20a2b1a3ef214853efcf414ed5311"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2b4b85c66e21b3db8603c853da12bc793657b61db36137bd6416731ca766d83e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fd1120f7b249fa53",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Bahia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ec206f6bcd484dddd374887852dc43ee35b203c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d49cf8b300965e1479c8fdfa847075c11468c19dcc4a8c43d6c213172d9548cc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3e11db4839c6d292",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Bahia_Banderas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d1c7cea1db8cf709e98c5db47220eb61afe4b32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "afb472d810345ff237accbe2faa037999b99ac41596218899e9e3c74dd595f77"
+          }
+        ]
+      },
+      {
+        "bom-ref": "501b8695c98670e3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Barbados",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb74b1308ab826e0d627d5df8e9b9d9c63c551e4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "54ec52f42d10af87788633750887026b0d07e67784f47a886d7919e9876f1b95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3be046eeddb024e7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Belem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a59cb528914d84e3a981e32348835dc15587ec03"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2b44adfa0fdce7b822eef06a0ad9c293899d4e8facbad621467107375fc4414d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6ea60ce4aefe251",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Belize",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d858aae95195f1efb535c4e2946e00f5fee97af0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b2af883061a226e991631b038fa337151e71ed40b8c583c0367dcbb100b418e3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "72b8bb4a50fc37c2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Blanc-Sablon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1e3867c4c2c4a9b17de95aba466736312f217ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c383f3939513aa3351fad54b0c4a609288a5828fb0bdf2423224eeac2520f41"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fde52be0fdb2cf56",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Boa_Vista",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3e5290b720fcd759683c6e2fb3517713f47be2b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2f7609f16195a9fbf86631a4fba7d67c12aebf8f6bec3945cfdfe177ef756c92"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6622ea7728801338",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Bogota",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c0568a0e9db563d2d03535b5f819103f2dccb473"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b53812f2fa251abb476d01dcdc58074061286ed9a4604e808ff704e84db9431"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8fd637ee4365b33c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Boise",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1b857038d4145e17cd4156524ee9026859734933"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d9d14321a0868ed1a754f46ec46fcfb216d6dd38fff1757d9a81a70663f01894"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b783f3b78886658b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Cambridge_Bay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7d61e33cfa757aca51fe90096083d41d875dd977"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4dd3933664bb1bc989be1edd1b655f9644e48b0f9b966e652b5e0826c906ce38"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4ed8a5b696f043a8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Campo_Grande",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c41a48ca167f2c5055c62c5e8bf209527d20fe57"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb0e381f18f370109affbe036d0a1ff1d8d007fa4253d1dc789f0fed58427b1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0571a3a82c2dfe19",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Cancun",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d99e6bb5ca0041238ec4835e86729b11d67e05cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fcf548470161dfa824bd1856f2f3430f3f42da7e4731d83d5d85162c4781bbd0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "767662ef22dafedf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Caracas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fcded834c3cd1844518be363d3b24d16c34ceb37"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e7485fc23a6187ea5dccbf1f8ab2b75d59bbbc9127c93f7b16c4d17d46d1694b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aa16bb26ff4c54c5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Cayenne",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "64f90da9217724e88d0b6fd60c05b091373895ad"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c339795c2891f95dd87513a052682761b076c3e37b5f1afeae4f428366d74aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d87bcbe170dbeb8a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Cayman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "184e4a0998c66f0da8f80d0058f6fa1b5901cc41"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "807ed1757df282b4da1f10c02ad7637f6f337574a34e306f8b89fe0998f107d2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "72efc347a306c770",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Chicago",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9400083ba972c74ab159ad7cc0ef4b70649bdd63"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11a2746cca461012a7b56741cf111c459fed3e89309d9c627556921c4f0216f1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "86636618eedd6f5d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Chihuahua",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f74787dd61ece5f95fe9c5e05b5dc81c93805308"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fdfc581d0dc261755aaadfe48b557b631b2a3c9817267eb15b2452432a66690"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f0d58a38080f0481",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Ciudad_Juarez",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "741ca259e6ce69bedb8f87ed61b758ed27b32b1f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "907d4d6590917570f8140e2815be1919623a91d8f34f9e236972ecb30124c001"
+          }
+        ]
+      },
+      {
+        "bom-ref": "420b06088a2a59db",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Costa_Rica",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "019936bb38cfd6252397a0b33755090819f77822"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "931a8cbc44a17c76d8ac879eb70bc36fe3836e56334b167fc30375ed60226f4b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0b29321e02b1ec5b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Coyhaique",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "af0aaf4a975df5fb5ef363d20360d5ec48f2de09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "01f89105f2c8912dc8ed4e5cc9f053e2faecc77c549339aac0ec570f0b5e2ec8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d32b475a4eaffe70",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Creston",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "38b0c0d59daae3d490e41888cb08f985e94ab7b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03520c54683d64fb81f014256f53597770a6b8f768224225445dfa48a0626719"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fba6623bb492d616",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Cuiaba",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dc418a83b00940d3477ebbe11ff2f8f08db0b9bf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b86529e12ed8837f4097efa53324ecdef81bf9d5d8cf377c766c9eaa878911b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "61e3b55a8b572a58",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Curacao",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a4923cc31db72f2ce84c7ec5e2753270d15b04b9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8553f2f10d0be77fa0da5a541780b6b0b694303a30291436eb6591bfeb9a739"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b16763faa8e0a1a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Danmarkshavn",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "410aa8311f71add65c7335dd2682cc48ccd9b350"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b0f544bc8ba665b6161ff97e73576e93e67c68e749f3e0e7570c6328a0d01423"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cf0a5f7609016882",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Dawson",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "986ac03517f3a3f480e3d823b7325f0819d8107c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b725095ec5a156d826fbd33eabcd5e586b6704e0f8f3c9eb008239155bc59203"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d14174f5c6029db0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Dawson_Creek",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d237b7b3d1fb583ca33690558984302bcd4bb5c1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0050974703fe2be1b07d298ce6353e955e9839e04bc06969a577df0e7fb17e73"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a88e642e53b045f6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Denver",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3aa537a85902ecefbf7efb76942bd1f647c625e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ae1bf405e5ac44760cb20eecb074550da61af3508c01cdf0421abc6e685e754c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "068c3d10c5b83d88",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Detroit",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d174885854b477f4f97a9364a6d34d73b2d96741"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1457c435a8325a433ae71ecdf100a4e7e8b165f9864ec91ea82f8a80336268ed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b0d6bd959fb1b8c2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Dominica",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7482d5af10a51a583af328a730023354e152334d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "680418e51d25bccb5e7892bc7a9017a07dc5c69c16e4def8cd4c9e407d5f5929"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c5843ede2159d273",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Edmonton",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "69f491986f6238e8e37d440d8a36d874ff10bdcb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "adc4cc0ce4f91bb9675069ccb61a5c31aedfad408c5abbbcbb95d41abcb3dfe3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a79a5c11873f56cc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Eirunepe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e85a44761a943f1a8782c5257c77deb88972cb1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "43940082bff063eb3343a4368fcb73c266279738edba5e3b18503b688a4ab53e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cf5722b654976b45",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/El_Salvador",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d31e5214efccb6f35ea9ff78bd150be6f5b4bd4e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4ab2bcd279d423184ce855bf07241bb92bdf39c22358f8bbaf084930b742e3fd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f3736b33a109e107",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Fort_Nelson",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "86a807371a0f1262b6f75f4da944608c28a54256"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "662281f1f0efb834e0a462e41c06776db0b892eef2e99c686e87810bfac58bd0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9b8ffccf032fb9b8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Fortaleza",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d7009907bbdeebe7eace12ae213e1d298584f9e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "618768a21c7bf63c6b939c6ae99f5a5c30403420cc35da27d3f83e224dc4ae56"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1fefd98d60773a7f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Glace_Bay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a6b0eba98da18bbe8a07b74153501b6f083f8b9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a1ade3234f10ce3166f747c4ab5ab1a3e37b224349375add816a6eb203468f0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2858148ee1b8a6b5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Goose_Bay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0eebbf4fd60ff53627e25915c02938e4b970202d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e8f36386ce530142d371cb1b7df3d187c0a83fc9cbff721c639fadca67e8be66"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8c8487f4701d3495",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Grand_Turk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "37fa3ae1c0254e8441b8eea5055bee3da511ebf1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "162410282fd2b49528f3d268ff17b5ca7f3b8c905eeb53c762b7d11ffa4bf7f9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "17f2e12b9b4f63e7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Grenada",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7e92e4de6e5cb426f594fe4bf2f61a99483b5dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "27549fa73a6850bf132fa688ad2b0ad30a1280b5f2a7bf79deb51651521e5304"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c7decadd940b8f8f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Guadeloupe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6053a13340836b56cb9a377f551a2ea5389b3eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c7112d59679426df8ee142a1d3d0409788597482f0b91515b235fe717e9ee77c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1112ccfed49a49ef",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Guatemala",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d776536a67abe6dfc249fe095f6c1e746b526576"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3703ac250321367a153a18801238457db970ff1e93c945bc76207027a8608c6d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc54d160982144c8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Guayaquil",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9f4572ac17541b57609cc8efcd26ec675c2fbe6b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ad7d9895775f457bf049e1a89ec931624fe1df1aaa276ebe328fca325d9c647a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2a437ce32a6f90ad",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Guyana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d09fa759600b8d3e9a609d2c74a58f606129f0ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2ead96b0a5816ab4deb0eaf68a375ebdd41112f97cee0cdcc9d393fbcf3bb14c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "713b66bcf4d86872",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Halifax",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d807cdfc092bd6cd1df8bdbb7f048b2c71d0498b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2843d77177b88426ef03a9de7edb2e25b4325a5cf6cbe38cbb2926b65990b129"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5beb826d4bfb21ee",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Havana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f4ff4cd4c41336c8ed0094442fe575c332f124bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "00f0718cdeeb8642ecaa3e16aee6dcdb79c1470245c7f26a8ecef54b267e5768"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bd9245559c67c4c2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Hermosillo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0827b9d73f22919fc19e2cc0d8c0f2e37a6b30d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8e5a98af8aa520119206953a69ba37f3c0ce10f8b96c197e03f2eba77c9c4e09"
+          }
+        ]
+      },
+      {
+        "bom-ref": "681ed53c3d578389",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Indianapolis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "181a083fcd95bf76c72f040a65e09416b8759c47"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f74db87853fc76f9992799c250fc6efe23f0f39d847b4ac91e552eed93fc29d0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a2d0a1745fef0a3a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Knox",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e4166ffa1476f9ee0854c95051c2b81404315b5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "157d43631493fb1d4b67d280107e6bff72ef6c910bc72eecb227bd96c1f6b09d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6de40c0ba6a3f8c6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Marengo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c4057f40601201d6c2aeef6070d68ca456c4ae21"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2f08bdc2cf2e19cc208b89e6dd550554817b681399fb652c803b6a782dd034c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a6c2e95777036470",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Petersburg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a031bcb18c251bf45c55b90ae41267a8e7fab82"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e0aeaf68ed8693116636454d1199957d6da2ce1e90c63b8eead3b5d0c4cca974"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bbb69173d3a72faa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Tell_City",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8793c2489fab2f22cdde61d8f2afc05f5c83de98"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "07612d49fedd90f8261691c21e9b62bdf457a7fb03e19ca81ca92b3d8106a5b3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "38b27754505b6191",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Vevay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "da9db35be6895d492691d9e77fc1410953c5e04c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1d87d68a3711fc82741703ae5409d1c12a0e2b69ad97c535e9687c611ed2ab48"
+          }
+        ]
+      },
+      {
+        "bom-ref": "08838d3431a9bc1a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Vincennes",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "75e668e14fbd955443d495995aa0447448f78f56"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9527640643c5d3164469a2a94e7da5b03464a23451853ef089dba55a65755617"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a87ccfac4da0aa7b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Indiana/Winamac",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5a4b59583938e7722aeb1643896a807181eefd5d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4fe603a9457d07c2bfb0b321e3da4a53d3513d68a0f7e36dbd068618d8bf1829"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d28d5e7e965c6da2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Inuvik",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e85b69e7fa612b98a94ba5e17c8cd2c99e66204"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6b688e6c0de86d290b58f172d31404e1797d63ddfc76d9237550ac58a08cbfe3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "af4e67a6a9a35ac8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Iqaluit",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "18c07f4f3a7b6b1dd1fa59169161216c4074a5c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "45b43ff629a21565bed409c89d773cc5a2e73d13120a166b7cdb8684143cd08e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11fa74ee93d1d6e4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Jamaica",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8fe3840dd6ea5b5ced195059292756ec79380673"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aea66118420ba88ab3a4591579801293f5ff32d7af56c82e48ba1e11f99ddb0e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "480d8a1c94a3e5d7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Juneau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e11826c2b6fc9f374740825bc68c3cbc9f243d78"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47c6d0e98e62dcbe3bb54111a5de6924cdc997eb712e0f8db4c378ed13d8e73e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4dcbec64466018a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Kentucky/Louisville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1651128c3ccccb1fa24aa21bb2c69a200d22ee81"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7cdb111f5b730a0418b6fbcc216122ff14ae0736e532b3e542f8219d885fc930"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a19928cc7dcd1075",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Kentucky/Monticello",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "154b9851d4d0367d6117b60c465a9995d48be332"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7648d3bdb013399e2cb3e158098fee51039901e2493d4747b44de043e1e1d751"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4dfb809548489a07",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/La_Paz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a02dc5a0724497911cc71c79cfe7d44502ae27a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "882bab088caa59570d910c1accb3b6574a80830e2933751d249b83c215c17ddc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "23508c7dd4a4526f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Lima",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b4a091da1b3606db773b07dc24fba3fa0bcdd6ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fd0a7bdd8c494de8656227a6a5a3b2719a24df06d27c1679a0c18637eb70018"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8c0c110180d6cb26",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Los_Angeles",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cc9bc90b3c840a822054c69bdaca6278c76d4245"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "88b375a8fda2c05bec7ee1066246b4080efeb61bfb541e6dc6ea794abdf0d835"
+          }
+        ]
+      },
+      {
+        "bom-ref": "900e9573fd39705e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Maceio",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "149803d8b3017aedb79c5fc1ab1c46a7137aaffa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a9f2f8e7063ca3a470325bd254f408a065d327f726f6111d80cf052ed45ef96"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5fa77e9c8375c472",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Managua",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83bfea3e35a57efdbc76101816ac9161c0ce7f23"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f852b1439fb0938a21997c1cfa5acfee03a3e3d1b1041b5cf2ce09c7f47d0d0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "50f62577cc562fff",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Manaus",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "044a912a3a67f3e0ab6129cec10a343ee3291b0d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d0f91a55a7bf0911877cb0ef4c77bc0b3c8c9802ce1a44bbcb2e97729c0c6ea5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "18676aff3b212788",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Martinique",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6da64a96cf7d04251286cd7a90980bde5718e3cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a2be7f415ce96183c6153ff1d39d5480ff77ae1c5c54f72f7777c1092461c589"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ba2cdd8554eecf69",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Matamoros",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb0be4e0d8a2c214bb5a37d2b75d4eef11fdb6f9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "52fb8ab036cefc6d9fb5cf8f9978bb67a2e347825aa41dec3bce452f5ca468d8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e588c62bcebdc7b3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Mazatlan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d3b8c103b951c1f99f1588f284bd090932f498ec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2c3e0a4f5f41ee58da0df484637fc836ec3713eda1b3dd7a38822a959f748054"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0357761ededce98c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Menominee",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9f804f12e0175367bb65b783b2ebef0e643bab3e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bc4c0725e2d9cf2ae58a1b74b17d8b0a114cc845a8e8b2f21fb2f7385026ee7c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7bdc8421b7a61f40",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Merida",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1981017c0b34dff86b56b87c2621636fb640b770"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1962a72a5f985bb50bad1dfc033672bb8660e9525ea16d1768097d8766772cb1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f550cbe11d31b452",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Metlakatla",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1bf31cf20fb26f507eeb25f005fff2ae816be565"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "22e883e942b95542955eac4abbe9a2be97b8721bc4150f5891efbef621cd809a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9135f5f7cde33808",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Mexico_City",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "970e650bcc48448d366c2ade5f798328c97016d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ad5148af7f7031cc1338404c5aef93a9715758eed6da522921f9aaf9b40746e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e0f690d64f6114a9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Miquelon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c52e05631f1a30f0a16a25b82711c8c4884d5484"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cf2b989598fd40ed7d4f7f50db3c03b5b9f1d7234340a83ec2d0d026d23086bf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4497fddabc731098",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Moncton",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0545329f761aca77d3cc70df836615dd3928c2fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c953c923b365b588fdca74f847b41b74671724342dc088f1c958444aacbb42f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "84be122e0176725d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Monterrey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ac43dc0bbfe9499c024ba4d3dc39c409de09805"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a211366232edc661ead4951cc4a9d24b7d085f8f3be9ea413a6887caea98de56"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3db6806cdfb1fe9b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Montevideo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6358c9cf88325792087d81b945bd65e34603419f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "70313553e1c4323da5b11e3256fb56394e57696c23c45fe5c7a563c5816943ee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d9796ae8493f38e7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Montserrat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "da8142cab8f0947a9305dcf6798d1365476ceed6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6e6a9865546569e7ebd3397ff3af758150f07ab9b0b275ebd33336abd2599b07"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4cdfd3d1cc966311",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Nassau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a6d3c606e57836e8bafeaa72ef84e0cc4650a41"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a8c274a83bd81c79e349b2ecf2558b0652366dfc0a429d6dbad0b48e35a0f4b3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "84093cbc01643e6e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/New_York",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b10f0378289c2e0075d8dcb1ebfc4a82b5991e5f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7bb140f56dad3d2bb3a13a1de9fa49dbd99cda666eb71e78cb125da17e1dd672"
+          }
+        ]
+      },
+      {
+        "bom-ref": "adfae5a02f517ba1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Nome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9cafb3161416d442277566bb7029746a2a438cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a9c7d5f2b9455db243c8e6dd6e3b980bb01462e83f37465127133d2694e10564"
+          }
+        ]
+      },
+      {
+        "bom-ref": "72e5020a8206328f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Noronha",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "31c59526c7a671a1af76e2d559748b98937e8f31"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd75ae922e0038c3397eb5851e554804ab080d60441118c2d289fcc54ffb8a47"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d48b4e6579f87785",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/North_Dakota/Beulah",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cd7a64bfe2ceeb32e33e439b0dfb59f3c918ad30"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5906f934b6f25299847ed3c743da120b78ffa11d286e57e656b32113a93949bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9707529d8aa03084",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/North_Dakota/Center",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b1cd33eab085c450664b14abf3e3bd5f7b5da412"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c0ea48a5819ddf2890170b30bde1a9e44d413a380b4e32ff2f8758835425d50d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c3eca75f92133382",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/North_Dakota/New_Salem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e54faa7a2d7d813aa530451969c5bd7a2dc8889c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56fffef3a6c506850a3ed9a5c769c022cec471aa4c754c7c8edfdd4bc1e4eb9e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4013f2a701794ea6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Nuuk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8bbf40ae97ced4d9054675302127f310aa1d3459"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "955b7defca892dac0a3cb3f89f80a32203690761a23f87fc4136ad03208b945c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1aff8173b5e5543c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Ojinaga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1619fb5cd6645cd18eca6fe5e23bb89a53bb7e1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e750ea549ada4cef08bfaf723dbcddfb679d7e901f7f2640f45a5495e93ef598"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ea6e54819c88e0b9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Panama",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "971f2edd08bb26883049c0ef22fc0e0409f82dfd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9cc0b99b474b6e7ac5d34f9a72fb686c77dc3e89c94d5c7541bc4e2bf33eca80"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7cce99cd9442fea3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Paramaribo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0d190fd23eb7ecd07ad83fde4980fe7b50d38fd1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "426ed930b0429fafaabc39ced0e9535fe074302ed84dba95c2e677e91e167ec0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "34ac28129f72d2c7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Phoenix",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "952da99fe3cf915cbfb4aa17a3b22ddc102e428c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "375e12ff9f754d07a23e02bf0c4fd9453cd94d6af6eb934fcc280c79f427e5c5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d744f3cd4d368521",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Port-au-Prince",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0778361356bc120031800cedb83d6906616ae24f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a814da25b75a3572c7701d955fd76a0f67bc16da072801139e73842c0c03356"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5cd55311fa053d3c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Port_of_Spain",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4dea40ea01e20bd9083921420eb2a006b9d7afee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7df0b5f3233c2206c7c1188ed052eaf4e3685601cef77144e9c94b14398f0db0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f19dc023b2f76503",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Porto_Velho",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5544cfa1b7de777c31d6bfd5848ae57dd4b1e32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fc1d3f1df5aef6e1d4ede4080d4d18a4b079d0219316fe41db1e0029505f6fa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "62cce52a99286bf9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Puerto_Rico",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "27461f17d3e597da36f493a4c0539a62f12a81c9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "380d72f2d6623dac48cff2dfb46eec2e48b68053c708dca04168321b6453d185"
+          }
+        ]
+      },
+      {
+        "bom-ref": "161e70985e891e30",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Punta_Arenas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "20c2cfef0e1b2c5803ca2323a0d5eccb1ad7b88c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "617d4c58044df24ca525b3914b696ec8b4db1f594ba51175e2c944a2af11364f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "97674685ccdb988e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Rankin_Inlet",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "315011e29ffc804ef686acb2c6603fa94c02cbb5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6ec3e8925cdb45a507f020f249863403eba7eef540a05f1e23954ce670db362"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fdc08fbfab8b06c2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Recife",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "08d94fb502b67c0e8ab6a8aeeadc77b77afddb24"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "06a0fa35afed92c7fc936068d353ac373768c92fd2564f948d780ce72f0abd5c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "20327c790e18c693",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Regina",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e0e3efc7b09efea9735aa89bc8258726ab7a788e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8e8a5a66a6f3b3ec3bf25b260bdb1157847968f1c439badf5a1aee787ec31cee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "976f6f2c2d5e221b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Resolute",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8f5d7aa72ae7799bcc17270e2f1bf560fe699eac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "396ffcf87a0116bbc2dfe94dff429c9fe3d70f9f59d220dd830da3e34c0b41de"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cba96fc85f7189a2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Rio_Branco",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e498cd3a60b35e120e6e6b0da973a55f2b8d3a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fe360ae6ad78f5b2a3d80bb008c513040d163cb2b3336158dfc0ce1e8c27423f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b5d941dc4385e0c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Santarem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d3cddb07a107657fc0183c3d8befe2b788b67726"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9293a36c17726e9bdc2574d3e723aadae552449dbb2ca8573ec627bb51dc8d61"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e5ebdac560a0fc6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Santiago",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b983e764364753517257cc1b76d2f08cdc4450c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a4974f4a367f58e0d884cc9f0f566b8f738009ca968505570688aae998ef0dba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9749955eea27a98",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Santo_Domingo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5723279a84ae50178640af6ef9b5ce30c25ba4e0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d758ab3698792929bad03f0821f99299d0e14bae01e7d0480386d5ffad872ffe"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dd9de88b2c5b882a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Sao_Paulo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "952af42b102daee41ae5099ae2cebf4fc0837e99"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d48650f928ef29c118c0e21157954a8c1a22606c9541bc215888d4b0caca78a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "80c7781c167ebec2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Scoresbysund",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "267a83aed51a6717303d8a2c7ccfb0f2b0cdaa69"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a807f3ad35a1228610f7d7aeba5a07d44961b613b75cdc8167344b89d6c78fe4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2ad06aacbc4bfcb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Sitka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f0dc3c80bb56788f0fdf35ce8c1312feb57829cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "73efa5b87eb61a6284ab99af60c20e9d06e6ead73801ade803daba73b2ea4e22"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b41ed99dd52ef15",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/St_Johns",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "275884d8816a77e945c3b6f6e8e0a5b8bbdb6d32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a381975f17f65a179d4e61e21f09a32f5b9814db51b33d0e2e73e663df443265"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9bb7231ce803d81d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/St_Kitts",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5856baa10731fb44796269697dcbfde25d85957"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "71bb4dad93ab7ad90508df2ecb6c9ab1c273960fc2b947de300c9d6c8d3749b9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7eef64c16e4c1fe4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/St_Lucia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0d4c92969af237b692dd1d73d2995cb4888424f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4064136f46589209f1535f3cb88299573773bf57a3bedcad05a957af8b38e5d3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e57a56df6fb5a217",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/St_Thomas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "37ef1c237d4a14bb07d09fd6bfc680d5f3382e95"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e3e2a965b20096611c055744cd6359d1a177a21207abef7db8bd0ded91c62fc5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7886a0e4f8aa5f7a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/St_Vincent",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "93e98e9a744cb72edf1e419db6960da378b19243"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4f11ec4a1fdd634e98224deb317b374d17886bb52dfc3b7eb861d149db22e35e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "86a4f478a24030d5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Swift_Current",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0161ffad3458365df35bba7bde79d38f4b04e265"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e8e4b669fba01c1259e91eee27d152728e035dc7a08a73dc43e6f48427f869a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e93faa8250e985df",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Tegucigalpa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "223bfa7d31c6f219fba27134f3a9120094a0aaab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "178fa99342cdffb7e3ea79b1a33dda21a66a896f5b935a12b6e43a88d83ff0ff"
+          }
+        ]
+      },
+      {
+        "bom-ref": "04b7d3e9d0cf2104",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Thule",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c81b86c260f81f7570f7abe2f22ea6ba0768094b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a856cf45b974a963656d7f728fe6ab77bf118218f2e2c6637757cff5d96fa59"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5742f23699010126",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Tijuana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2406a668a3cd6c2d21a6c3a869a425e334d88104"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55c7868cfc587e2137bcf4393bca48ea307f16d27df24023524ac5085a4fed9e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "72a26b696380244f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Toronto",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cb105f537aa7169841b62b3fe567097412619653"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6b3dafd06b43fc19718bee58b155c5bf5d22e383db2d32f0128fa4e3bed3f6c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f8d1f984afe40a5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Tortola",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3672c37184a00376ac1c8b45c10d270031009696"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e4aceee579ef0f890dbdc493715692708cc89064b02a2f7870d157dde288d58d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cb9df52f00c46628",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Vancouver",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "13c11520fcca3676dada7a0c6ef263d33b47d994"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "846c05716bc5f1e0f5e1c3498b52f7590c73c59dac7ce9f693792bd86561a61c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1abdfba4950c144f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Whitehorse",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aca4c35064ef2c65ae2c41b6fe1c00395d8784e0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5d8a4cb1bdbebe5ceaeec8452fde9dbf406b365388c52a998ef6a0734760ad32"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d7b900c6f9467a1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Winnipeg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "de35f532c42b28406896ed25ee1d9fb5c457b03c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f5b2158f105dc4499b31f156fa6a99e19198474ae32248a86e20a032adb14f87"
+          }
+        ]
+      },
+      {
+        "bom-ref": "29c4d3303f1658d0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/America/Yakutat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f2a66cddad71dae1a59efb38ce4b5ad1b684258a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4cee8d752bccefa30cc879205652a431d919a3b987af9d445a105921511bea25"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0c37c0407448c0b3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Casey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "43545f42dc79083bfdfbd73e846489a0976ce111"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "797a788098dba3912535039cd9a8ab75bb5ba0f6002921943394a2c5af40d3b0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3187301eacd736b1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Davis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7804d7984b1ebb9cd3a8be4ce4c28946678246d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c8f9fc9ee276cd3584450cab432e9d34d86bdab4a8c6e824d590038344e505d0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e3763b0aab489bbe",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/DumontDUrville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3f231bf301a7697b73aa6b512145273107fc9873"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b9aa45a5d6db37f094a546648d7d83a38195926f7c4614b5702e6c3f72e7995a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee4385cacab81f17",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Macquarie",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "11503db3dfa687dcea9a3d418f64f63c25f3fcd4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1dc462da964c4ad21010cd749d724bac32a9ec7e23c123c8d1f47efad08b2c53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1bfa0d4fc9d7a89c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Mawson",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f2d5b7bc019b7ec31bbd11ea5ef4e78af7687ec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8f551dff347653b6c7dce57189e7d0accb8647d4d6a169a9398899f8b17641ca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "47e88bcf6509ee59",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/McMurdo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c74c5e9b81585281a62e6b4ccd47134e0b5b6e9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fe85472e156ed4e1567e45028208b4063ac98815b7f22decb4eccdead9b0ac7a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db5d440331093049",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Palmer",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5b8e3316ef699baf3f829629430d94ef88e56b92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fe442401ef0ca402f79a17ed99131941149b25d1f6cfa44c2c796e36a9fcce8b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a890b52702293748",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Rothera",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "80a1497a3f5cd61895dcf82643bf9487b5050fae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0ad14109fa9842310abb4db35a384f1c0bcc4918a932047bff63f1b3bf8bb01a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b69e9aae5880cb5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Syowa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d11ec4383d7dc3332d30df015c6e2f902e2783ed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b45bde2274f7df889b833aa856d4a56f1499195b901a559c06c08eb60bf3dbec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d1c7647ca6ae247",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Troll",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "787f394fc1f3fcb1adec1f543278327708dd5139"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c599fde30452e67c10d51b6bdae110fdfa9b81a236b40b5015227310d97c5bfa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ecd8b39daa789bbf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Antarctica/Vostok",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "709c69de7040fea2113b3a113eccc4069c9d022b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d9c2f0ab04f26d02c004bef2837d417e180f6f3bf1753fe6eb72072d1c723bd6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e6fcafb1af9cf95b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Aden",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "47f38c92ee272f860cb12ea43a9d6eace2c9105f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9b817ea53ec1f6e78d380786ba03904d8e1c6ec3785b09e028764a7500cca3be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "684dd6fc0f5cdb81",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Almaty",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "71c28b9f2715e92fc1f62a799cd0d1a45d3c14ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8089a5ce3c13e0b0a2e57939568899f16c811d65ef87a1296c60817b72a0b232"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8965d2ba0463c464",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Amman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6993d911da3bc205397d31954878c6bd56c45bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "747cd2a9bd012fc2fc7709e9c59bd1b48cf90782e60904b4b0a4c9ae995a25ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f35c1d852ef0d257",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Anadyr",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c31f17240d14f4f14c2d9f18e9b26da6c0885478"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f266f6dc5c7493c903f3e4dfe2054ae9a280e5f9f7511af51a236d2a82f35c2a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c41bc9505b5593b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Aqtau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b02323177b2bd251d296427e9d18499c20b35661"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2f152e6a6c381b24dbea910084c5ecec2b8f0e2f151550abcaa718aaf7d1f36e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f1dbaa4ad6cd4f2f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Aqtobe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a1c77e61f95379bf128429d8e0e53e4ea021f0d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4870c19fb05da1aee071721cfe950081e5c1969e23590fa09100836006dac1ce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ba42b8a475f4095f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Ashgabat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ecbc6eb0cfa77f554289b52ff7ed5872578fe1ce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f7905cd4df9f93e39b535ccb674e83a5b469658f81c4827fb327186d98bf4c83"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5daf899fc311b765",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Atyrau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "57deb4bad1d807a14efd3b5b7f3bf6bf5ebf3aa6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5a43f15ec469d51ed03408117f5158ad47d26768ad7f210967db1556949ba1f4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d273cfa635d27ab3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Baghdad",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be64967c712156013593581cf5d18216f7532ab2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7708072f0ea05dc57e2b03860991413c6799605cba64b63d633bd1af6a15a041"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d67ac3dddcf6265e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Bahrain",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0d3b034eb9b78c7638f573914a54e02386fadc21"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b7a8e24aa41121096e347cd5714ca28954f4f164d28fd6220ba0773495adf63"
+          }
+        ]
+      },
+      {
+        "bom-ref": "671252644b915e2b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Baku",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cd335c3bd5cc6aca668d4c863148caf1f72b85ac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7f871bd0bf15cdf5e76fa9af31d721d68d2dd4a1a15e31a81551c8cb8087c380"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c94ec3b0e5e4560",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Bangkok",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b0b3753cf695a580a457c6435c6e31743ee9c506"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "db5ab1f7cdf863ac2698b3c41f29f6c3cd78be6455589a27f22dc5e890b38e6b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ebf2601e4961ecca",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Barnaul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2989f71959c938f1d1d3582823c20c1b506fa794"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "37aec54db5976e653a5ffc5be3e502c563edcdc16eda24b52e7affc215306c43"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d0a6e5e9e91736bd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Beirut",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8d25cdfda2adb69a42063e76423a5bceaae80340"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5eb5304e5507dcadc198706b27d8240cba8f5f282713cc85e5aadfbd406c71e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db5f89be23a3a771",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Bishkek",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5cba27b71297c963b5ecaa9550f7d0724ca6710"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b6c98b5dadcb037359843c893f6601eb6b3a7ac93d5b51aab3dee44e110aec54"
+          }
+        ]
+      },
+      {
+        "bom-ref": "af649a2111086907",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Brunei",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ededbd04efa954a4a74f42e8f6abfe38fc2106e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2755969203cf4d6274030ea743e8b7d0d95d34a778361abb33cf00ad4811571c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c32227c9495b82f2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Chita",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5f7478a07d351e0af17db75354b88e3a2f4919bc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f37ac9264a9797bc0f7809a4896afafc90a0001765fa593fb0beb03fa5fd537f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cfae356f341fb647",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Colombo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d246a905d11b603a3119a3206ce5987d153bfa66"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56547a72733e9aa9efbf0220988dd3cbc43367ed9219d69805ed826b900a8d97"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ac17bef02c0bb689",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Damascus",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf4033bc274e71d7659ba3a07aa342fd33a35113"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f05b953dae1a2df4a0bb48c8fd43d810eabd9608f97408bc13f65b210dfa6f37"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b59979bc6cd60c96",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Dhaka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "312d96da990478cbb11047198f94bc7798f483d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "727a72e3d34ec7d5140278a87e4451c7a178787e55e26b0fccf3849c611c4733"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3a52fde7217bc324",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Dili",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40a8f898ee2a350e7fbaf23276e1c56499673a69"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "65433595dbc4274528f39719a7ef6ab022e2a2004c0b01677c18675eae58325e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b516a8b07efa7006",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Dubai",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0126497e7d95c36cd0219a4b4eaff8ed360d0203"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "021471fd3e9592d041fba58278210017b210d0ba4e34991eae656d239a8b28fb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07c928a91cfecc8b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Dushanbe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2ebaa5f062527cc08a9e3c6c7f9d830e38070aa3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5df87ce400417a624bde88dd023d55230a6180a386048e38c71688d2b4a0c834"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6a0184c43b557a4a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Famagusta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "716d84be3ad2ba4c05fa95861535493349b4c1b5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bbefccfda0eef52f86b25c776e6d1c6b5fb9434a68f83fdb0e5a286da834a295"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4f9cede4331b2b60",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Gaza",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ae1024d2310fd91473bfc74c4adf1e292d38ae4c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74535d1c9f8bc7135adf3ed55b6edbff75fe79d0f867eae15b1e23070b6fc85c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6fa1bd298b5455ff",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Hebron",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e9eaedcbe7b22f625ab307c1e7534d1faaeed84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9c5c7f3814c5c57c7c8d7a02e0b1aa6e760b012500bcd38fdbe2be817001cf9e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f92584a1caeacbe6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Ho_Chi_Minh",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "87db1d3be0abfb7b094bd0cec6da67b8b471853d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8834fb47d285572c22bb0384848710b530079dab8915c8bf8a70cf110f321728"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6abb49d8c77aacec",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Hong_Kong",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aad6aeb87dac1563a5dda2eda515528ca8b171e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f045e01c0c80e157f240abd549d3ce8957972b9bb6c9f04f75f3d69f3afc36f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8eeaff82cd527947",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Hovd",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d16e68959d4e2f3b49625004c2f133681ddd4cf1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bdcbcb464df602e87a840d7fb4ca3fffbc33ffe0d662958b16920bc3f81f971f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a118ca6f7a7d1498",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Irkutsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5497ebe5a5d5971a3fc5a68471b554339783f73a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dd893ad3a5636f2503d1fbd21810fd3363548fa0b2617ed91ca6ad269860cc6c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5294ba148ff51d0d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Jakarta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2e3216c48e857769fa797df220c067c14e9f81c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1700ef66a03b82c6844e5ed7315f50a2a96127165cc2dfa959535c0a0c1c5f06"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d58d668d46c086c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Jayapura",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "24b268ecd5fb614e21a62562a3327da4b0add773"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f50c463a9260839b47573c021c6e2aa0a29a30ab47aa717b546ec3e5c8519fa7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01e64c33c42b9e3f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Jerusalem",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7377f8d68a871ec5437cbc0f065a5d307d1f9d1c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "350225f72e887f6f2d2ff4455a19e5a86e0ec099d8563ffbdab91478dc72e57b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0faa8a065a55683c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kabul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7bd580b5145f4337e452af040772022d86fd6815"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c16331aa3f5a7c44d58bb1e773ed3915b3587a582848265973dc6f0d61b664ba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4166537caaaaca01",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kamchatka",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9e8a023953cf3b5ef9b477ac4a1efead6af36ad6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "97ebd11ef87485a5484ac884ad3c9a305d158b307037fb5cf0b934a18ee2f5a1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "94ca5197e91f3e9e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Karachi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "acd1328e1c43a4e3aa378186257e84bb35987858"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0ab0a0c7739df847b67aa1aa1b6cf5879e373d84afa90df8250cfc0279ff9a2c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c077ee41b801df2a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kathmandu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9dd21ce83174f17e58765206af5f62615813d778"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c04a919306d960a119c08f407b345efa1db5f724d5446ae79c98e2a422d00e0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e8f5ae742f45bbe2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Khandyga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5c7edb21e7ff3ed6cb3e22559d18ff0936759ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc383b8bd52963bf15452cd2f06f68e426c46eb2b88f76c2170f8467ed0051b6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a72a09c3a2c36cde",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kolkata",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "65e67637bd1d504cf8c017708770cbb29fc88463"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "10cc9f7ac5e408608cca4643e4c93e70da11f40c0b21e21b72f05003f26f98c4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "621fc7f5c232f64f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Krasnoyarsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d42b670498f1db43732cb89188167df9b5379922"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "682d4062cb16d446e5a2fce69525611016b0855edc27a93e855387d648298d55"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d6d20b8ed47f538f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kuala_Lumpur",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc47f4a3eaab465bbfb7524d96b5d76ae27bf9df"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "142911b9a53e2781bef2b21fb842f4c61f3bd9df27f34ba466543f563b508642"
+          }
+        ]
+      },
+      {
+        "bom-ref": "deaea036591ad5cb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kuching",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "088e2e41b3793227d73289b9f2a1345de9021361"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "08afd71d5b43978934a955553fe3c219c20e88c392635425ff3b6db6ec57853d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d49c85e0ffdf2558",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Kuwait",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ea391bee5abfe058e6463f746f31892087c82479"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9556ff0d661a09bf3b5c857deb17d5c738db1020bd73934ce8f563486cafa9a2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4a39fdd987b3eb2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Macau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2fb1c3f465122e9eba90bfea0faae7ec4d9413d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c24a7fef867d62f0791f7b37c64ab8e00c3568a149daee0e1c50d096a923af4d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d3bd14d9ea8a1242",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Magadan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d34a18a8683b74299d058c11229b9b12f375981d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1970e1dc1b874f0c831a1366ba27762b5824ad691f47ae480bec8069317559a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc5c06d0f0622781",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Makassar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "284956a2ad761376bbcd9086b68a1cad5f399d73"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0c5322eec6b1ca98bfe3f4a3360661dc3d7b43f72676401314199a90d39e282d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "30557742e6f0882a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Manila",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "33e85c4cbcb91769ce07e01c3d1d750316fa25ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d0eb473771b7d08e1013710ddd2b12e45aa8b34ced0fad3a0b42a5701ed7508"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7285d1884625568d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Muscat",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "114d4670e2d4a8a47c64512a5634e58686eb82ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "70585f2eae2038eca4077b734f51582e7ddaf27ec9c35d17f728793e6562d465"
+          }
+        ]
+      },
+      {
+        "bom-ref": "14be4464ef960385",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Nicosia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6401bf352d85dfaf4a86c66268399154698aeaaf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "80f19eaf8e9e0cced62b8c86f58ce2033e9af90e897f258ab744961e8395de92"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bd3dc9763df8afbc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Novokuznetsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "110c356deee595fb9e76806f4a97363466f2b71d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fff3101b1d4e96191b619d9e980331bdec9021b865d29183d2cc4f10c73e7fad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "40c5ae99d283aa44",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Novosibirsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eefd7b315c42ceb946afa9ea6f211d2b4564f7f2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e04473f3d482ea9ba9916aea41b26b2202341b62c4c6cdb8f2fe4fcff4d34734"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a031e70fd80c8f10",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Omsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "53b80113be46b7f8c34064e3f4c8848cba918cdc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8cb6ecaac0bcd2559cc6250c8499ee38891ba7c55f0543fd9fa8ed1f65f57c2d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e8beb1355d2ae6eb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Oral",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "333925bcdcc2effe07366cef0a78e14e85cafa0e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a5ddcae8e80c9a393e72d09f48bd12bf90ba6a46c1cc6fa0933fefac4c2ac65f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c88f94f24590c4a9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Phnom_Penh",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df35bd86ad8c35639066646c6f476ad9fd29189b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bf590685089cda62d67cc1f25824b5e7cd2b5a86754e54fb66bc0aee8e878df1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9d360cdeeb76fbba",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Pontianak",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1343d6accfaba68d8296d31dcadfc63eb3c1e50c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d0c139143f6a8bef84ff6f069c31d1a6815861c0dec14918e9ee7bc7d727fc2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3a4405b1baccacce",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Pyongyang",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1eda379b1479259a3781e16ac82ff267f257c612"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "569f166f78dc24437e2ce67f7fa3672df8af74527b74c092ae6d214c43962c79"
+          }
+        ]
+      },
+      {
+        "bom-ref": "79c0f417ce72d347",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Qatar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79562bd3420b0cb8b6a94b191f0029537af2011b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c17044478042c99e8cb57d8286c65b6cfc9c5c69272229886c27ace17a22cb5c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "40c4452323111cfb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Qostanay",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a33ec2840a92228be16b4d0cefdd091634eddf1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6c2bc286b1e3a4f2ed07ac4f84a21f2b6d61117f3e9d992259721c039ebacff2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc0f07f135699f9c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Qyzylorda",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b3a2de4b7308f94c28133130d945bd7a61068b66"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "19007705e36a1f6d51e2527501e6abf3994ff2eca23ee3a62e273fef35c069f0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d0ac8b0cfd9d8a4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Riyadh",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d4966cf66fa909e46c770863851778f6f492e4f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "66db780a8dc100309138b1bf7834482d0210587178ef9b52b70686974ea5b348"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cee4ce90a1fee95f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Sakhalin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30eb51483f3682f8e5da84098587b486bb296083"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6bed3041a8faeed299a6a70ee61392dedbfe1b6be11a2cb92cb18e912d32b90a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4aeaaad9f865efbb",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Samarkand",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "70fe49c4f3d8ed269262941d144aef8c5203db1b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b5b60dd5a280b4d2e8aed65f8cf53c8289a1d14f2dcca45f3d948269c2e93d1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eb0281eb17c8cc86",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Seoul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25bcb4f3319374432abc1b562d840f9ee108d5c2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3b7d73ae2f17d29d083063996745062e47de1f3c2cd2e228f4bda7584d736317"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7028d5e70eb53519",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Shanghai",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d28c6b9c1de478461aa6e70801b8f7c58b62185b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f1b7b1f187bc86e2843779cdefc6b38df2ac977a28b930fdf98e3a7d69a36b1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2930b591de112d92",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Singapore",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b680ebc0fe16921d57ed6bce93c87f4e9f09c9d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7fbaff2860adb2356b02c311b4f27b2ef8bddc4c69643e37b3af561417a532e0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "14b9e6dc1cc5c884",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Srednekolymsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dcbc0f5d9fc70887e891a04fe31509acec2cab0b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2f3d3f13866fe5cf13ce3bfe86ff2f437fea0cf3a8e64f87e1e890f8b4e7e39d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0471d743e3de2f2f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Taipei",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fe467393f20d6bf96881e212bc49051624dbb77"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ac5d0257da8e472d7f55343e8bca0863ca7f3c10833aed8cbee8af6a04e77ba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f94e3d9508c517f4",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Tashkent",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0de9587897f05a0fa4ab21e4887b3281f867e3cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "09f62c2e37e824e2f0a75651bb94c556b000e6b09efb44d59be2e6315141d323"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0fd46c6d7ed7926a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Tbilisi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41e58937e2259c746152752db4e03a6b3a729537"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0fef30597eddef86e31be51e04c3c3d37bffe67c1d0c54a7db4c744c5a3d4a91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "683b08345785e17f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Tehran",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e1f59755945f0b8f28462b4d67ee906f59697b22"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ad72495c660729f0e33cf64d2e1aeea46989decac71d0a8922eff6d39591e649"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc4a16f594f47c50",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Thimphu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ffc270276aab42a4a3b6207073fb596e8b7e5371"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "794c223c90d5e126e143c118093a1bde4e89ceecfa0a3e78c06f50096338ceac"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3ca2c5c564a06925",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Tokyo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9432011bb4b60e4d92bda22c92f9aaad77a37779"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "58a1c13838423566caaea0400bee1da77ae1f4e5722a93581d64973f68c81210"
+          }
+        ]
+      },
+      {
+        "bom-ref": "210c5d792caac675",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Tomsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7424bedcdb3270499cd6e1dc7e6f898b579bc1c0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dc59ef865536e017c28afefa7c37bb8480eb2a67522a44ac4bef1df21e1414da"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5018d667640133ab",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Ulaanbaatar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5c11bdeba79e015210fa2764cb5d7b339989055"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d10c3b0ecf5f3631dcbb43509b650909bb619f53405923b600f91fb0965e6e6c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e3f808476b029f44",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Urumqi",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b880f2bd0dd6ed73274e29a2bba4084305db35f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dabef678ba11b958632dc97bb3e87bb2f0da15aeb1aaf4eaea892529f3c3d062"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ca53db1348e2e4ed",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Ust-Nera",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "91c20ea1632d65624de9e6264643441c70a6161e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8292be55ba54e886ea2d5ee9f1c8b1fe78a8c580f7d35812d41591c37a490f1e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6557bbdc7cae0eed",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Vientiane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cd3d71a15cc6459733c08220eaf7ed8f5b9a236a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a5113ea8f19c711e622ff2cf5e944bbae69c9dd40cdff3470fb27d8b6e4f7b15"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3663b2f4dc422e9c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Vladivostok",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15aec68e06dffff513e616d7d507a6449634c59a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d357f01229efb11e34542d760dc6434a27487beca0e32706e0bd73a08c15ee66"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e70445f453466492",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Yakutsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "739a3a160c6b69f4a23a75bb7632af88c686ac29"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7f732eb939f61c9b302c9f7960a03044540cb9a794eba95d1544aef52d919a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4cec48f7ddeacb82",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Yangon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5b74c112481ed5c1289b1803f585e52d06fdbd3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "125ffa42c4aec706806021994c1ecaf7999146666f40dd6f3653817acecb958a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ebfb330c4c25ae33",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Yekaterinburg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bbb7189f24ed3b48bfd933f3e133a76fb8c31881"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3640cfff23344d084a895b2b936d181a73b323c6b746e254d1d1dd1df1c4a471"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6284d4df11c0f89f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Asia/Yerevan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "801f9b96f7dbab8791f7f7113ea701fd860529a3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ace7e6e36d7bf12c4b5b4378dc56fd3b291663a2e4c5bb02afab5cf4b0dbbffc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4789b39ba1bb0cc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Azores",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9b7568ddf82702bc8521e83ce4a3d84f3d05316d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3961a8c1f1d4e21c8980ef9e064aa828d9a5a35bcdf8ca1b70a9c73463fe8614"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1cc28af01c6529b0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Bermuda",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d9151cba4698e465e7631cfe3b9553c53ea898cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02d4071e74e8c3cb2c2c9bd89adcb75c4fc84588eee9c45684205906ce2ddd7d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ca371fc451d5ff32",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Canary",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0c49fee21ec82746fb2b58a725eaa35cf0986ec2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9b1a4deab550ec9b67a1282214e4476744ba2af06295d08401521bc77256c5d1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "66b0b870cf24cdd5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Cape_Verde",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8a257e7808339b1bd8d91a45ab192a27419a76b3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fa90f81876ba69056291d45d5768616f7cca1755c163f54606a6aedfb41bfaa9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2cdae2c62c0c254f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Faroe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eba8b9e14bff91b31cb010254cd01ffb735f1c0f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d4b05aabb767f726b2f88895bbda845488a365d88f28ca9d7da802b2e80b5cb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4a09bcacf69d6fc8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Madeira",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0df3dbbd224c11a5def8d0581f5ed18df19827ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5d5c5132fe2f05c537d4b901be1cb8d9ad4d6a0bb7502a985bbd5bff7af2c055"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0e0313954b7ababf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Reykjavik",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "063bd38d550f52fba0f4f63c0e5aea20719f5281"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26044ebfe9aa2775fe6421c8c1ed3e8ba8a7b6c869de234a387ce6bc651aa214"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b774d49f6f0e067",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/South_Georgia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "492055d16a03c3a828b577928ca771167060e4d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9dae92611be278cf1589e2dcb4cafccf751887fbc609e5f8fccde6ae19ae2b6a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f3c20d85459dd549",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/St_Helena",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b022f7c646461ff3bdf17400a3b1760054f0016"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "38fa7e7b14f551fcb1d5b89c68c50c56cc99437181f53b56f44b2a8bf3446913"
+          }
+        ]
+      },
+      {
+        "bom-ref": "51206a89a1d7212b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Atlantic/Stanley",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a535eca69ba6d124be4f34e7739950b3eb50f17c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "828a8d83e57893ccbdbdbf1ad750ee07f3b2b24eb021f249161827593666e2b8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "630ad6f7ad4c6ab8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Adelaide",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9b795f8f25d619d1f4805cf7001e0bd4f641a2eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e39a6d188f38b6a1d159c36797ec0b855357605b1a95b1abbef2c72143f33815"
+          }
+        ]
+      },
+      {
+        "bom-ref": "71bfb6c8de8124ea",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Brisbane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "50ff27cc928f74f27f6c94dd0e8deb0c53c7ece4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11e4c3667175e366c7d07b2e7920ac18ce3db33ac60d3bd053b9057e2104939c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01621375ce59c1a0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Broken_Hill",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e17abe8d5d0c242de49aebd078dda98b30c36cd9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "48bf8160d40642e0c58adec8391a742285f49404c54b44cc482ad233f51cf881"
+          }
+        ]
+      },
+      {
+        "bom-ref": "97303ad171bfbe2a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Darwin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "953b15a08c80668d708f19eb48e18c26a1931bf2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "69e90dc1d9059141fea2c359ea1aafe47cb6d600f25135902ea71163a9818a74"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b5ca476fb8a527f9",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Eucla",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fa32fc3c8cfe47c1edac956ec4b66119971623fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "be2403879f69d4fdf71b889ab089693baf7e762278d16c37d0ab58c2f115172f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9fd13aff09a2709b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Hobart",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bebf6902f862c232564a5ac3f7aba4940b520a25"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "692b51d2cbf99d56140ab30c94566be5d5f61d3fb93cb9a59c902ad8e8cd4e1b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cf11805bc2c37ac1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Lindeman",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "617c8e10c87c8738249fed5aecf59b9d41da6a1f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "711d5c83a7914d328449f9363c5199ebb0ba0e601100059075276c81a687ccb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "df3afc17edd9e58d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Lord_Howe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "180e5c883222ba7574b07e5405cfb373b1307d1d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f504eb72841a9ed6b7cb9e34fa394122f83e0e0d0b9d5863f53cad163edd199f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c569b4a09268244",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Melbourne",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c4306b6f42d04d9ceba68a7fa215cfec82711541"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c5e94e7035809e180aa050b55dd448125e535cfa546078e3b251f053ad062407"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9ed1c6141ab9494",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Perth",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "61eaf161fb9d35bf2c96bc1f2abc7171358a7e1e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0fb5587b5905a2f161c674c108567ba9d37e21a4436a05bdbce24d5fa2368564"
+          }
+        ]
+      },
+      {
+        "bom-ref": "51a72b005e3ecc97",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Australia/Sydney",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a0b0ec781fd40bb04c660218837bd57393d1c7eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e970347c261081869c06a5c365815cc48bee0602d1e19da0d3a6e28ef5901a27"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3d90c110e40b8e01",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b96f95d9a6800c0f74977837f058a5d56e55c432"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "39bef83dc0ad7e25d3d8cc1b7ba9e1b4cf34049c35af380933d1d77d2bc5caae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a70f44bb26a5a53d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "812e03860a0ff6f9defe64c17a4761fa73f6eed6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6567fa0886268c7350128a133752b33eff831898257d83d8ad8179f639ba02f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "76bc6cf63f46f251",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+10",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4f482c04d45750dc5fe0e00060e90e9fac44a283"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "19ee5a634f44691b6fafd35c0f533e9004ecb0221bdf3f8e5cf2ebb6ebead085"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d5a64b6d7c3df291",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+11",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0bf8bd6d3b981ed9d8ce2128871e942e8049bab5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c11f6359495493a5b150d2e8a73a61959ba51e93769d5c59a62e58ac8cf03f91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a91c408bc6d028f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+12",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf2d9a510415f02ce2b2f272598597588b13ce5e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8a84265c0724ec8baa61cc913185db89cac39ba88a295e1188993d8131ed7a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "41fe44f9d00d5983",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba74f561726b37c35e279a240271ac8b97125764"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c0f79340974422266215a3564959f6cca517044bc1cba2b8273b17a15129a9c9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d19837b57611a758",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d3b9d1020e5b68485484eae5b21bf5bafa6fe3e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "09127dbe200bacfe14824dd6effeaf8ea6afa56c6bc8c2c5e573a37bdba3b02f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9beada631d0ac809",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+4",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79eadaa9901d173b9ec9a49af593fc9e66b60b77"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e3727ae8838213327e0303fa8834569c6985e2ab858849a9c452ce8aec4f98c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ef3d4fc54ec4977d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+5",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e8c96fa659931a7d96e678e2185502a8e3a670a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8045434e963a07aa6abdbf56d851be3073bcb0ebb0c31349d8e2d144147a915a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b1c054e5cf3142f0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e9f585299f17ea0f79e2c75d6722dc13867e2f11"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5f989002e671c9e1e021710e088b3042656188425bf0b35762e9d1e091c6c993"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4db13b6e6465986",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+7",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "501e7937055930320b92d6450fbc35c2a07cf643"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60b24a52910e9a2aaa921840cabaec35d8e68c1805aa198f50b2612dfeac663a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b0371e1c410df0c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+8",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4778c429c2d15b15154b79ca463bd1de51b76751"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75943b89555ae23416cf3cb09174ad8b318c849547e400d509840fbcab90f6dd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c819c038fba8848f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT+9",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3cd7522ae50122e38bb5a8f5f24c78ba60d6de9f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ed9a09ea8ff9196e72c9b5512e15cf9982067c9892fc0e374143803ef9db29a5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "062bcf69f1438d7d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8f65531c0cff154f59ea42a97789038db9a50a90"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a78fd36aa65bfb4d1e940c36f89b0b66c28034d79f848e73cfc541f7a05666f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5cbe0700e093557f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-10",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "512a56854e2bbe728d7a8af4a06b535d409c393a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2fe361f40fe58e1f76b2422a8f1d3259ac99ba5364b723f2a699769362dd76de"
+          }
+        ]
+      },
+      {
+        "bom-ref": "098619fc8d7a48aa",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-11",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1378595b9a60029c3535d1efdd697080a7d9ef5f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f9529333fc6e8df23db1c6cab200718f261cfdfcd60b950827b50e8385536787"
+          }
+        ]
+      },
+      {
+        "bom-ref": "15772ebfd409387b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-12",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5b792def3f8352854b2da43c9558aa2406080751"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "590021b5095baccb671afd41ecbaab04eb1ce2b0e98395b05ca280821210264b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f5d06d08e8d31935",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-13",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dab0685f275a0e968a52ee72e4d4a5116cfaffe3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "06750a9cbe8c5902700b11ae5566ce4753592a3167c1ac59a75d8b1e5cdd0d38"
+          }
+        ]
+      },
+      {
+        "bom-ref": "59114d3c4a595bd7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-14",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3c359abb66860ddc6f2053b453b39985e9a2834"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d13b3132c77ecc045639ad8ff63e2f687b7377446c631adb9e4df43db8cd391"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8ed4b47868d2a468",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed8a5ae52dd812c6be57c73484766ae6ec09db3c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "378931c0bdcaea0a41ab7a08f6ca9fd17ff83d82a4d9619c36a3cd208c078624"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2c51f2666fd24b8c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2380d1725ef2311e62408ae6fe1367e5d9ed03ac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c5d7c486b2a2bd078d9b46941f1a380889c4bb91ae6c34e7b6d5eafbea355a70"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b37f6dd4ac9ab69",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-4",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e355365682fe6c5ece02207ec727667c37a0bea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a90191c0a3ed7375dcd6776a64a7aaa8612b9a4aea503b4555f8496b2bfbb38a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ff1a210a36c04015",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-5",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "652639f500c40e7e9456d861fa1b45a4739dcc64"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "58092434c80162cf2a23b506b256e1f991b25fc29d22642b3be1bdbc71f98be8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "294a49aab858e11e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e199c7896a65a4a64fd73bd6d4b9a0d00ec95a7f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cfa610926189b8751342fa7fdef9f09cf72e294a0521bfea013a4a468eaffafb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "54ed9ef902d61dc8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-7",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0a433f5e045b6c33e4584a0e21e5cb20c1e0bd1b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3dda58ed2feafb03deafccaacb68e3370f78fc23743740817a1d93be697495c8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c3d935d6293d528",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-8",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "276f0b44a7ef890f386a3683dcfdaafed603b6ee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df59bf6611958713b8c8cd1a425d879fe02d5894c3bb37f3de5327599a62304e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f300999c5dbf642",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/GMT-9",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "18f927650fc62f4e469f21df82df94f50d1695ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3c809522f01269598f9c1e5bb2e04389bfd3677a48d791d4e8a6656d1e4ba5d8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c7bfbaf4a81bcfdf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Etc/UTC",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4e8c3c01b3461f4ad5eb900b8035c4163acfa70b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ba3f58c59f1dd7b807fb3fe09c4dbabac2465307d7f5044c18cdd7f721c44fcb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1805f105d56476b1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Amsterdam",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0d331b923153616977f8069d8ff7fb1b9adb8200"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c319bc9a155bc45b447acb2ce00fdea739043e07811abef690588fc307aa8417"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e312028ab589d09a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Andorra",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89189a14334e9071fd3d69da9c30012ef28af447"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a002c39765cca056ad2a376dff3ba17e939de31d9c3c60bbec85d979e2bba3c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d50942c85bd1874",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Astrakhan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "38e3ed0cdb4ab094566ad8b851e6d0a687d03b26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "266ccfb3b78123e8d957b2564c73ae08ae560975d24b90d328fc9c9b5394fd09"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2fe92d428155f0ba",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Athens",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "97ed68e7e6bcc32a1ecdbec31e2de52ebe8cbfa8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "32f04244ac89a0fd55c2c66af308c9bc7639ef79c127037c990f47d8e922219a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f490f71aaab00e73",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Belgrade",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f79ab69153be375c471656a75ad24eb62c5cd5a3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c1b9262ae825027582780b957866e5a9549ba936f466c1ee7dae8e9f34e20b9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b8ef3c254ed6e2b1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Berlin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "66606aa751a0bcaf1d93cf49cbbe577c057161a3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7823fbce1df592b45c804e5f213263a7b1c933ebcf3489920bbc2da066d2b2a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6770c083edb27ea3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Brussels",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c4616be559fa7a029f6d9cc6f3c32d0c7469c5c0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1baeb784afd6829575c4b87ab80ee925c7799b44bb9231eb9dd35e5af899ff1d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b933b2240a4f5e57",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Bucharest",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dcf6321761ec7c1e23c3c3ad4edf29ed59cf50aa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b156c97eabbfaccc44d7d5b589724582ae23051488210e3e10fd6048e6259127"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07ce91430555b029",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Budapest",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "86fb3a67f2e7415ee3cada166a796b087fccdf78"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ccffa6faeeda285e54044483121c454734a2f019cc8c0cad543720f14e3e0a3e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aca5c1771fdb55d2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Chisinau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fe878a97aa3d13097a8669cb8221d8c11aa0075d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b18c3f625369d749b14e2ad149f71c2aeee021bc39a98681b8b2fec5f75e64d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "856b27ee1c51edce",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Copenhagen",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "16ceda129757faecd68f1a24d9420309d6cde93d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "53363908e3a07f4005e302e6be96da2e0d4d8b9e373fbce831d2d9e75cd71324"
+          }
+        ]
+      },
+      {
+        "bom-ref": "20b0f80a96b46451",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Dublin",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d068a97b59d1e22f7b2f078464e1cf689d2d1494"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e338ff6ec99a666cf71b5e5be32a990af469b32c73cc7c61689d284144f853a9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "95fb8dee1d02b7ca",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Gibraltar",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d5724a7efe8dcf425c5e4de09f019bf3139d4b6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "43898d133325feae5395a21fde1fd5560fdaed2c93997d75d1c7d8eaccaef21d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "17359d7946c9b328",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Guernsey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b60b29f16840abcb74fe2faa39c326a9910e1d9e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d02cb1530b51f838b934b1e2c76b7d25dbb5920529371e693581b4a679100725"
+          }
+        ]
+      },
+      {
+        "bom-ref": "96d0af3d8b08afb7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Helsinki",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "128f3af0e78465e257260d02c6cc6e02270b1e6e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a19e7a0ac525c6adcbe41f34e7f7d11a67fa2a74c7991347c0888197217cff1f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c908e22ab8a37331",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Isle_of_Man",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7af2c6597f93fe4dd3fc0e57ba0c4f909bffce06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "01f4822009d99b2fc985b78ba4360d584f65078a51be7fab7d6d402c47bf5357"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2692e27f9cbded4d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Istanbul",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ecf56add97055b5a5836792f3267d46387c11fe3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e2640cd78debae6a10e359224f1ef88ead514442de48f437d5985dae35e548fd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b5c25c3b76186f12",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Jersey",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "84a18626721709ae2b907c31ea68f9eb0fd3ac73"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f4d162a4264877f8b597231daf724b12b15fb6c00d63c454795e8262b085d332"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d62b8a80002ad776",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Kaliningrad",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b4e34cad6bb533a99bed25184dafe22b847278dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a734545243fa1602565e6bf8b0844b4c4d4889d108d1a2775743dce829e8b5a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "91e9f80a5df7e782",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Kirov",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83f606ef9a7887a4e485a75a151f2c4da2339dc9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "92f8371765831f78864db75804ae4b3098f871bb68a23a3da430306739f4bab8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c81602591068348",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Kyiv",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f44317ff41c4aabf611099a5aad5d00f54cf0ef"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a43eac7c7db8b241e43230567ccbc326ac44b1434238e906df1c058b3ce266ca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "96bfada0a4a584e8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Lisbon",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1e9d17457501e5c26a42e1833e69930feb3a1806"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "58462eb76ab53da39284ce8cfb6b7f87380c91f09214b8d28f6ef4bb2a397f17"
+          }
+        ]
+      },
+      {
+        "bom-ref": "30ef2fbdfcadee0c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Ljubljana",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf3cfb5f98d784850f3579a64f33a6a1ba85e835"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "06b419e77b2fa28593571c1532022a25f0b8b8d257ec748b110359b26bf15a3d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2ddb978d9c57fec8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/London",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35e53cc471bcb41ea30fdd605d256827d40dfa3b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d64800146d1579a6df7d5f7abc1163d7cc299030e8b28abc1886b873db8b2fce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bc852c7dc2434e5b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Luxembourg",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4acb147d5c15f0b0206c5f19809f314f2f111873"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "05971dd06e2529162c1c16546f0aea9c1ccbe81d5e1fb4c5c61fdc83dd5aea1e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dfdd484d83a63d0d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Madrid",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a2cba81ff09c8e7be57a0b82990bb7ccb153bff9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c2ae74c18f1dfd1e375fcaf0f61551724b7f0ad91ae4cc5d715d7e5522574380"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc5eb42e598ed2bf",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Malta",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b908c254b6ee9c18d20f6c90b2a890e10ca4e4d3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a76e5bec75193fa168139bebbd3db961acf9e332b73d5bceb08266400cf28a33"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f6e4b2eb5c6ba993",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Minsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89060e64ddad4de6aedef9521ab6b972a1f5035a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "478afd802e4e05e455198bca6f9d0baf6020143a52a7a515b00533316e10baa2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ec1dc7c7c971fa66",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Monaco",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f91e5b3249e0b8e85885f9350f90724a42f78db7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74b149fd74025fbbd0d83ef4b39aea9c84efb95d4567867d59bcdfdeff4d3b3f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc38e8ae87b47c23",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Moscow",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6761875bcf2d9859bc8c455bf74dffdc06a7f7a2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fa6d1da420a48ae49c1999e0473331ff29794ed61f1634549b29d575fd19513"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ff732c2867e996ab",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Oslo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "591b9a1dbf2c8de6d8a8837a449b7ae3313b48bc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47c1e78857e860081d6c950663343e999c10d30646fb554140a0e3a7d0154bdc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9b3addd040eccb61",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Paris",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5a021a75231966dc01c9c936c7dfd9c97ecf4e99"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "772e4b7c501a44b2c153661ab23272cf2a6f0b87c1bad22034ac208e69c43d1f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f633a7620c4412e7",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Prague",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9f295ffaf881ee3fcfe66e1a276e5926321cd335"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3f8ea734f203995e5d0212523b0e97ba5bf43518150ce6965a4ce90cafd1ed8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2f2e50a56d260f7f",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Riga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be3c57fb9f809426663d57103de1dba23ac6fa09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "48dfec3433f4ad15f15461280a85fcb051f60774055c8a400afb6c90f1c0e8a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f3f615e1868ce6a6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Rome",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0795e7a38d1de703728a4355bed56ee6cc53b58a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47b8943eb7e2b24c5e78a13c5686c6c387d0614e7d59f610c02d2612a6d6f394"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d395f9b957bca732",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Samara",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3dc626169c8056a7775637300758e9f4f89e996e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3855b13a200df6d907f8088b146cd890a61f29743fa043916bf0cae7d6171545"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e18f7d078c9facfd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Sarajevo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "70838a38c20d4a62793af41c675b258c999523fb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "050ab31da590d8e2e41d68e2feb0bcef8fb5b4e725ccf959c370b13f12e18205"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8fb6c6d208abc3a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Saratov",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6805e34ab35acf096015fdf8f1c163fac7607154"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ef1d024210ee5c3dbdd93411996158dd12ee5fa46db6a13f0b4471618aae433"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bf1b4265119476f1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Simferopol",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d36739c8778383c671d36fb9865bcb5d80a2bf45"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8bce314149af0b3d845d5e116198a4dcd340d4ab07ceab4df3c7de22ec1ffc50"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c77608aa602dd01b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Skopje",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc2290aa3571c5b15691d5af10c24b158677ac8b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "05a5a4f453b9a68a7e862a8466328de8ccc573233b2b2b0c04cd785309850372"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9d913f5f30559c7b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Sofia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "333e6b00be00d5b702710d2573282970ac489eed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86830f8f4f2deb5f325b57a0f8f57f3fa0c62850b4e957b0e0885b96bab1c60d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f52f8230533e6a6b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Stockholm",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "18330a8a18e25a7688f9124add68a12eb6f7d475"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ec240297bf0dd48f4418743c6455df80ecb8d05dc2b5ce01ebb347ca3a2e2c45"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a7dd8865ea917eb3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Tallinn",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e86396a631ea6ec89613bb1a2153f81fc590d0e3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ac8d7cf012dd60c2382c128510bee536c81dd5b5f88be97f48cb4b940985d58f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b6101f29c0ecc29",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Tirane",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7bb167115b2955a6392d4d4d2a1315e76e9f588"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6433608b5d62d562b7e580dc16a7b9fed07dab7934ede52cc34c1d555e10cc8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fd400b92ea6623de",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Ulyanovsk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ecd56cdd4bdd96e72b6ee67306c83fd492ee07b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c1d140fe9be55f207449cc57f5b16006b6ea6e519676baaa5a10fbd3ed50cfed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5daf87097291aca8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Vaduz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "76145ae66e7fa246089c5a4b298ab42cdba69695"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5cfebf45f4ae65ccd1c3603dccb16f7853737e2ada9fc770c39c318f4c940613"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bf5c095e028ac3bd",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Vienna",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "67f3b7b29e94b2346bf4e917e03b7126fd4227e9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c8c704b5e303be879b52a9c8e3e6457307dc9569ef3b472b795177c0567061d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a687deb0f8b0ab8",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Vilnius",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bd8ad4ed97da9c551ff7c4de62b3563b56b6db48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "81ffeb8647187c21e0f3bb77422d988a4b1dbe6d7123d174da48a767a7a1020d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5089319a55851658",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Volgograd",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "28821df499d7dd03a14476bd91f9000cfc05d628"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fe22aa87b319a9c30965a1d98c7bdd7c005bb1d2c7866ebb9f487f6426c0790e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a9a6011fe20ea8d6",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Warsaw",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "69fe8b936d8d5c2a3303d9e5551a193b826ef8c5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ffc7204033c7e0ef8411664d5d1708330eb00d63b4ad4ba157d4cdc3d6934998"
+          }
+        ]
+      },
+      {
+        "bom-ref": "88a2fcd4e338edd5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Zagreb",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc845c3ae142185dd565904e1ca56a4f9dccd747"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a1038d80682265d2fede04b17d1f6fe1e3bc6f1d35ef29dcdb312af0522cf0d0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1e12174bfcd34281",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Europe/Zurich",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2cc5b8027123a1a716c64f3d713973f49f8f8223"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dbe2654d9a9d59613ee28b204a1ae506ea940c89416783a2e5f4aa389749a980"
+          }
+        ]
+      },
+      {
+        "bom-ref": "25c691c7ec83f6af",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Factory",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "195b1a925c9cf2927c70cf7e43d6193d58d79bb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ae36208305c159f17f8cc209093178b5f1815ca03983b65dec23fc72427ecfae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ffcaae209a145a6b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Antananarivo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d370a1393afb568e3b295cc2fe31f9866715f13"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2d4f56ef201a27b3a47ccf5cf60c848f4bf6ff4b75b8fbfdb2e8d0a732e89c8b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e6a07f8ead35d45a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Chagos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "abbee69898c620bc20ce6226f40620d057234689"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a44be5cdc9c358a9d5d716c732e7376d14a748e7e16fa96a4af16d42857feda"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0fe435f114ba774c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Christmas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "527be16d03870ef82636ea22f148f2970d161427"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8e5aec67f8edd16f385d42b50198f7654e2aa6a6473baf42c0665425a569813b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "617e26c8fc9a1659",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Cocos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "92a971d1e8f14b3bbf4cc485a934cbc4cd3ae64f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a26aa57f5c11ad1a0764b6b8ddf152def440cf4e35d6c73ca1c43b078fc8992"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b73c32c31054e01b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Comoro",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fe7aea91e453d7abc105a4a6e284acf11c0da20"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1950d46af99f3240670d2209fffc843cba591feeee5f9445f4adc50357d82f07"
+          }
+        ]
+      },
+      {
+        "bom-ref": "819c3bc210c23a03",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Kerguelen",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "05a1be5a7decb706b63f74ffb05ab3ad90dcc5c5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "648242260a6555476915ed0ef69b1137ac979a9cb022f4784f4f421717d50051"
+          }
+        ]
+      },
+      {
+        "bom-ref": "519d672938298e18",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Mahe",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "423c53aab54ae83f794d0616ab4d93247036e637"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bc14770ee421d562d38891cea62e8ff6a5be8dbc6087a105026179e0d1ed087c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d67c9bdfd4d77f47",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Maldives",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba9af8a31c55d979fea09af6f07236b065fe038e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "61b962e3a68d89e5f1a168ae4f94f98634e7c82087642bc4adec4ef8049c2a97"
+          }
+        ]
+      },
+      {
+        "bom-ref": "48ffe53bc15f9b84",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Mauritius",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3361b29f7b0c12558d1085609c6ece310366a2b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9791c2422a4b5b1e20bf631d5c370f8ccfbd8dc50f49870e7d32b37eb4a15e69"
+          }
+        ]
+      },
+      {
+        "bom-ref": "178b784cdfa26477",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Mayotte",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5c3bb3cea2ec9d7fd378d73071d4390a77db44f3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7d0cd8d335c4696d0aa51175083ae64b467ca356c722615db0c75de85b51834a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cbc528813dee487e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Indian/Reunion",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b825283c12efe7acdcf2dfd5484da2ad6469e8f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a63691e344a3355a864e24c401c1607853f63d604f1c962cc8872f503eb8f5da"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6c0caec1ae1d2879",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Apia",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7c49dc7f6c7ca95fa03b9b93d2e2d990307291ce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d7861ecaa4700f603ee593c1cf1878e0df15f2dfd3f9a11406074907795e9f8a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "59c906030239732b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Auckland",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25a61bdb83cdce0152f1e448883e8f9d31e738d5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6db396b64ca16732617f100677a2c2930727b41d1308adfc15141bda92b6d7d0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8faf8affc6a93190",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Bougainville",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89e2afff75d77d3563f111c735d6cf9f6cd459e4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7a2a4d24753db30bbd686c81bd6fef86f9a84f2a6bd7b56df0dd209b92b2d08"
+          }
+        ]
+      },
+      {
+        "bom-ref": "87cb3786638f7220",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Chatham",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f94207e95d8294f405fd1d28caca2c3f3ec5641"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b49934d5f4cd40cf8aec23c8ce2e65e09e8f62cf15cd1f6957c4ce3ee6baced4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2dbdfbd9a01e5304",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Chuuk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "88b12afcd82b8f9c399a110de620f2371d36cfa8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "66d22bd63b44fcaa0b6222e16adf5d035945a53da3db42bd0bacc4a53f7fe5b4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a84c59dd4b56ed5",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Easter",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ef6f283eba717b15c358a81a447a33cde5bc1666"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1350d65a6c0a8f3f90419857d942ce6598fe540964647f0ada38054533df62e0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5db1ac7bee6919a0",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Efate",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b0eae7e4436ba9f37e4d0cbf2d422475c74db8b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7f56a3ef14ab638b4703108391c82836d1b699de402eff65df0aec9463143247"
+          }
+        ]
+      },
+      {
+        "bom-ref": "05cf9f329918e0b1",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Fakaofo",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd4ab7a60d1ad1f28997e27a215d7354bd2a5d64"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c59e3ce984efb02d9a34481377abf74af648df7fc15d3f200804d71fdb441b6d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1bcbaf5f98158481",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Fiji",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7669ede07cf6ce6c9e824839b5cceee1730fd1d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d50bae2d5ecd0258e313f4cdaf7087df9dfe165cb0eca3b888c4a9ecc7ad47ea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8d47ccaa1a709b2b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Funafuti",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d0d2661d8b7757439eff32b372df42c20949ba6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7147ec893482f862021b668c8c6ecb4fb54ed66aad0c63f82d0fe3145dd581e8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e39e9d9e3c3b09a3",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Galapagos",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0113ca8fdd734b8efb56e620a31d60378c6062c6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4faf25093b31b9bb22a48c5016456292d44f5c7e68357fa52d20356ec621075d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "024cdb02bacad936",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Gambier",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7d0cc25608fb4decfd25f235546f7e6b4889154b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4152a43b16c08998c85400993490eff26a28164af99873f33284fc2c62e1ded4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aae6d19475e1f68c",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Guadalcanal",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eac533c2135f683e2c2500015380526791bee252"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e7b56a9da29a5e44ad7ccea18879d719a0b830daa900b1481bed3d4d0f971f48"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3bbed8bd491d629e",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Guam",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1a6ad95b6b44ad4095f04606ed18fa9ae18abce7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ee4aab7829cc0046ffd1e4d82deb087d610a9a14fd9dcfe7cf82f4224a362d65"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f74421e15f7322cc",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Honolulu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d9477684b9d98d28c976f539dce9f4b8fef47e37"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e8ccbc97ab9805bad4cfce89300c2321166547f5bf4bf2b8c7a48b6f069f884"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ef8b706993dfdf88",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Kanton",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "680078c67bbbf3f498eb5ba62d16252322b7431c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "042264a8b4210c8925022271fedde5bc43cb849806eaea7b2b7ca509d7111f7c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "68d10a5047b20e88",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Kiritimati",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "197290283c66572a200c37ad86f2bf6cd38fa6b6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "92c95df1d19c1e86c5f62cd1acb165e465919a28a65d1823c95d20c7b0f5ae5b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "53c1a4fbd36baf98",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Kosrae",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0f4a89b5396a96b03fddfe1c0a7ac65774adc2eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e2564f2a4bc0443cae815bd32045462a5b19ef5eac978fa1780ecb5fb9fe87b8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7e3fe1e1b4c4d112",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Kwajalein",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2505d02aa23867fa678bb9d3c735fd6ecb79abfc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a9ebb22411c00377e506f35c1d4d0552736e480544c18ef19889b1ff1acdd02"
+          }
+        ]
+      },
+      {
+        "bom-ref": "388a0a2508f4be09",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Majuro",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7906544a1e1be71a50ffb1db8393e4aa25a67b09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "07a568f64b34bc821adfd5dc61693e1897c930000d0abc09977201abec6a7ad5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bcf9964a8ddf9144",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Marquesas",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "331c4453dbdaa9c845142025a46ad8d5060a0a48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d6ff8d598d640f9c7a19ed7af3d47e01459264ade90290278f05f86706b1a08"
+          }
+        ]
+      },
+      {
+        "bom-ref": "933da056f36d3d50",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Midway",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "94c2cb96d5cd755951b92c6df2eb2f1bf683c919"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cb1f6650134d59bf64d570c4e6ab63e55327209e2bd9347dede431f1e99c0b78"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed9d6d01ff44b23d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Nauru",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6fd5f5208c1054f2a7903347afb8f9a192d5d68c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "21fad9210343e707ec4b881777d5a558ae755e99abb00abbbe7b2b58c1b3bfee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "075ab50096f474f2",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Niue",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f46810c8a008b2fea527ebc89d65e6f5d597d904"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7bcc5c886e79394c40293cdc8040c89ad74c7b66fe86372c21202d07f5932c13"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fcd27d0a48a9285",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Norfolk",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5301f273aaa658d6a26887d103317da51f1c2f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8e241cc84941853cc9c95179267bc40fb5e58558430ffc5276353d8ac2e8d1f6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "992096057ff5872b",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Noumea",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c0fb31fd41b972c3ce01942f6537c12d22d6f68b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d01a027312b592f682d27087752708e28f0c1ed5653a039d9ab52bb8027a332c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "002dbd52ddf53cef",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Pago_Pago",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0885527fb7d948280c1adc7e2ae7a9eb74eefcc7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6ee8bfcef1ffa96bb23edeea00e3e70e8204471f529a3c33b98ae575d4037d28"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fcea9e847f3dbd30",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Palau",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0f0b90548f237c33bfd5f50fbfdef055cd574491"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc836dffe58522d24ebb5aa5febcf72f8bbec82867bf4749fc79194555e9f7b6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c5fe7234c7f2c038",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Pitcairn",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d2b42195a7cde5034c9b4db956b8e14bb1fafdbb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a408a00217a80eeb1b9c7ed80a966cf8595ee302bac5f52aab2349d9ff5c71c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "25ccabe948bc35ff",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Pohnpei",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15dd92fea913bb79db93edcabe133b53ac746462"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c9c21ce5b4af5e6760c1a199761ea738d530b847c7f50c62e3f512cfeaf146be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "328e7fbbc5a09221",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Port_Moresby",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e8418252d4469fa3caa5578df72855f49e965caa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cfa56252a887456ef7757e7a4fd2760dd5b3394489ad7836d9f4614ade7785db"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8d058e5554813360",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Rarotonga",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "578dbcf904f1a60d91c867f00ee2aec9becf0424"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a88f04061b5ecef71ec2b3a8eeff5d56844d7241389c9f12c474320f3d38a8a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d796423fcb080959",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Saipan",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "16c4626aafda888ddb33cabc2c7529a8d73492ba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "379af77b5aaea5a8bb8341e099ed4b1817644b677f965fb839ec9afbb988b71a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b9a76704b847813",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Tahiti",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1f5de74ccbcd9b7c435cd9c33001395ddd714b48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "87bcc7f7df28bf5ac74d705b599e6948071393bbb9b60bc86bb9f96faaaeafd1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2637766d82f5855a",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Tarawa",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c5f42452cb560e1c814187d41eabc232bfd9c12"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8edbbfc7dbd19b1bf2473fa735a3030ce00e14624a14f2517cf9fcc9f6a7d3e9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d6be66c8afa59e18",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Tongatapu",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a517680648c55f5f0433a959aba616d59881ae14"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c3c381528eaedabe3301d2890f4183bca3b08e65310609181a0487cbbe8137c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c21dbba6bcc3606",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Wake",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "51812b1c2ffedb935bfed861c9c9ca9af0385562"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c38726f086cda9b8f58210dec725d70dd82a8a4988621598ab03c7282d9cb45"
+          }
+        ]
+      },
+      {
+        "bom-ref": "952f0c0464ae215d",
+        "type": "file",
+        "name": "/usr/share/zoneinfo/right/Pacific/Wallis",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6ae73f5fa00305a163b20acf2bd6c96d6a30b8bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e1e2b54c06941be8ce91046d9697713c6f8c461b8eb90ff1dd82d54663e5cd83"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f703666eb77bbee9",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/tzdata-legacy",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2bb10e6f90eaf83440bf7969fb478e41619e1786"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6d0fa582ce59b9aba43d34e627386b1d45c902d26adcf6a34129cbdc3c57af4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d840c92f91fdcf6d",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/tzdata-legacy.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "87d6ccdd545a6f91b2be310a564914efa5009068"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75c6e12ce59cd6933320bdc9bfb864324e84a9a7bea100a2c313684385e945c2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f08d41f454213cae",
+        "type": "file",
+        "name": "/usr/share/bug/media-types/presubj",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5dc79c4a4df9a76a5ef448a4ffc212c1f22f2df5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "40ca64c14041a61aba24773d54467a4f9409d3772118348477b2578025ee99bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9ed8d9c78ad22ee",
+        "type": "file",
+        "name": "/usr/share/doc/media-types/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fba0f4c6aa89b79f8a845197cdfbf8f16069cb19"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0e51560ded97811e1d905a2cad99bf74557a09959dc6d3c912397bb8fb074d83"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e6bea96639250827",
+        "type": "file",
+        "name": "/usr/share/doc/media-types/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "122ec71bc0ee27107fe8c40b8f5b4976dcd558d3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ded7c53199b6a1d089b0b7e231d77e5c84081c7156b372b3f11ad9c1c2c5cc7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "35aa49848f728b23",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/media-types",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4ea0de54e94f111e8c83b11dbf38e3357335cd3e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60e871d56cfcc834fe0a8d0436f98996e1bb196d3ddf8f2109d0f05266a816ce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fcdb10b698161097",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/media-types.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "04f4398950c17592d0315fbf3f6f633782e7d43d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb4ec9a3445a2b4800f35f816844f3c03b5501a83431fea326bfdf46c09a77ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b4e6f97c88b58560",
+        "type": "file",
+        "name": "/usr/lib/os-release",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f9e11c4fa1bdf2aad43c45bffd46f62246692e55"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b4d56a90bdd55b9d5b9b4acabfe748f559e505e340d2d93097937e11ee423cc1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "91e674b27c4a2ea0",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ANSI_X3.110.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "409633627529979500178f7acc4289f5d7630639"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d5a8ad4ff7959ceb9d4fe7951f8a38bcba8f754d50e1d4cf3c90706e54cd12a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "629a13fa0f069d47",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ARMSCII-8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d627037d2ee6241f7113d6f133efaa087258d4dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fddcd8b551910b2012021b70f96e8262c64336dab93656a21ea445eab9b45443"
+          }
+        ]
+      },
+      {
+        "bom-ref": "53823d1f7043d11c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ASMO_449.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2418da9db567d71e37fe95965a297ae71d4ddfee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75eb5a620dba6be5573036b957618de8c8274c97726b87e475dc9b3a7c74a5d7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d16addf54cd7420",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/BIG5.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1c7489b48d3fd4999f27e1d8433b29fb760e25a7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ef4c933ae6f245bbf7684b966055d4b2d1c68fabebd2f2520a524672b388419"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8be1f5a1c474f08",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/BIG5HKSCS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4ea41cfad356d749f3d9c3090e6d42584a69bdd2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9bfeb70668d1a2206056340b37af5d76c0e97dac0764f1c4d16e89e1e187140e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7610a6da8915f440",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/BRF.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44d239db789b7a4b0223e49009910e9d5d923b8d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6eabb5fe49fa8079c047fd79fae68ba75309547df6bba1ffc3a2bcd3ee626b3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "59e51351882d3461",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP10007.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b3a2d96fc38e327f3684a4668be5e9b79d448975"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5389ff620a15579a7840f4afdebf9e7299be4c4a70743b5ac686cbd27ef8f557"
+          }
+        ]
+      },
+      {
+        "bom-ref": "46ebba0e8de0e3c2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1125.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79e8763e5eee2e213f13563776ed516d8075d9e9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6525f831cd6613f258c7d55f7c8562aeada094310466c77d86722950c85e72ce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a43d0e11e78c53c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1250.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8d8b46ce3eedaf6176d5a5b23772f40c8651e03c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b2435468d269df84bf5164a1367376b97f4cd5ea62b0b24ac29bb5cc9891c1e5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "256f00c07d3fdf9a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1251.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca603f4d8c64d43c33f7872dfaac2d8d309d0e3d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "016cfc3755c5af5acaf8e5322dba359c0a062c009a70819fe2f12ddcc320850e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f46ac30e0c73ec30",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1252.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fe274f7ab69e3b3fb6eac2a8bb6b5d94cefa6d60"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8b8de963d3ba9d2cf89f0ba9f156b9cd0b98ca9ae1bb15f0ec68a5234ad243f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b6d9157f468575d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1253.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9a8882efcd6ea80c8fc7ded000018513294e8039"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d412206bbfe9805e0b9dd9d3772d7d26a97704a2755e2880afce8f9c98270f95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b8eb54e53b04ee8e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1254.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0d10f773df423efed46eaac3537468e2650c74c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "30b853cff1c8f9afdf2e80c17e371169551aeabaaac0c0f9cc7b9d58d9d02670"
+          }
+        ]
+      },
+      {
+        "bom-ref": "97bbf77f05b08cb2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1255.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "64472e71c0b7089982123e0f7a3e281d2e66c111"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "054dde4bce770e2ce5db6424cdb3bdc27efbcfe5bdb8c23dd7415ed4d750075a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed3349dda3f5983f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1256.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1565431389c8a62a4f93070bad69f1653ecc000f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "273b622d533d9c58f206b43ccc97db308b3d59f3cab806c3fc037d551cc990fb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1cee9de782a86741",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1257.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ece1ce413ddb7a591f3465159cb5f2b4e148683d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d0ef101e563e6200aaac2198914b1c0beee73426c507576a16088ae22531de86"
+          }
+        ]
+      },
+      {
+        "bom-ref": "407bbdbcd2afe2eb",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP1258.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b3c979ab733caec92c41fe2ca946bc13b4559467"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "089e27ad82816e81c132cb766937c14058855ae1ec19226082c85fe859b29471"
+          }
+        ]
+      },
+      {
+        "bom-ref": "89f30ebb1074dca8",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP737.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f80be2451cd9b0b68f0374d6545bf195569e569f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d0b29ff2e53ce7cdf06686bd6aff53849c1c23f9ff4f662f8e7696086324091"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0f5d8b267ab48f17",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP770.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fa26ac49dd121d3a624ca8e129bf855cc09e3a0e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "da21cf8be043aa20e61341adc3ffa9c08dce15b21e8dd6b5cfccf953f7548a0b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "10de5a0cbb74aace",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP771.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e5d03ad77cf5b193bda1e898d6c6243b0908b34c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a843a505e20746c81de9216db15cfecec75301dc8466d142f80cbb7e0d425c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f861bb3a22c8d5c2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP772.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "daeac906a8d83849ae7fcd9cb061c70629ef2287"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d94b169c2d1804959e48683085eac8495fffbdfc6fe0cb9135e10c58c779c64c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b498d2cf05bebc6b",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP773.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "733c2d207009ed8480f0297c50ccbd732b0ffa78"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6b63c291a8b99b180717c729397d75d9d6d1450140430ad4620df84293cf60f3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f898a4c3d9b58e2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP774.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b119b5c4c6df5492fecf5931afeca8aa5fff6176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "942456fde736ba36d86908d5f3e4c928b4ff2c923b8872bc9c2bc02e03ba0cb9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "05dd21b2c5bbaab8",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP775.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "127a93bf625d819464ec9adeef565ba40259622d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8eca681340dfc9c0c3dc3af18e6071b6acf8f52594ebd98501b395a7dedff8e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aaddac9fe2ea04a2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CP932.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9815ff705de329c4b472063d1859aa1743545e66"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "42068ee6289df8dbcfe68937762078cd28bacaedb0a0f5c200edc346ae9bc127"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9fecd989645ed9b7",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CSN_369103.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "39373ec01b1cb3368087262f1ad47a5c53ff915d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "da46c9974daf67edc271dff74517b6d8e43d7051dcf834f954eaf8495ee6a62f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d01267f1215b86e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/CWI.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0146b61857fdd0b0a6c22d234660d80807fd0879"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3eefd7fddeaa38add66c49e4de449ef717cbbd25947a54b7eacd58a6b98b927"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9d5b08bb312ad92a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/DEC-MCS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14daedab6d27c01ed199e177fcc9601c4dbbb4c1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "770e86c5469c141c1f33ce01a473dcc645f9480863dd1c6ec04beb4a1a332b6f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "05a74b1b0a6339da",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-AT-DE-A.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "967645e505cf9299ba981d61638df513f99b2864"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ac275d762a4085d544d0eac0e95ecdf0b5bb13f80bd36cad29622014b731eeec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d8f17ed45821d0e4",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-AT-DE.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5f3c9dd5cdaad519bad47cc61a1cf4ac60f2e98"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ccb3a4f05e9787e17cd4744bd2ea2d9ae586e2cd655125deb600ecb7c9d25e43"
+          }
+        ]
+      },
+      {
+        "bom-ref": "90812c8ce033c165",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-CA-FR.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6eefcbdd5dbc054e6ff229d7085d32d056cbd336"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bee80ed8069706ae12035c9f416b6a7e6382afa299c55871ce856c3bc4bdb0af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5f83e115652c871c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-DK-NO-A.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "db975bfc87063122bcdac6570452127b9fe5c789"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "27065479a1a9af9cdfaf5eb35261925c56ca92549595308bd3e309e96e0097fa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "064c565b4103f23c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-DK-NO.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "337a418ca8ec09b41516da89b0c8e3cdd2bbdf5d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7d92d5bc2b4eef3b409e6e7811e1cff0ddee0525cd58db7a89c93be4453ad66a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "003c7a0ac293c77a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES-A.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb20fd662e6b9c22c4c053a3b4a70aed3d268526"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fcc26e5ddf1d2caa202637f634fc48c82be6d040d8e840f5c9ae7ae3a2660c26"
+          }
+        ]
+      },
+      {
+        "bom-ref": "41b84b6e8e4c4fc7",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES-S.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ca0f396dfd40ae7fde204f84f3f9309eaeb34da"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "27cad182cb1d0af21d79129bd1412c88a4e48a86add3e348b5ac60f0a12729fa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f9f8b0368f3a467",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "02a9981593ffe6ea54a9bb6516e862fc0528dcdb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "db4b6bc7951175581022d57045f72d3029d5289724292ac795b91539a46498d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "41a2f6b2e56aca2f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FI-SE-A.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e2c84ee5d5ba05dce119328f05ba7cf6834c8742"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "17e5af48ab9a0ead003eca1cee7b4b750d1982da254da2069be5c8634f2d0c22"
+          }
+        ]
+      },
+      {
+        "bom-ref": "beb8cbd5702ae81d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FI-SE.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40181d319a3dd79e90a949943a9d6a36083eac00"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1ba4433c59b9eb70e8f1519aa075bed9c71b75b878d7b8492b3ba2dd0ead0eb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cee89defcdd92fa2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FR.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7df8ddb3af1d29b7dfa07a67aac4219519aa8aa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c29f17eaf182000cf8900d49dc1a6566bf6ba0f38c3fb2942866c550b071e623"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f6004f6c27d3c06",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-IS-FRISS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "37a7dd2d36a71906a9bbce44ab1faba25514730e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a1500b45b45770e895e70825e5e24f35547e2b2e965fc6ae1dc567ea3c53a55d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75969852283c8125",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-IT.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a91ad8190e610799b7d5924c96eaf9d7477b8ac4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b683e1e29c3c8a7bf4fea1070c081c72f2fbe8acaef2ce80d99eac5ff46ddc21"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9deebc193bcdf34a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-PT.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83069e1a78af06b54990dbb45b64cee47e3278b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a4d8daa55e0734064087cf613356b0148f2a1d84d3406221f152e678c53cfafc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bd99623099a2fe96",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-UK.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9313fc40a343945b20cb3a8213cdb500fc08f0a2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "44173ab0b218825e9793a326674638620f72ab60a740fddf8c8621088d0bc82e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a473e03fb82c6861",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-US.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d09b856af3b7437634a56840432d445508f99382"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "91990308d22f3e7bec21d8420c13073b49bfdad318924b798054a5764353df49"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2c67d586785cf37",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ECMA-CYRILLIC.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "63304e451920dcba4e7fa77a1896927ec178e288"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "143cbf9b23ddfb276b9a08d2a3234a056e823e91b51f1abcd82e1ed58aa8a566"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc2aecf658f63315",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EUC-CN.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "34e034ca2b03bfa414fc0578df109a14b898e13e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6d3028137f29bc8871dead2a2eb92d7551918a536c0a55e7c60411c6fd93c180"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5257cb2662cd4e0c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EUC-JISX0213.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21637f85edd04ac7e0726577c4c6b70882d26046"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ce968e0941f41a5acd9ed1eb94f545c9bf1b1d137c5c7dc04ffd57ab128d7cc7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e86eeab29d69cb20",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EUC-JP-MS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48dee6a373e0c155c8f64f6f9323fd14a967a232"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a947258bdc6f8e382c7e4dcf127efb6ffb064ae425d96cf05ee015a143c3dad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4a07c0dc1bdcc176",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EUC-JP.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "73da1d7a5381684f1b91cab1f3e266358dd6aa74"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11a287d936112432489edff4ddd05b0ec4d9d673a73af43199446e877b31be13"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d84ccbf449371abe",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EUC-KR.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8c07323b467cc771da1682cd7114bce198b15fe6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9b2719fd1db22f3790087ea77eb337d7c068716a7a160967bef785c73ee96143"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4e5ff38954cd822b",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/EUC-TW.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1c08cd3e56f64aa882eca72d820dc496ce01311f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c29d9415f75ccf570adcb7cf03dc7816db55b78bdd86e49129160b2407bb016d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bab8fa8bd4a27736",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GB18030.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "39653b8cb394fcdafd1f12b9f6ac8f4d73494907"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df7db36c1ae9cc8c1300e8fe7648fed99fc61e867f832fc846c79e635c51500f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bdecd10a4b08016c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GBBIG5.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d3c1367d2e582281355a36b661f46f412c99c22f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c620113b4a078b9c35807c5affa8db9e3a89f11d164abbbff4c4be9115ed3863"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7f6a748e6917971b",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GBGBK.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "268b08318e48b0bc3a72066f7cb3b0d3238737ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "410f8698d8ae8aae8e96d8a842b9d903ecf9fd1873c2a9df50de6cef909de5e9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f2bfd30a79af6492",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GBK.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5952a19f1e2d86fde25201356b13b5745cbc1d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "021f6a71d97136c8d3637701a262e09c15542e1106f4ae1fa635ed51dafd1b15"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ae05a233aedb5ae1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GEORGIAN-ACADEMY.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fcefe19eed78e8cd1e78429d88f5136b833440df"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c946becfef2461fbad1efe688d3b2ce779e57b25a7c4f2dda7b15a2caf2e9aef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b17d7c5750fa5f00",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GEORGIAN-PS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f475c4176d70c820389955652fb0d4544d76bfb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f042851a5bff983d8473a237773d87923c99382203f6166c9c7fc75993aea96"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75e426091ae1a745",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GOST_19768-74.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "674c804836478d60172a5351e83e4429b5b4e545"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "92ff9e68681f2f63ed116c329320e98b62fed526d6540ae608f35eb6700d9821"
+          }
+        ]
+      },
+      {
+        "bom-ref": "53134782d26f03d4",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GREEK-CCITT.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3244d4324c29ee181fb20291c20a41301cb9b85"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "82eb96646615a902674f26bcf02e0b95d4eaaeda17494249623e3f53233b06b9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f7045c37d754fe34",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GREEK7-OLD.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a1e66bc6078e2870b3e9ca31972611b532eef10a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "859882d67f6d17bd6fe033877ce672da898b8b25c9e7edce3b1a8b5181a299ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b13ef73f83120f4",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/GREEK7.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6a3f96a70023b35071fd00bec3513679b8f27f2f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a876696104b8a2b67c7ec4fb45fc21cf8450ed19229e48cb23859ecacf18d539"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b869a6ac84a944f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/HP-GREEK8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4e1a0ff32b1b1946c9fe2ec94eb53c1af48c0e2f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dd3818b617967c8b77353e52602017e3ac58151caa6bcafe0d34d86b5ac5e819"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6fe5237cd3c1a2ce",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/HP-ROMAN8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5ae47c10d7c52b6bf8bb8b24744e02c6cf98f20"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d54fa81d4bd626e25a10264985f455923bb987e87a2213e9771eb9cee3659a05"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8e705a7fc0df3866",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/HP-ROMAN9.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a33de9e8d0f578499445d8c653820da6f8f2beb3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4ea7e161062bc04672ff49309f0cf9e40350a13f793614e917f5c99ff7b4b2ee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8e7478cf5d4b3c7",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/HP-THAI8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7310fad0aa525eccfd5b2f47110f9669dba0732"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "779fd8d333536384350f8d91ad0388387f6602100727211e363d5de00cbe01ce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab324c0bea36aa93",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/HP-TURKISH8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed1fc53a8f14a5af28d819b96c385140e4db0808"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "08fd547498788ce0fc77502d6298e48a83957723a87800ec485c77f603bb9ab2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "63517df8e4954f92",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM037.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "781bba33ef493a70fbd7f42437c81c8d4edc291b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "36a1a6d9346e0c0c3b1c8ae012f55ae52034c585f4b2d4f47d2587d3934125db"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0fbeed31149352af",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM038.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "98f52b5e6a3a83a42d9a22e96aba0bc2b243bc92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e245d77ae88aeaac1999ae84e3b92fde8f3555aaaf37e7c27a2ac40b570c2e9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "94e5feb35ccacd02",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1004.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d96036d3b14b32fc3f64a84641ce4289f256a5f6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6d75f1d6e969042b0fdf443c86fea212d410a8fc3e0f5cfc3dc88082eb7459c3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "91abe3396b528913",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1008.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a941fd31d15f48fa94a4bebe5f4e1fea4c904c26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "472b4be7c1a814340cd3751eb1074dba00b7a6f7f9e1986cfcbb7c5cbc32f24a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2f5309a60467d011",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1008_420.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6a2994cdfc3ba5cc12015256f21ff1ba49d10eb3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6500dd0a63ae485b00baf5ddad5162358af7e3450fd6f24f06f979c1e2a5b18f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cb1ad70a63fb8d47",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1025.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "784871060610b30fbdd2c0e03405df477c28862a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d868fba9e1a5449812fe881792052fa6a147312a6176d7221bf710248985588"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f539dd610081af1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1026.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd72c78caedfa4e0c9561c6964a13b193aefbd6b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "00c593ce7d7aaddd8d6986cd2cc6726cb3925d4c1fe614c63ffc94a6785f3361"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ad9e93691c1d1cea",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1046.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fc635f6aa53b70d8154dea6583397fc01ac2a08"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c9aab2eab77077128a74110df8dd1762c22f598e3e9371435abd77d7ecdcf97d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b21c4e28a8f64eb",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1047.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03f9a478030fd61946bc08b7d37cdba76ff87b34"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dae6bed473218b8094ef3ae3982a51224fec054207edeada7c76d2bfa0f21618"
+          }
+        ]
+      },
+      {
+        "bom-ref": "91fca15f57c55ccc",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1097.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f3be802bb48c416eb6f73520013bc17bb7941471"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e7b7040dc7cc1ec51567b72669464e306693ae5aa36523ac7a17b0fb21ec6816"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1b3583a69e8a5f5",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1112.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "db9104e5c3e606063b9fd2299a9ce4b636f5e773"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4f55c49df9f188319fef672f59f97c67608dc56d2c8ea461f13dd0a57cc9c6d8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4e5de32baafa8b38",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1122.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5c1c7ed2a97e73f3c0c610d3cd712eb4d3d8dac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4438914c2859bb8686972c055784808c99c9707af1b45cd264335060e7bfd0af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8cbab916bc17b68",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1123.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ab45ed3e83136df4c9d45cc5f9a7df8568bedd0c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "804b7f2930a35035fd418b2d861f6b082a4d724703794f3fad631a25877d4819"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8626cae31c306bb",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1124.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d62868d4713cabcf51d3d8cfe6e4813671063329"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2cc406d001cbdfdef40497e2d55ee73e44f86660d21e4932ebbba32ad05200a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d897f3f7acf2f8c8",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1129.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d6230c67d3fb1a9a98bb70f89bbf04cd0f40cff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f128e2711a0ca1628b90a6c29fe94b8446dd4d8a49483950ce13bb35edf96a60"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9998aa8eb2013c06",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1130.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3da16d34e210498a6379f3c0951ea4f7b55c3680"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "558e89a72eb3bce8328e1b4916cc29b6de3e8a146e0e60996bbfcc1667fe5efc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a56dd12aa48766da",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1132.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9cb754a93338e3df18e7e3a3ff49dcb7f8dec19f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2e3350ed15fceaa3903416e309b6ad3616cbee6838b296959bbe0db3fb57c72e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8134eb5cc2dafcb9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1133.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba833b52bd4153a157228681feac7d141a7a53ce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2527defee891afe9f80df12b7c0055aa586c2277e089a063a0ade7b0c7d71394"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a25bad96fcff355",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1137.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c3b9b1aed852c043c9cb6b416c7237c4fad32a90"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "09ca0f800ab823a32b0a966a21a3f9c05c5be2e2daa7e0899884b4bd9e749dcb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "501ea559250e1982",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1140.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb82137fcb3edb5dee3e3221fca9c50143252cd5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "62d833070da5e1581457e67373e6a46a00d34a45e581ccc2c2d733e8b58c5841"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f44dfb2853081316",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1141.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2a63f38db1247a3e4b4ad76d8c68b7595113765b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "25a3d776ff664f76df2de367512697f1cf7e4162cf9e8097f77e591c203cdf52"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07c3d57cb1b10e86",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1142.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3d47aa3d0b7eb33f63d261eefcae707a02ba0d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "22f96e70342aca59c15a4248b2f9807e5056daad5be85c0696f17627aff4efbc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a850eb397015a505",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1143.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1c13ff2ccfff84f549fe8a31a75a65adfffa289e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "61de4e7455893bb70151cdae32a4e34612912d6e3e19d783d686b2d163bde48c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6a0d079f55c8e411",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1144.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac6acf11f6201b912f854bdd61019ba71b0e3797"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86b5821484f37902304a083b1965131a7e33c9429d93e2774ada88750fcd8305"
+          }
+        ]
+      },
+      {
+        "bom-ref": "082afba1c6c1cabe",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1145.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b4ce14d1641df8d9811f1ede47e21efc02bb970"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "033a8841c80d34857cf16fb4605e7a86ccf7c130653f7a86c0db79a712b073e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db29dafe1a06ae50",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1146.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d936ab8e259103e4787dfbf4fc4ca0e5aa401927"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51682cd12452c04122d71021684d4b9407e38ce3a76f7bea34e0b0da12a12eb9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3d9a501b4b19bba7",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1147.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6b90aa9c8a3fd6626f2fff70bf05cc8d2955de6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b8c5b7ac023f60d1f4e4cc81ee86e086229a258f86cb7dbd15962a98175a668"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db27a82dd1e519b2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1148.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "503add294e6fab8008b44f3d3aab0488c2148d84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e5b1e5829fe3faed4965731ef3902251c5a172d9fe8fb9ce4868ca5ac686057"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4e411000ebacc5c0",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1149.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7eaea8ad46947564e0e6c6503ef8a475bcce0cf3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3bdf57d5c92acb58505332dea084a3d0d2970065d530c14747d9d69fc0bdd4c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "724d837f26f99473",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1153.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ffe7dc72e117352d95d07d7f835a0f53d166359"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "76f5e0b69c10fa6e939383d6c770249ca390c26984f753b8465b83e1f0fc771b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "82e5eff8fe55a693",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1154.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9b020eec38c7e40a0e90215e7069da3f00a0515c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d7b3739d76313e7a5f8b47731a383e2b35bc40fb4d9f13e4573efdb9350e8d49"
+          }
+        ]
+      },
+      {
+        "bom-ref": "44860c122d1f0c24",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1155.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6908293ea9891affe5df30c8ffd8d86a6f086674"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bc502d6e38463649c09b287069162b4ad32c2443ebaf1c2ed1232d37d3233cb8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "af9bbdeb80d46d81",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1156.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7569e2d57883fb6023078fe7d2d557471ddcf566"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "efe69454c863668175fee383bad53aad1f29948582344a092f9055d23458d7c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "20464e5c8e9d7aae",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1157.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1056136795d89d4359c4ab2e96f015e9c2e0f5c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e0be8ddba02007520952516be6a889a30e7f46dfa3e16951effa0af6a15e77ca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c45674ca37a51847",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1158.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30c99fc245bd97dc65b654201468da1cc7c7b6d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "980edafb0c72380deb1a91f9c3bcc0e74ae559618f0a03ab4a8fe055b5f87b0f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "800ff9368ae0ac52",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1160.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9a9c663855220b91906d53504c61862776a3d47f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ad6371c73210d7c2f37cd3f61767a695676ec8277b609ce2809895b26e086936"
+          }
+        ]
+      },
+      {
+        "bom-ref": "852521d18fc0102e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1161.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "039fc4c6fcfd3de4d4982447adf3d51d9a2e9d31"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "599bd4a46047b5e0f3d35035447389fefafd2c7967742829ee992d6487ce7ae6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f714432712b6446",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1162.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f95b2acf4fccf76f5650a5e32ea1beef4f6c47c9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5151db06e95bae6d451a4032e22a65b9dc9f5023e3e2f23d826a56b9991eebfd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "481834caf417eb7c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1163.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15c42c6bd1a5691cf3f8b87a43896595d02839a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "da9d13fd5e8e950c06db58e34e9a21dd47632850bd2ae06ecb18d297b7d5c07f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c737118b92f42ae2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1164.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b05e9dd81393956acefab1e6382066da794b13f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d59dd93d68747b83d946ae729903cf260ec28af96ca15cdeae61a14f9829d075"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d7f1b58dd713f701",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1166.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bfdd0e801815d087d79775ac2cb0e11dd1262d68"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c44773ff9a86608fe5442e7b6a2b23d05f31dd1e34f16ab16a9f467c09900155"
+          }
+        ]
+      },
+      {
+        "bom-ref": "807eda30c4801f6f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1167.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "63647d1c41e9059df2fc8e16a5aada3a3ccbde0a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "838547b42fa907448c0358f3eed5afc2d89be49f79870dee6c3e51eabefd015e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "45cc67b85ee4f482",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM12712.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40897e2e7e7d07cb8ac8eb6402bd6d0f34f3b61c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03ace5a8356ada3965c9bffe1308a348eae9ee0abfb53f6d20c49d70f7c6799b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5269dcc4565ca914",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1364.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30c25bb39bac65f819bb6af69e88f8f99ee5ce74"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "35bee7d4391a04f077b8236d0aed12eeeee3c12f2c3e6728281284237cdf0fbd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a121b99f057d8c5",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1371.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e23c702576f0890a358d815b419d30be4e71be8b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a3aa21f3116ce5ccdc3da89f81bae73279d5d34586f83bd0abdcd3852c05256c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6c5f7ff6f705c5e9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1388.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c6e2978ca96326e7a62829322ccd96a6c67485b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b51538931c76e8d80412209441013a64107de72be50d55e7b8937a7a09f77228"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c441f8629d4235a1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1390.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44119a1e10a7920c4715fddf867d892606235329"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e14eecd2f25cb9bc0b2c095eb7011344dccdfe5805d69c4e9be81b7022dc51e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b857d0c497a9426",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM1399.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9ca949379e4345a8f165c86008dfb82387e231bc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d381da17397ad700c5501bc58db04dd308326a34b4a7e8026facd1254e34d8ad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "949dfab68996414a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM16804.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1c3139fedce5cf57360681563ebcd544e7dd5553"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "892c4695ba21632283b01ae75d40cbdcf5ee36756b261a69187d0b6d482feaef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5f23bbd451195451",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM256.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5d8e8ac28265b02b37a7b585ba5330765547776"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f0738773b881e254400d5ae37b2ff1e53fa71124673f3e34fc1849323b827c68"
+          }
+        ]
+      },
+      {
+        "bom-ref": "626402ba7fc4ea31",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM273.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "547b2f440e17748c170b36b9422adde03d4c0991"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2d45c39bc3420c114ff1b9cc0efc48202f75ddf062699302591c9a8c533e6df7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bf589ff759e2b783",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM274.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8bd6a8e187249599c7cef04edd9012bcee7774d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fbb1350519eb979f14b73e6b3af8a2d22013f76055c54aed9cf991c9ade99eb0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "14db1d0b2dc5b3b3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM275.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ded3cd9509b244f9f3e52daed712e0e018ca642"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "064983ef090ab5787e32c2e0c80b36bc7622f459774105f91e03811a68f617ef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8645ab2a8c2e3e40",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM277.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d610684b0af992ba64bbeb47ab8aa82bff4cad4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d8e9550b6a7588e409fc134ac5a5daa13fab2d83bdd325685843dd1d4cfd9b87"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3547f365a76aba21",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM278.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "285913b94905217ed1ec0aa008cd89569ca31ec9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b2ccb50c05e33412c73ca645fbdb6f9d2d0ed5297ad3333fe0c3f7754c584e1b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a32c0955a376322c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM280.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4c96b470c2a20e6b3f658d93ae06898ad305b9fd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "84ef11671d5891220d6567010c9a655d430944c75ff038054c7d91e609510b76"
+          }
+        ]
+      },
+      {
+        "bom-ref": "12fabb569ce86fd8",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM281.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2fbd54859afec13b10027632fe23a75ef10011f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cadc79d250c2e0c04bca46c0a49a2136b2a8e81daff80ec1367331bed221db99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "909b73a93d7a2bf1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM284.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e0d8816605367120c7f19a4e545dc51e90fd82f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "159482ab855714fa7f911ab542e8836186173d1aa19e3b14e85c4ba66769ca0c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b820674c43664642",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM285.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6b722ba86bd36bde6165afe7a783801e03be9341"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75729657d44ae77e24da987f102220129dca71964b7d256bcc573e1d3c8a98eb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c39fd4cf0b324147",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM290.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40a8658f91c063a418048d98f1c124592f78de16"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cf1d940d3357c06ef4393fc10c73920dc8475ccb2f9225632eb8b186fe23b23d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "87914c309fd51a6e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM297.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "878d0a647882d1ac861ae24f475e2886b085305b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "965750e3ef432eda826bcefe50f9f35e0d1ada278a91c57c1b6c2a81f22a4cf5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6eb28978e730f9a2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM420.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f81cdd027ac8ff2472d24d2935c419ffda05d099"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e76aa4c67536fb301ee682e1bb158fac52a353e6e31f6d8a201ddb7337a737c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "68d3cf2d1fc3cd64",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM423.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0cc9ee926783b806dfec5f95d611d14c7a4d538c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d32a348dc834a45d78872f6916c200d8a09fa060a6bc4695a19821b008fabc9e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc099f6b30c45400",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM424.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7031e6f3a57b23ca5f4f040f3630bc75604826c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1efe85a1456ac6d3b14a25c9b65182cd4a5bbcbdb1153911aabdd0890f962777"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bc774c5f5d1fe059",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM437.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aa6a987665d45daecc0b15d12b163b3cbcd33cd8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02573fcbba029c6a9ebaa3b8e11184e5afbafa90c5307bdade4d700e21f79c13"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a69641850fe5e83a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM4517.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bae8fb396f4e4758de551d281359e0c2cbb4719d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "41b5de77bd4ef936cbde68f11b9d5920aee929efce69389c93c59a849f304554"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c2f07712a6d5621a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM4899.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e748deb66b7df4f9b5c1229683c28fc1913e7e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f9ea44e52bd249655b562da2af0573451adcb0e816cba90e687666eb84d826d1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "09fcab7dcaa7e9f7",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM4909.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c30d9bb1fd4cf16309cd39a2bf57372485b9c326"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d98dc9164f01c5d7001a5f9c98def026c3d10c2df2ee5fc90459ba2248dab5d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7113465c1ce6a324",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM4971.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68e41444f7438484d4f312fa362761a9c5849bf5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "901179541435c5d0bba7b2fae3769bae0ade59a4c53d7f4e7d5bb71074bd3329"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d3b25dc9ac8ed475",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM500.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "93ddba9c6b2f9110bcccb9f72a8a65b94c83f205"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "39d67dabbbdd888a1441188a8c304811b624cbc9fd4721864869ceb53407185b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed1b9b2f3483023d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM5347.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1360478bb3c9d9f6c4a27fbd38c720284101e5d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "88ac9a23037c4fc1c0c5c41ac7bbc4923c005125425ecfcccd626dc018ff068e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d2a602adb1d4e13",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM803.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e202537947f5389562adcbdb1c87be128cde292"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "31a32bc3f2a1038e98f917153c041e4726069cefc7d5fb67ecfd4d53e45c18eb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "693352c5e972a117",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM850.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f8e3070c1bd620401260a091d4a4cb7f378f1157"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "adc8f5a235fd5c08e80872d292c16484c06e6f92a3ea0d393d5cad831d6b6442"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c51c5c6b0298de2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM851.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "340f294d90bc44690bc59151d72016a08fe43457"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ae0e2d04a9d8d8b910cc42379e8c9cc0d34b5cc63ca2f0a04644d3378ea3c256"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b7f39918faac1f78",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM852.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83ce36f8db0cdd9d5030a33b375fc1ab5397f545"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "87bfd24867ff2e4097fcc15bac062016dc4513b147fd05771b9d1403dd78139c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "28ca3f6b0d3e9575",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM855.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b3adbced46cb168d12969992e7085d3a1cfa8f80"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d1e8b2b12eb989d7c3509a13e446eee3880638b8fe15c6cb7cf89e6383ca06e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e584677311481bd4",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM856.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25f8290555173d99589679bdbe0cbade1c0d2d05"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef072995b77c9c8c7c05dafe26e67b71918abf42e9f7e00cd9336bb38114c57e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "42f4ad09c24bb239",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM857.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "72c55796d3928c8ab333d58f92d159603cbc8162"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d88ffcd2271ac0e286daf9960ad1b743246fd818577cdd04e21162e44a22485"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8466a9cf11488508",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM858.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3a140b46e9a3a4308d4465ca9a8cf091e8f6db53"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b19d67b10ff0ac4bbd9f997c83bebb48566b4da6b88ce52c2b1ce40a9c78eab"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f5fd09d837062b5f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM860.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ff4244656c5ff0b8e29bbe0e493c741aeecbb3e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "734189758002d54a3f00c96cae6945514e14d3b2a780fd33813bbe71d7c71f81"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a8c2087aa9f50311",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM861.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a8b209e6cbbec743c7d46199f57109c392927021"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aa0ada92e0c4b63b416c8818570bfc81df21a844f2117e4ecc02fa57cdc1a066"
+          }
+        ]
+      },
+      {
+        "bom-ref": "63a8357bf35f68cc",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM862.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "685bcdf12637fd0b19abfaa2a04273adaa58f53a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4f060577dda5661b08d271d27e097fbb871d4b96f49b0b7f22bb30611ce23090"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bff6f7c7f5475f79",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM863.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6b87d44d1c917665c9aaaacc9a18a47ca46c2f3c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47bc22ff17a84fc5896c3f901fa589de0a142051f38a25c314f58fa7c3bc5318"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ba0b953fd72e9ab",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM864.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2c4236b730f69f22158328c012457a3d578e0c4b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "392c2ad23e2c2a8e4212aac3b5066367388d94b4a8e3ef1344d438c2d3da8c61"
+          }
+        ]
+      },
+      {
+        "bom-ref": "97ff5dcfa6fffa4d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM865.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2e399d19e53ae11667ff2c1e0b7f2771f613537c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f84309d979ade17928d4ca5c37280c20006c85f9136c1d95123e78fa32775bb2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "929eb3e621a27978",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM866.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "91d86bb65d9a533c2a22f15ab3849216560c9024"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86dd9fd6ac02b2485e11ea339a815eada6b04ad60b0b6e11d0c5514312c78e93"
+          }
+        ]
+      },
+      {
+        "bom-ref": "99fdb37b830b1531",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM866NAV.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a274f0dd41ab68da9f39c742ce961dc47ebb0a8e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0bbf733a27b600f70654bdb6e291dfa52586a14966516c6a845ce2248dc8b8f9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7872ae3234017ae2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM868.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7f50f80dd82a7396ca37a15ed34bd9462159859"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "33635705237914399c9ca2c9e1983211c312c8baf14b9c102d05eb2cdbd97a33"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e5252e864496b833",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM869.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b2d8c14cb89c396db3ccf5efdc87953edc949003"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8c82171b285c9ec971fda62e7a333c017524d1a17c73a7bb9740bb342c56a503"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a894b845b7799a51",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM870.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5124a8fb874575bb11cd708ed2ae2535e92edb1e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9643ebf12f8f7e836ae1e943ab658206b23f821ba9c1deff79b3513621b3d227"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8d9a3e70aaf3d2db",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM871.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3f0595e31ca15076a52288a689545f9b9470a116"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "640cce1a127516498ff534ea978d42ede7407177e3b9731e6d8c4d6318082f95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "547e7541b9518b46",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM874.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cb90df7fc64d2ef0992869e801c41e945ebced10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e46780da922139e568f1cd5818df0325c5f26ec14b41c04df493ea8b065cad3f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e86cfd3e1ccb4fb6",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM875.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "698cef1f83b26746211af0c824a3f396a699a30a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "46cba9b55e0954111b34d5d401d5926930d3528b872ae9bc2fce48a3a0a5d6c6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e3406f6fb4dab0a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM880.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0352642dced0ba04cb8441c7ea238d565df33c8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1389a8ea1dbbaf408eb9053ff84c788cd56073820a2806ac4bfc8f9832f09458"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e972a9157b6fa9e3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM891.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "962ce994f068d435911decd9be9296cc40cca3dc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b93135bb22290722b5e7d56159d8a7a61d3e41e4e21c61bbde12c555ac4b3a2b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2f753132bdf80a82",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM901.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "957969ed4461271c89836e740d80223b2d1e31c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bb9630564bcd250b6d13ca7b04c2c36c962db865225baa6196df871323408334"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b0ad7649075912c3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM902.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1347dcf88a75e18c8d9ba8cab27f3ad8feac2fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f3fc47360c3dbfa49f5c3d4811b21de35a624aa88d0f4dc3f5864a02eb585f5c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "60191dcfc08e432f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM903.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a98c8cf3811aadab0b5bbf83a5d9dfe1ba24b01f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "52b748554c2e1a26417c55b2799d2edf0641d54126cbd0a1179d671eaaece048"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b835352d774ff4a9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM9030.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "038b99e467cb9b88364d4c482500fdd98d960a76"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26f5f618b7992f5b6c7114e5f17a9abf7a4803c4120e5fdda75099ae7118284e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c4f6dc05aacb8148",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM904.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "750a0cba31d0fe609734bd9ecee7a677c5f7fc81"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0054162ecd4c9a5ea0ea2fb7a105e652e347fe4a6eb280e386812e8f75140e49"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4f3d977c6992ca20",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM905.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc95a78266ddb47b946d85b6761e8664555657da"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e8392f6485994593c08726c2a58d860e6de87cf73c8ed1a0c6f0e100f44e6fa1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "65a54f2597a81269",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM9066.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40617d497be169ad0750257633a4a0a576d19eaf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "16a8443adbf0daa31175ab319e18845ecd0ebd708d00f86281f5dd437f6da8cb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2e0a7f235097fa3a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM918.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68ca6dbeb090270894bc343fe3d2e5cd0ed1a5a3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "423132a8cd7fb360d0d143bc72d806bbd9b102edfc7009712061dd74a6e89ada"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4104ed8649f7d3cc",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM921.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b2c8556fa5c6162f21416693869892974b2a473e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6d9a254310910e830816cd6c968eae1eda4038b3c5e73de075ee93967f655481"
+          }
+        ]
+      },
+      {
+        "bom-ref": "54746e801cdb9e8f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM922.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "99c59dad2d3df5f812170105462da1d3229efd2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "34712307cab7d404392c0e1862095887a3bd3894e1e9b757acdad63d298b6530"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a9a0e0f37771ec0a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM930.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a60b7ce4333b07bb544d79cdfcd5789b9a0b2b96"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bfd882554d8b9dcb3223ea80ae3a4cc393f9e2751bd874b63960dfc305150e4e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed781636a84e1789",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM932.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "19a557f4048c65182f915a83401a2228f8c816f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a6411594c7431152ea50d7103d0ceac47f599775569e90006b667ac6c03ca589"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c9ddcdcb5c166ce3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM933.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "927eadb124913f953d84dbf8c8d0bffb1934e481"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75df00b1876cd4e6c753861598d94b92a70198aed5f32f9d53e15de142a77eef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b36a823666452292",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM935.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e174af6acd8de9c3794bc126e78020fc626aeb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3ec6b44268004a9f4ffc744ad9989ea89fd9c2e793d511e904c7117785f60211"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6210b94224f8dc6",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM937.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd3a6ca849c12baa73021fc56e48b6d59ea3037f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a2e23786f7d24f4f38b7b15e283f6b1349916dc409a766a635cf40a08708742"
+          }
+        ]
+      },
+      {
+        "bom-ref": "91d71b8c4ca2869f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM939.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cbaaddd54ea26a11664580547982906e95804438"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c4e652204de387e31d33fc45773e7ec6b6b9d55c4e55fa7a9ef663fe7974adab"
+          }
+        ]
+      },
+      {
+        "bom-ref": "10ee37e49682545c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM943.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce5b548d9be996abe37ec63a6e3c9e594c385823"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "daaf2823fe388fb3bead246195498406696edfd66687bc09ad7887ef35360f93"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11f7298c3dd3968d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IBM9448.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fc6a734440387280afe9d9972899764c6f95f8a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d5d34d753a050bf6cfc5a5b8ad7ebb2817fb61d762f8c04306a6da3271a0a82c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2d11626d72c341d5",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/IEC_P27-1.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cc6ba0fbd0380c5f7fab1762cdfd884d90eff382"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "600fbf4991fd6e66d8c347e55ac6aeeb2fce7e37764801eac3f24f429ffc27df"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b33955689e3aafe1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/INIS-8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3f624b0ae39e9f226f034d1a8c67437a215ad7a4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "38685f5e3a6c55d0bec24289617b863c059acb7804fea89380d26c3cd1f85566"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d841b64ac723ccf9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/INIS-CYRILLIC.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "90cb6d6d0a7d397b54544177d8d826cbe08264ac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "89a1bc042150a9c9ce16af3aee091bb6c973f6054bc7251a56f3ea5dcfb28a75"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2cf7375e11a0a895",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/INIS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c05aefdfb6bfbf3178f392a59bd383d6c68c88de"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c26a1024584b6b4ade773af2572a155f230750c3a4073c63f0fcd841e43d382c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3edb935321561ac9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISIRI-3342.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0840c66e82a7573b6e20fd4910f08f6139bcdaac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f614df79bad0db871339453347513cc045c96b2cc3bf212c3267bab987b4885"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a2c715f86b55ccba",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-CN-EXT.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4a94c480a503de5c06660cbdd29d7ef7b28857ad"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dee0a1dd6fa5ce9eeccaa05df4b210a9b6b5221c87185904969d8cc947e13ebb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eb4f594cdfae944f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-CN.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be53e162234ffd48ac667512f845b3d2db156261"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b0dba89519f5909fc22a5a210bcf1dfbea8e0c3309be3f71f69293baf3f0ec9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1bd1a1778a43093",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-JP-3.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "85ac9d3f21f1d0b9b47838233d2f3f6558909af2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "681e7119c8a7f565bb58b15a5596f387da5ffd38c5c3de8898c4775e0771681b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "271673f72d660f26",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-JP.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "506bda3d9cfa2236a96940c67af71df43e025050"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "039590b6ded9c204bb9f30695ff10a5487b01ef4add10beff838d0134eb8f916"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eea2156e2161bed5",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-KR.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fa97bea656e2c518f82368387e29559b3f95d36"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cac0d12fe1f35442058b64a3d5372aae7269d584f71d3b6f08cf68792ac3131e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1e49bee77f46291a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-IR-197.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8335fb6887c0f3e078ae17088d5765a0b4522e46"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "09d1ee66f350266cc7bd25ec7b6d31c622342907f2f94cec4c6fb0f1bcb48898"
+          }
+        ]
+      },
+      {
+        "bom-ref": "efae51eb28393eb4",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO-IR-209.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3d8321a9fff1a05feade79010a6c12883a7e317"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bf4e273b333c2619b47e22c2698a82198dbeed5b02ee67b2756ef60baea4ede7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c1a2a749adc5d7c9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO646.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7478862190db6127300a82debdece60c6c5186a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9e23c1d546da398c6124c731721de8aaa7f63332a7ce8bee35f6fa7cfe99efdb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f0a3b28ae2eda589",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-1.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a25593ec25ef48b3929fbe92aba50d20e2ec6c09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd3a5d2897dec394e22bd6b68efeb4c2264103cbd8a5736a581327d0e73f17cd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2e9413be96d53484",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-10.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2dcbc0690ae2414727fb7dafbb084676a94b42a4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "83837583a01a4d1cca81d382f615caa809d794aa4a9d07ddd44ae99c6b9370f9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d6724f6c9949762",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-11.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7c4a9990a8a46905d744cf23587902db02c6057"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c55cce553b8a54aafa4494e6888a517286773b84308be7f30df20d1ddb5a8211"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7377cc9ab8fa2d7f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-13.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "939342cbd84f5566fde4bb20dd1c7f4333a50383"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2567f89d084589bbfb6d8255f1151b0516accfd884d598ca1a3674c5c739033a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "32a5d4d41d601230",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-14.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "01c24a929d41955d23bc802f5494765af5e17722"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "edb8d671d14e30d9278d3d5a8f4428bd31cd2e083f467df00462cb9a42f591ac"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8c588d8b81d733f1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-15.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3269462b4deb515f62ba100054fda9abcd84b82b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e33d963df18131206668c2fb0eb48dad78a55e14296e805c6b289377eba64b68"
+          }
+        ]
+      },
+      {
+        "bom-ref": "129702294ae08279",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-16.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ddefc665efd4a032384a5fd042a4283f590a4f9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b0d95477d119b535bda1bd9986a56ac6cb2c4b88ea109b2b3a95314794159c3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9cbad33f4f949745",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-2.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "08be6822226bfd7d4e80e6f13e1f7e01356b2eea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6ea76cf74aabd4469a9eceabd83aba367a563fcd7ebabc461fb318a60782e536"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c0f28d5ecc36ee71",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-3.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4bf8846b397c98fc182b1e9e9b52f8e24904d260"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a77c57abdbc6daef61c37569f4b08a9e09df0d01649c381ea14f843bd54619e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f47503fe16832ad9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-4.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6424a614662442708c03e4651086f7dde8d38ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "adce551366d7bae03fd0a106572d015951781181cbe0d5a80b6325407aecec44"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2173cd21ae3a08c1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-5.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cb9a5b608bc562225cb58c43fd3e8801e0887ab0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c185984e00a2de8c613b72aa196eb0bbbf70f197476db00533fb685b3507f5b1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d9824b33e00762a8",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-6.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb1b350f8ac3bb88750c746cf67666ca2ce3a53a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f1aae4e04dee0de78e950c87adb39405e70075d3346d33ad4db69f478be78c8b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dbb5f89eb4a72745",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-7.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f6603a2a643146844be60dc40752cb7b36d757c0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2451b75c205f96ae35379cf93c1324dd5ddca344194f0d16e14cf510b063f524"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c3c04e17b297a257",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "089a1560d7f571b2273bc22e8f2c93829d1a1813"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "73f7a3eab666fed448b338de148fea05e1214fdad5dbee788cc803f878e5484c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a3329ed8be7e716a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-9.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d30d05c0fe91c836c278b85ec92d5a7c47be3d25"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ece79e250dc95004500bdc1fd7552db6627593c1b98f0ae6d03e7a6fa0011ef0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "210dc1ea01f342e9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO8859-9E.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a28fa655e06f6544e018c74627394a6e12fa2cba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f2366c9fb64056f862e43f3ec78a66f295f63a431ccd4259a004d3297d41b5ca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "decc9bdf5b46a051",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_10367-BOX.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7673924ef07ae7ea632cf8c00a56d54d195e357d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "19e7385141aa6f139f1af21fd9c0302d07f51a03ffa32ceb68bed27041b2f76e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "25de0b5b8f156c7c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_11548-1.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7022e6502b878969a7b37345863c43a12cf8a9b6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96eb6375be90383269027cb55995400e812bb2116c4f7fffa27959122ccc1b2a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bd4829375ca72e47",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_2033.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "80dc594c9938185d59ecdc7b97bd37afaa9f06ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d47fd2626055291b25bf68b50d183c7453b98e0c9bb53cb64769fa24c0248704"
+          }
+        ]
+      },
+      {
+        "bom-ref": "61816751a0cb2328",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_5427-EXT.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5c9566d1dcb9045e0ddc68908e9d8549c074fd9b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e25d71ad4a45cb6215e377c8138e8eb798be324fa950b5ec4f802b52f4a3998f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fdcd21443c4f297d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_5427.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "211e9d212cbfc35b3d0c184d73c10bdd1e3bd9c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aabdfca942fee3fe040997b9828208ba1996913747a3b9cce61d9771e0ac4713"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b0943d46f8ef4c2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_5428.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b38f520ae65ace0887fd71f52c520edc7f666fb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "981a8d67d2326b18b320a49d1e25f5bb7851c3d34c3019376e953c279af4ae02"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9af92957406a1cd",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_6937-2.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0e365b5eef44305bd378a3d2727fcdf54109813d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0274d18b72e0c01d508b2f98ed4b2224893f84a4f2795a6d70408681a6b375a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8a1c8c3181a793fd",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/ISO_6937.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d9dc2612ac1cf87ef0e20ca0a2a231096c380a06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23d569dfb25e14b0b8c50e6a0dc503a07f0b5fbf717ae046dfe8f77b135c2243"
+          }
+        ]
+      },
+      {
+        "bom-ref": "148ae9d7c1499e21",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/JOHAB.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7b95ce1e3c69aae15ac3b0e987604a7b9b699a7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c932cf12abbd1187d434d31aa353135f4234b45032e10dbf3db7e18891fdf5b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fcae4730bf68f938",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/KOI-8.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4cc2ef2b95187d5f8672d3fd3fe5d0d1fa3e085a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3eaf326a500955a3fb1ed1c4071bde56e20d371562e770017a227301f3a98212"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3e594fa55aa6defa",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/KOI8-R.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f4170776294b7c31200db4e66ee86c2ebd4915ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7aeb9eb97ca21aefac0fa48a0e0af622eebcefccef9f995252b0665aa764bac4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a9fbd2e84a5fd00e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/KOI8-RU.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4fe91cbf0955b05fd2b867eb5b035649fc944904"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5dccab01e591c24b17a887a4e37be1523a60cf2bcfc0137973d05ded80c76efc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9888fa6c8c91b1a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/KOI8-T.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e1b39fafe2b3900b654c28ced6fcef86598e51a6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e20fba3e2d666f881be1fa647235d397c5083bdad4f9815fd0a798c9a650134"
+          }
+        ]
+      },
+      {
+        "bom-ref": "27758a8121796213",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/KOI8-U.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4b4ba74d1055db3f5faca4293074327c62822acf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8414389b319b1175d0b4aafccd5334d9507f53bc8bb2ce2f9ea856b1ffe6cec0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7edf1e11d0929bf9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/LATIN-GREEK-1.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "54247a79ec87a8ee7073c4a4d6364a8b6f593bb7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ad349716e880aca600eacfcda504a66dc480079f4d646d47176ed70d1d3165af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0f2060c45c77ca1b",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/LATIN-GREEK.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d37f31a024beb34cf6405bb733d5fd4f96952bed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "99860e2bae738e1f90a8e6ce784c75498868cdd70aa00b8c05fa63204d3040f7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "267170987c998a24",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/MAC-CENTRALEUROPE.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "925c676d4dd9f99a2e0e947226afb6d2639907b1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c6e1b276faa7bb14d89f73f93397e7cf03c48070d665d513d03bb77537b8c3fa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4762a1f04f3b2ee5",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/MAC-IS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b9c81c872499560e82b3f905048eb9984fed668d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8310b9333b4ee76392bb35d2138a06dc948a04397e160ee525e8e1bfa98fa59c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a8c9582fc2250f2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/MAC-SAMI.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "76bd9e2e8aa6673663d361e69ec887cce5ba7d8e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "482da4a53b2cde16de9e753665b01d0b6e9451e163c2b46d52f3f22177414b7f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d860efb50110b315",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/MAC-UK.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e256eb34931bead7038f3768b74cf4de31354455"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ddd7c422e596a0e29a42f800ed5cf17089eadec6e4d6a409d951701bb55f7556"
+          }
+        ]
+      },
+      {
+        "bom-ref": "317bb0bb8822d520",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/MACINTOSH.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d4287c37ca97f39be6093ed7a79fbe65f71f60c5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2dfb6f92f87e2d943d64e616add71e80a24926a913ee66bb55e9f63e81d64dd7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9bf3740398746906",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/MIK.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e9e2d6499a596ed1d0f33d6a12893bd3060bada"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "370306737b4f104476e898d5ed80c5e11cd2558f52c40635686c61804749b3e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e73bd510ea9a9928",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/NATS-DANO.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c94cac60159790b87e953e312dd7ce348e0e0f10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f78c8d27e8c051f7b6d305d157df4b80b07bbe9a00d1f185d96233e33896d13b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f985c9cacecbff11",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/NATS-SEFI.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0b48c71742f3c91a6b6cd3ce2efd693baf98e83f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5251742c02638ea2d76408ad6acbbfc8ea5f9e437d93d0e299051fbfd4735d23"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ef18848ac0c6a281",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/PT154.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b7c5b01b64080bcd5bcffd774d007f5b4de2d9c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a235bbff0679d4b763a711cb45b2d36fa0d7c8c43df40ee5036f2fef2561b33"
+          }
+        ]
+      },
+      {
+        "bom-ref": "166f281103bc157e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/RK1048.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68a46e6146536da6233b0a85c7fd2449fe1ebbb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eaf826bb359d77eed4f6d3f0ef16a7ef611a944c3ed056c82478bdc69e0c0e25"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5be340cae91b7cf4",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/SAMI-WS2.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "93ffc4cbcc3ad1c6feeeaa41e328410c9d9f6f59"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b782f7be53d9a1b8898a9443cd18d7f7981d77b0be12123fda57555db509ba52"
+          }
+        ]
+      },
+      {
+        "bom-ref": "37ed5d31f95de4c3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/SHIFT_JISX0213.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d18026a3f159449c970b48d472a4649d88779dd1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "739ed9831b4016c4308484671ff9ab72a75178d03cd9eec567e9b6a8b4c2a6be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75c012eda0646f3d",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/SJIS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "713ad7d24a4fefcc3d1ae7b3516ac14374216f18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67b6ed87d9a6a8431895d27e21cea2af006229ae93920267566e6bfc0bad9928"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6b1585356bedafc",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/T.61.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "06d736d824e9242fb7fb5e4e91f4abcdc1537730"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b98f3579a50fd1198ea6b13f6eeff194a555e990ec44c2aedc7472087615b0c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b39b3462c7ed8647",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/TCVN5712-1.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "20d857b2035085c6fd6d41a70783d9ed56f339bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f89b2b4dd127fc82047e3d71ea38cf57abf99c6ea2c2c12ed0691d4c8b770f4f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4ef3acdff1d3373f",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/TIS-620.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "27707ee6aa84ba32d91a46069258af25c7bd203c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74e52b3f5b19a52de340536d3b9bf7827de9d905ef52b634a84448a96aae6627"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0284126bc8d7a9fe",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/TSCII.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0fe47ec87e0ba9ab87a77f9d04d14502daf1cb26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9e3a9087b114ac3d9dfe77aeebdedb7c8e1ba964ad21d536c0b92fb9c75e24b8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ece5d4239c6c61a6",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/UHC.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6b56aa9df3c28d3c6a1e53eca7b4e63f11ff0279"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "80e7c9e820a0b1017b7d0365cd0f039bb01aa3af6918720bc5d5cdbeb68bf1f1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3769db2065042d04",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/UNICODE.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "071e86a0822ee9a15a91ed8eccdd322ed0ffea7a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "77f78e859196641934994f33afd3053c463a2a199dcd8277ff40caae67b43b47"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a0aa770d4223538",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/UTF-16.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d95e49459bd88528aaf85071307c8fc2f655d03e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "228f673f221b51f0eb761dd614d14f23ae451c96eb1697c7819935664f20fc55"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f92f0b1e4b11fcc6",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/UTF-32.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6f08c73097b212a47b1153b71febd447a02744d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "faa4963c8ffad1c04bd4759f90d622f7cc53de4ca0cf8b2b9da2f449b6ddda7c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0550cfae129a8980",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/UTF-7.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "78f997c89fb2194a235120acdd084a6da8565b91"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e8098db5d7cbdc416b6f3de95b873cfbcf0bed12f557b2bcbba05a3da6aa26d3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f5053ec10b024de9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/VISCII.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35597ab26d22a4eb7d31c069e2fe257bd3056da4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b1a40aefdb1273539a6168c2b1b676beca4789de58a59342f09360f16ea03aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5b4f20cb85f7f5ae",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/gconv-modules",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df58fc83a379e5325c5615b78da32ee67a374933"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ca370833ebc1ec0283a3e6b66cea63d5b1d2e118272e963d2a25c891564aa89d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b2cd200e11b8448b",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/gconv-modules.cache",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a56d4cca508e06928b6658fb38eb92d4e4420ca1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c4c52c0df6f3809f1b85927a85f322d102cffebb6b517b44b37048f6fd620c01"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7106c9c71c0c10be",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d06dfc489784aa2b0bd5b19d9e0113fa394fa98e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "efd92404c912b44689b96e311c2d827944c54df21f1509985d122495bda6f9aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "798d0c45fa2caaac",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/libCNS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "460a9e6395b94338e11e36fa3a5e15aeee3b9759"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4230689e522b220aa9b5a711ee886a8938894ddb7cdbcc1cc10416ff6012229d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2fddc886386423b6",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/libGB.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cafda02108f75862fb5e09e9650a23fdb44c5a00"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "816573cf2a67625e848e2e591dbc8a2d91932cc8f0ed91c6cea3d69904632c36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f3fca3cf39830378",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/libISOIR165.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79e773f46d5e51a863f3be2d2931bf7aca4d241c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5afc13bcdfeb5ef1e674d397336fe3ad8a992c2cc598e5cfa328f1301ce260a9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2c4fa36d856f9e9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/libJIS.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dd24a03ca4dc2ea4f5b00e1124226edd08259d7d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "403a91f35f0acc5d60f4839e29b2452c9b62f4ed7b3911b957f04214d2ac9b77"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6e28372650cab48e",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/libJISX0213.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cab87e6eac39a759bbbbf9a75f592904cde8ac15"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f05ac3f7f6d8ad126f7e169f9b94b46a45642677e8aa5ef34da3b1c960a03c9d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a67697a4121295c6",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/gconv/libKSC.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4ebe017edc0f786552f75e702d38f8d172828395"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e7e64156c1ce06e12a5d423d7940ecce0e36cc2b459d376c6f16b65c6704c4c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d627c66d22ae6aaa",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/ld-linux-aarch64.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "670471f8a6476d7036fbfce1ca2e6d89478b0b1c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "52a8dc3663b1068c45fb325ad32134a11764973785eee99cb2ee84aa62b7b0f1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b7fd80a95db218a",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libBrokenLocale.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd3dca93c02617a1cbb78c7e622bdba0d0968960"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc1c314e4f687ce4c5f81d3d83a2138d3ffaf523ad196cdb3e24308542bb4b5d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11de5a0be3ffe31c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libanl.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5692b52082463619810a50530f0a3b3f0d7f6dab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "76adaed6c3d615135dd2ec39a80b1636d7baf745afa3ee77f4fc7a04efe948b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab66c2e0602ae218",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libc.so.6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "02585efed5261192916b8fdfa106a1f9bec1ee37"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "53ccedf551e22a6935fab85293ed22590b3c0d0d413c6f73878eb3acc7b08eff"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab2193e3bd4929d9",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libc_malloc_debug.so.0",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "87c68b30377a2a845495815a00a355b6c3b6dad0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1ea6f14a46b4252c35fb3aaa2a69ce07d4c6b0d884794792aaf055fa1ea4dea9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9c30f556f8c07f2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libdl.so.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "02437a2a4df73420071c463e3e192da87882301b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8023ba7cb6ecabb57d1910ecd24ce347cba5653d1b547d9c7950301ed59716ca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "344732bd6d666735",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libm.so.6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f598059acab63450c575e1c450c740389da5f1a6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a8afb2d1f4a0c5e14c0fc82f794ec839eafe29738907aa92895410f57630bbe2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "386b3df3273bfdca",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libmemusage.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d79b3890164d6ee0f5fbf441c5c4b9453ab59287"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74a3f43ba04f63f626ad6a6aa5cd5051ae16fa33d2aeca993e6617ebe062ba61"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b00b604b389ab7a2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libmvec.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4fc699c6e78af8245b22c11e4bdb3211a356fd08"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56a0c6ff299d2961dc75e94161164aef4721f490ee8bdb23c27ea806e1f1f13f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "393ff7f47b371919",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libnsl.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9da7734939fa344ec1b3778a15a4e8f3e6f87748"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e86e41cfd758953005042ba1d63f4ef8bf7695135b9670e0c1036e37e084a063"
+          }
+        ]
+      },
+      {
+        "bom-ref": "019ae2147299a81c",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libnss_compat.so.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89945dc27258819c96b2e8d1a1405296e28ef0ec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "592b029a3e03e8f7357205a49dede7af16c7ed6a63afbd7a1d1f994e743294cd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "064f12a5929c0043",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libnss_dns.so.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3fe9caf7fff4a15cbdbbff5b80e7926bc4b729a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a69d397ca7b354e1e954ce87cbb046c06a62d8042721f90d6d9ef47773af2e7d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9a6483b5f0b480e1",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libnss_files.so.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d257a599e184ba794f6ea6c1dfea64668612b880"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5dff3521fe00ea802ff94f4285f35e9038f52fc80ba4906db068392cb4eff272"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2c5b8e710fb53246",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libnss_hesiod.so.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5475406d3dd13cf0ba26863599c2443942b0744"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8bc817883c329674e0223ad88a9fb92a365a7f816121b01803bb4bd606b07ef1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "72c3052eda868287",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libpcprofile.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bba852730e6f5cc5c143ebb389e36d127899a4e2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8348f90859edb4c1b4a41582418583c9b320168cd909d0184ca257bd32dec76f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "17c3d72f74f15899",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libpthread.so.0",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bbd82185ba9c1d90c9e809c85245918da140a8ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b4f0bcbb029e42861545757592356a490d87ef42cfa8a7f2d4295846e42698b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c217473a1aeae8d3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libresolv.so.2",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1088d0c1f5e82ddef9a32fd7de5a0543740558a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cb9756963306434c0fbe3351ded4041a5cc6e6ce37efc175de1093e13b3747fc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ebaa2202fd49cebc",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/librt.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b3a28064671569edcf2bb7764a4472d1330fccc0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a4b07c4b8bf45da4ec97170e6cd15097c42af1f94124a9ab251551a9a0a79556"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f87c9636440a7640",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libthread_db.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1c7d853ccecec734a9a614c9b41ed2b411576366"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8bbc54f7f7ee348e1bdb2423d847f1f4f34c219d7f348587cb90ae8f9cbf2630"
+          }
+        ]
+      },
+      {
+        "bom-ref": "32b943204d4edc92",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libutil.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "69f02e8bc6602c60371a7dae5db6d96648f03ea9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a9ee1e1a208b3721b1cacc5c68beb8f03c588cc270da5842af0c2de368d5354"
+          }
+        ]
+      },
+      {
+        "bom-ref": "580c59ce4832e049",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/NEWS.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "86762439ebfca233c0ac382b8d0891f39de70bf7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f410947e3ddd98dbdf630b23ce93a014f09a79789c7c1319fe511241bceb8826"
+          }
+        ]
+      },
+      {
+        "bom-ref": "438e32721c62f1cf",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/NEWS.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4930e1685fb5058c571f5151d0b8b985ef2bc23c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c4124e2ca1ee602b27e1275cb5c1ce905d8018a48f5fe96d40933426ae26e126"
+          }
+        ]
+      },
+      {
+        "bom-ref": "002223c9314f9a6c",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/README.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6f97553bcf63fd634f55c095c7d320fc5710a527"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "103388d45c31c59534c3c71378dd532a69d90b6fa0618cf41cdc123613d463ac"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9699ddec402b013e",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/README.hesiod.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "995889e16580609ff355e7dbf26d72685e4dc727"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "13e364163184406285935cea0fd0555aba252dc92e85ef72988c4c7e7617a0cb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7aac32fabfadcfb8",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2f66b2acec23662b3fb470afe50a494f7e0c30d4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2766740ffa0728506485e74f4c1ba493c664c3f26bda9810beac69da0f2a9a5c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "378a4194eba5ca04",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7ae4398742b7f55ccc4b70211ab3a1c7dc7c2de"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b66db2deaee0257c5a456c17ee3058e014b51d596466b8454da17936a38d7e88"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2717fe7e4250478f",
+        "type": "file",
+        "name": "/usr/share/doc/libc6/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5db687e636814b9460f1a0cb1e52d41d4003af7d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f5788886720a2605a946e81d571e6c8162b09f58d2e2ceb8d36e5768fccd850d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e201cbcfcb8021f8",
+        "type": "file",
+        "name": "/usr/share/lintian/overrides/libc6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1bc0f013a68bdf7f31f5bb556506d098ddbc4b2e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0897b1b340b6588f122f63908fb930a292c0b533de1ccaa588ae4b9aa0927b2b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6ea3097207c48717",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libc6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5943bb057661e612cfc905a90eb479e09191fb84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "293fb6b1052f1ddb34e91bfc1469cb7e4e78daa862f32e988d1949011cd3cdd6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5ce411518af94caf",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libc6.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aa08d832ba313bc39c44cbc7b5836fa97b57714b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "20116dc6824a0e4071e3f510f092cceb40eef36623a40e555741d96065bb1a95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c3a7af91384f314b",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/engines-3/afalg.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0ddb413fc807ae21c2f3659ced13f133fe263b1d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6d583e599cb34fa24f7c51dafdc2ed1d3096d1387a3e5fa1ed5190519f4236ed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01e6a9b5ca3c5580",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/engines-3/loader_attic.so",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e68372a4c72f9c562f358baab64c1bea22d27fba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4843c07df7601a915db34e94011d73a766cb8d01d054fa969b9377231f053b2c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a486122fc3a90125",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libcrypto.so.3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3292dbbaacb5ee6f15eaa6b09d1476817dd52d53"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff12f533992752a7d1f626154b497bbf12d44e875571aa2681da63cf425aaa52"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2fadf9a6ae4a3652",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libssl.so.3",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b0198e73aa4d12a392330be8d54040c46f205499"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ae8b21d13ce4031c3c43dbbc969cd1255d3366d89372aeedf1ebf801a3f44556"
+          }
+        ]
+      },
+      {
+        "bom-ref": "584956605d92fedb",
+        "type": "file",
+        "name": "/usr/share/doc/libssl3t64/NEWS.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b249adec42f79c7e0f21f718397bfeb85a1ff70c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "89f06e9c3b0b0a2d956552ef2ce2107a3c0a8caf2ed0d655f7fdb26ea16ca579"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f548172f71647587",
+        "type": "file",
+        "name": "/usr/share/doc/libssl3t64/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "af1ad64eb48dbb8f56bebbd72cbe95218e59bf84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4ee7a6042a6f138cd1702345c9641d018e1b5a43217c49ef1f4cadce26416173"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9e529509cc4a0342",
+        "type": "file",
+        "name": "/usr/share/doc/libssl3t64/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79b42b3712b1b8b62bc45eb864d20531845fe2da"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96f254358e813735c69a887d3c8c68cec900a3f89e0d64edaeae8230a3c776b0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "05299976d90c066d",
+        "type": "file",
+        "name": "/usr/share/doc/libssl3t64/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b936c38070ff5b477030a02e903cc7cbc1f1f11e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6a7da622fe0637a334d2a8fc470852d2ffb77d9a2b2f930f854e32a41ad6ef35"
+          }
+        ]
+      },
+      {
+        "bom-ref": "22ff34765ac581b1",
+        "type": "file",
+        "name": "/usr/share/lintian/overrides/libssl3t64",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b67bf31f583d19da3df4935b9caffbef07b532ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "418ab624307a41fdee3c70f79632449caad9b6407c2d63ad06443a80852622c4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3a17e5f4d320b505",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libssl3t64",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d109f79b9b099ac0d16b5fd0395841c9937b142"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "272c517b818100724817a62806f604e1b8b0fe683be534d08337dba11229412f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "86f6b509e3a7935e",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libssl3t64.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3bac632972e2d949d10949a0a0706826c866ae26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "de2693c2ad022b00a12d2393569bb5168bf45506c56b447efcfda5887222bc71"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be31a8964d558904",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libzstd.so.1.5.7",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "10d640924669e4de449e4a1bbb22f1e91639492e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1279c4edfbfb08878b5b7fb40d392c1bdc9b30100d9b7a019d4aefaf10d2046c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b4834f384973e53",
+        "type": "file",
+        "name": "/usr/share/doc/libzstd1/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3d44a83a2aeffb44818feecd891ae35875ba6730"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b0d4a55026eb5dfbccbb2ebeac75db9f848679958f6b50ac94192d35e424c75"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bbb23c59205efbef",
+        "type": "file",
+        "name": "/usr/share/doc/libzstd1/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fde4ce44e9d7377107624a9a73b2dd6e83d71d39"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9d9bc4945d1802ffe12cca4e3c5013839550cf95cfc53ddeaa0280827d45fc6f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "047c23c6b57e419f",
+        "type": "file",
+        "name": "/usr/share/doc/libzstd1/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30af3496fe86a55c6df5011d609261cc1029432c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5cec9fef4d3fa7e0371fbef4ec3fc416e0105dc2a9922117f84e825cb11f50f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "747169d76f8aff7e",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libzstd1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3cb5106c668d6d3ea5710d7e627995a904aea70d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3aa7fa6699ab7bc778a3d931d570a48553f4f3aebcd7db5255557c2c27a9390b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4446d836a626fa28",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libzstd1.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "46d195e73d50a5009e0c59269be844f7720aaa3d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0fe95cccf4c2ae34cad9be0f11cca08eb9f7bda2c918816988fa8806be9d4e93"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0f8a401d5c8388c3",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libz.so.1.3.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f92ec5fa1ecd354add3ac3874bfbbc2b43a536ac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6fe00acadf8119ff245855e5dcc7f26c6c0ffaf4bfa2baa88feab58f23727d65"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e8b1122b2f23ef0",
+        "type": "file",
+        "name": "/usr/share/doc/zlib1g/changelog.Debian.arm64.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed70a95f411ac38b3d52693f378d10433e93f0ce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "06a1cd9ca7015657943b00a0a38ef646e27a6db031f78d2e5d933ec3abfdb718"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9b9a96372e6db80",
+        "type": "file",
+        "name": "/usr/share/doc/zlib1g/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b564752876bb5dce5fbf27c7ff3b4f447895194"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c631c3743056aea5d6c114efc27fc9f53f32a75d3f33767f4d244746e8fa153a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c30dec3f7559dc3",
+        "type": "file",
+        "name": "/usr/share/doc/zlib1g/changelog.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "60d8261f9115e426a2af462431702458a9009155"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a697e1cefca8aa7ad377a5a46b941f7ccb8c15686d781f74c923c7ecf46afd5b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c9fa127244f02e15",
+        "type": "file",
+        "name": "/usr/share/doc/zlib1g/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "27c676ac10db9b80a5287200d6810e34edbfa201"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9e5b96d63773a5d177ba264254390f792be07e41748ebd94730981c6cac31cc6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "71f0489bfff4d181",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/zlib1g",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d78c3a04bfbbd82a17288bba00069691b00b9e47"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "291c96ee5aaa09ada55e367cc7a847da2f5351b2219f93b8735ecf4ce57fc6a3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6534cac23e59297f",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/zlib1g.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d8c298a346ba07edda13c9e11ace7dfb653cb388"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "617805d119f4aab94e57059a06a7d498d4517da55ca2bfd8bbdf0e4780a72fb8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bedc2454f8343082",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libgomp.so.1.0.0",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "62aef2435af87944fc085f8bde59db163ef4f5e6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a2286e5fa0f7601afdfae2a750536f409bc8c3cc5b0bb9e93a4afc5c3779a510"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed3d6ad3e22afc26",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libgomp1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c6e0e80029da337ae45b85ddb9f07453d13c4619"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b30cd089e46d5aa4363157ee67194f58ecdc0f2583ff521f7bc59112ff52f826"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1c2118839e0404af",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libgomp1.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "13edc65fdf9669b83f957b3dc05079671c74da84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d089967b53fdde90aa0025f164fb3f02dc26a21df7ede9510df34ed973588fc5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9866e937b1fba9f2",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libstdc++.so.6.0.33",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1aaaad742567fa74224616105ee0dc96c0dba27"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fff1f0050a33ddf29c44634c7639ac16e2573a61e3daab4fcc4c007b432ccf19"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9bb8e895255e611",
+        "type": "file",
+        "name": "/usr/share/gcc/python/libstdcxx/__init__.py",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "adc83b19e793491b1c6ea0fd8b46cd9f32e592fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "919a1bdd6661b7d2",
+        "type": "file",
+        "name": "/usr/share/gcc/python/libstdcxx/v6/__init__.py",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "07debee3b247ac4fbf776e891d74b95bb932d8f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "88b4b04c123fd76e303ad47a8b74034552a28e0c65eac77685afeb738037337a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c2ca252db3e88c62",
+        "type": "file",
+        "name": "/usr/share/gcc/python/libstdcxx/v6/printers.py",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f445b74e2eeec3add07388c39373819e4bdfb265"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96a9c8547fe0e7291fc0dbe8c481f84c95b03c0dba4780d18d21a70b91d2df5b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ddb2356f920f1e49",
+        "type": "file",
+        "name": "/usr/share/gcc/python/libstdcxx/v6/xmethods.py",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb7f9f3e2b1fa0625a9f89d09125c873cce30e6e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75e4daa102d918a9b2b1f6ccd0a11881e9f079d7da074e56f0fd3c1937b5fb6b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fd6b83f9e6443d5",
+        "type": "file",
+        "name": "/usr/share/gdb/auto-load/usr/lib/aarch64-linux-gnu/libstdc++.so.6.0.33-gdb.py",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b4b86252332a29e32ed118ce1494435ca758833"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "392e28361977fd0d2ce0e8627a71587810ed146a4955b317df7f2ba3d0cce3e8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a3bc4ee825abd176",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libstdc++6",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4e679eaf38ac2cd637a017e3253421428fd8762b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a9b70cb06a828f9ffea9c9329c71f69701982223c9a9ea713a35af59484fd2f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7da8cda7d719817f",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libstdc++6.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "72e0ad07f6beab2db8da9d5e807bae1be31863d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "58a76f387630725be73c3f6076a4cbcec106ee3eb3cc54747a4a4d9da3d35351"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3cc39bd1e5ee0258",
+        "type": "file",
+        "name": "/usr/lib/aarch64-linux-gnu/libgcc_s.so.1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "52e81ef4558e3693d76b6c06978c9ea1faa78e31"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9a146967dc38c3820c5dc21c3209812655f66b6551264072b187bd0e787947e0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "344badc429bb7895",
+        "type": "file",
+        "name": "/usr/share/lintian/overrides/libgcc-s1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6a437a448c534d9b9fff0b406a7569308b81f73d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eed87afa7d83880a25ae5a41ba9d98d89a1fc2e2e3bba0f4d5c3cdda21a457a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7994cb3f4d47e6fb",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libgcc-s1",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c2af94c4a873496d721c8f9aded9a4630afa97a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3acca2dc69993457f7b4fa66d1e059335bef033472fa6b7fbd97bef88d9b8362"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b3b9154501c96f88",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/libgcc-s1.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "22b20b28dabb9514e24ef5295ecfac02e65dd4d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2ff73bb867856f54cd6492ecae4178b22de4db498a3691ef6c12c846d335ef87"
+          }
+        ]
+      },
+      {
+        "bom-ref": "17d27299c79cbf94",
+        "type": "file",
+        "name": "/usr/share/doc/gcc-14-base/README.Debian.arm64.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8b57d6f55d51253125fd4928aa3b0b92ac8f6c84"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3231c5267f2095b57011b80cdacf3169bcc9bac472bf032bdb59195eecd70a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "08ec27df460862db",
+        "type": "file",
+        "name": "/usr/share/doc/gcc-14-base/TODO.Debian",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "98cf44e59ce96c1e737613d13cdc8944060cd662"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aba726eeeafd7ae426552559759c83ee93249d0d9c4e3e19f146fde6d2cde448"
+          }
+        ]
+      },
+      {
+        "bom-ref": "799de7ec0f9ec4be",
+        "type": "file",
+        "name": "/usr/share/doc/gcc-14-base/changelog.Debian.gz",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "afd297c5dd437b68cb230719db98df094ac02b18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96566a2df70b85708bd8edf8a41c5dc87eca402199f2480df23abe4be4a92757"
+          }
+        ]
+      },
+      {
+        "bom-ref": "51635ffd453907dc",
+        "type": "file",
+        "name": "/usr/share/doc/gcc-14-base/copyright",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2891df267ea14e7723fb2bdd705858679660fd97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2b0f68ce753b089",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/gcc-14-base",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f84f36a84a149d5b1a70301e6a6f802b0bdd3d34"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74f23a7441b165dcf42a8c6736f12d6eda1288287e0ace3f84249c2e4ae4a9cb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "37d59165441372d5",
+        "type": "file",
+        "name": "/var/lib/dpkg/status.d/gcc-14-base.md5sums",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "beeb1f9d22579b4697b2bcf592b4b138002d256d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "757887e78c73a7fc16578e96e336bf8157eb2ebf07582d59306cb32ad7d371f6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "06647fdebf7faae4",
+        "type": "file",
+        "name": "/nodejs/bin/node",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "825b74be8d7d3b293bf3ba18780f70568df01f3e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d0b9f94a9771bba3c30a54f0aee622fa0bee37be684cc1df6da2d3448606d98d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e4324f791c95116a",
+        "type": "file",
+        "name": "/juice-shop/build/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9ad576c8901f4b6894aa994f4db0015fc845ff22"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2c19a523f81507522144bdebe6ddaf6165812e6c4a657efd48f64320ae8367c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e15a24b4fc6c7f1a",
+        "type": "file",
+        "name": "/juice-shop/frontend/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "272f84f582f7ee72700a9ceac4094bc22fc681f4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "94f162f916c9329de4e002d7bcad8e53694c92ec3e97a6c7286c7f0c3dfc37da"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11a14efc018c13e3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@adraffy/ens-normalize/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b4b51cee01a8bfd426a63712cf29e2c60ca79c71"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9cdfe2227ce61c1a701da4e62ca73f6fdce1fce6f076015c18d420efb8c7c833"
+          }
+        ]
+      },
+      {
+        "bom-ref": "65d6d5df0fec3242",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@ai-sdk/gateway/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "879925e27cf9cbdf8e408d63df9d1043d1c90d6f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "74a5fafcf0d6cdbab041f12727214b50f7860f303fb6b44829b36053aa3a699c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "05adb410819c1aa6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@ai-sdk/openai-compatible/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1677d0330028fff0c5c1f622080360f1aa4eefc1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "04fc0d170834025d8bb1a1e7ae915b740644301700c1ba37e3de9042426ff066"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f5ed58f7f2f653d1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@ai-sdk/provider-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6eef84e1a97bf27c284928bfd1335dba7f5fc2dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a36dab5baf983cfc9b8c73bd8f38f484c70847a3878356e06910981703d65e4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1403a4b36a2f579e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@ai-sdk/provider/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ddf7ff73e95991c3745f512dbeadf9660653e207"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b68e8fcbec4e0d780607b0ad5a2baefafcaa41416ab5056b7d1b829a5e58c503"
+          }
+        ]
+      },
+      {
+        "bom-ref": "00b4707bdeb934af",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@babel/helper-string-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f02c656ee72f28316f9cb9641fc95fbdab02a2c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2ed21f6ba1c3ad4b49e247fc9b6bc3274ac7160613879f4fd6e770a53d976d8f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9cb4863ab8bde929",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@babel/helper-validator-identifier/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd051f4e7b0ff3b42f8e109da06e98bfd66a0bdf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "716eb3e9a849686b727f4c6fefb8aa48c2740ce18685cc8c73922be0e08b11df"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a26f713566ed7c9c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@babel/parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d5838c6a5931d227997296dd2b918066488a464e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "989bf032e3fd9714dcbc85bfcb012314ba674f789cf5aa2fd6ac3bd46401df91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cbd09883ed889111",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@babel/types/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "453aef876044b751d304e1d39199679dead5f8c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3c3c04e2170a1015f2108af564b5602f0962a437a03dd3bc19782bcf77476b20"
+          }
+        ]
+      },
+      {
+        "bom-ref": "89418097f15ab52a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@dabh/diagnostics/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1c351ca94e65e029133dc4a45c98b008896f355"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "407f69c7a7f98cd50fb9fab358706493c5c07e6c56cb90cc0825fef280e04ab6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eb4768a17dd59cca",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@fontsource/roboto/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9aff3b16e32119d59106920948bb2c103930fe0d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "225f588d35e158c34229edbb25c0f3829315cbd80ff8e7f21520cdb9f731c754"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01309be88653daf6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@gar/promisify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "02e977a876bd7e3217381e7ba9d2cb07f379d274"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dca651c9d8bb01b3691f5c6e2ad4be9ead2b031c27fd9d545c8d4f546917c6d5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4e1bfc50fd41907",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce200865f7a4839de6213072c7986484139c50b1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a58f1d6dbaca116f4aaa83906a0a992da2303a07ca920b2ce877573988eae352"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6821c2709ec23e19",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "238c48183550d02ab5c0dd37e13d57006dce640a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d437c292bdb11617",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "53ae7a1b3953e86624927fec8421d453d9c88e41"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07870adc216d8fff",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c109cf2dd51ea9d89ed05e64161782df7559477"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "228b214dd06ca80ab3c36e2b890a8696a39cea65585f6d61498c922c615e18a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2d4fb9d2efbc465c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@isaacs/cliui/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5f8f4c1e3bf1144f3a52c51bf040d843bb2a8b90"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b4f9cc8d09602a487dea1c227ce24777cda87e2ad8a29ab9f741214ab78dc065"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3e8e037e5687f9f3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@isaacs/fs-minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "504edba0a95630e08edf150335c2fe914825fc5a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ab8c1c2bce664e4c76b1937fa1a28f00ca5231a70cf0c1f78dd473101a9d2a88"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5139798267f31862",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@material/material-color-utilities/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1a6e7aa5519862989bf58eb3a85aef278dd677f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bc6d0c72745cef5488b2eaecb191eb5b8b91036d21e5c35985fe9f5069c683a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a0986a1f81c958c8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@noble/curves/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0fd9f24eefe764a426a907c1f677dd70068dfcc3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bf61194229da9a7fd331fcf44cc24f746b5cbaefe941a312215376584c269bd5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be74d376a8381aef",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@noble/hashes/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "696457a8c87f5f6da7f2844a140e72f84b782b8c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d8203c66e91a9e6ee510facf378a2c7420b27139360132a257010c2e5f091bc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "04ab6e68e242cdb2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@npmcli/agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca472993ec88d2b98a488f843d480575f24092f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d67f4edf03680423c43434e3b28902feec2a136da2e85355034b174ba286828b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7c929de1f6232bbd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@npmcli/fs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf0302511d637d6a1f8b5e49b3d9b42210c7b8f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "028cce261f1b1840efa893492a88911e0f4832e29b46ae0dd38eb6ba5ae85856"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8a42156d4d3e863f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@npmcli/move-file/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec0700462dfce89024e67c0437eabca858407176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "83be0799f38c9ee0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@npmcli/move-file/node_modules/mkdirp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "46da394a85c88f3288e19ccd89c03174e1360c52"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "74ee59758df84c7d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@npmcli/move-file/node_modules/rimraf/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed8ec0789d4558ea2492b653fd0be9f16b90020d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "39395ac9714d9bff",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@npmcli/move-file/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5d957f7d5bfb7d98d91c207e0d0a2471fbdef3a4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8fe75d037af2bfe77e1e675a77015f3522a2fdaf0a638907c9a925ee507e9e90"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc9b6c94b253b5ee",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@opentelemetry/api/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "757db9254518b8ae5b5d6c5492c524410ff00196"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c0d7c72331bc8cd456dd791f2f429ddafa1d0b5b8abeb4104e6deb12f18b4a86"
+          }
+        ]
+      },
+      {
+        "bom-ref": "59339b15f092de70",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/core/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b604ed4b65e5f82e69aa436ff70a119eed8cb75"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3e5dead41ab9ac095b3be44ae6e0c37f5ae831636cfce1abdb56ce0c57e41a8b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "50bff2cd01476b55",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/hotp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "501e485e1d0a89be763043557f4083b3f72c3d5a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b477349c8cc2bf83f5f593e15c26f48e9d12a4490d42994db5acacf8abb3acc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7dad14dde6f6bcbc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/plugin-base32-scure/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "82855112525f4ab2b940e2281a9fbb6e9b96febd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e6205d670f1a1210ad004c915ab689536179ddfd667d93fb5d304087aef96564"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b8384915141e471d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/node_modules/@noble/hashes/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0186cd2ad6472c0d911913d93c60f35fd62d6e0b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df2580ed1896b0deffc07437c6a8d83fcf233e4c4c1e77c12e491563222c4719"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d73fb24c4164cab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/plugin-crypto-noble/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0f9c4699286df76536177a6ca6967cd92456c68e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5baca1740e78d476073ff1731b99e35b0611c12c494c06dfff1d4278e3c5d90c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9a5096ad979ddec6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/totp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "658b331371efdd4be9c8012ed7441575a7236abb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "10892f195500ea44311121979ac424f38d31972ec1a69ab762980eb1a0a13050"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f1c4b8374352dfa2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@otplib/uri/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "70638d409ca6d13f8cd6adda67a4661446741dbf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f66b3957f6e0fc8c5a04fd52262416d778696cce44df144a90f6ae19216850ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6922ca6851e37f1c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@pkgjs/parseargs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0dd3949ab9157869b8d3387f50a149bca2638d73"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c52af8cea1efc18fc306336d6ade5a1d8d9ccd8916a5d2246bc585a92635901e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6fbd6e20077457fa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@scarf/scarf/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d33fb93dace20b12286fb4b7f1682646af3f82b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f19876be1dc7b05cb55fb3ab06c20cc0ac87769287b3aad6cca50660a4b314fd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7e0c73f269bafa47",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@scure/base/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9fc2af29fd8cc0d1358820a4fa5a88d1626c9037"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cfdeaaeafd8ebfb6b380e39348d755654363980b42903de26a5d70e5c5f68498"
+          }
+        ]
+      },
+      {
+        "bom-ref": "794555372a1cbcd1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@sindresorhus/is/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ea4d75fb2542edc23ac23515566932977d948a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55307d8c3e660374d48940083df93fd8f3a865eaff6bc34b5e5e455be718d439"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1adaad9e5e9ef147",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@so-ric/colorspace/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bf076b63871ce44c3a145305715ab0a0c4278bc7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86b3cce52cb2f3418fb1bd20578fd194de861d9e5ad7d9348bc577a71bf03100"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cacf44e90e635796",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@standard-schema/spec/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ef122360f134701af5258c890c303eb6f487f92f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "58e5bd75ddd0684c88b07cd799585cc72a37fd6efb8ab0c936d49e230d5164fb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc6100bca3db1027",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@swc/helpers/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "05c138187e3e03162e3013e7f2f13fc18c0c2fff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "135140ae9edbdeafd3bd5e9c369a6828820f74ab2ce66c78a54743814da12282"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7bf6c093c5d14495",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@tokenizer/token/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1a93635fac9b224d4d9cec1fadb28b3086d283ee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a677763aaed22462b4f9df2526b1038cef3a90bc6cf80be27b4e65d0f14472a9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2f222dec5fc60ff2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@tootallnate/once/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ae912343fcf0eccd8a5f754a72bf2e9eea63a176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "91391dee2904a0bb0de498cc0a41e020338d671a4c85f5bcafa15dde73eb26fe"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eae57c9d26e35036",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/component-emitter/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ccdbee7ccc3f57a596e334aadea037c5c1447b36"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ad6d8f6ce55d30e47af416a460b07e27d39c8d953356dd708f8333984328ac24"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be6d75fe5d4ea56c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/cookie/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9a6923a33ab098b02ad284c092970aeb6b4e0f91"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e71f9bef0642169c02de9e503e801f58aa259c58bbe51451a6ed618424f4048f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9417fb823002eea7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/cors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e40b9fa3d6c69bb63b0f8c946c073b445acf32b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "668eaf9685f07c43881b376ddf4fccf6d1896c0e46e528b0a32c383e15237271"
+          }
+        ]
+      },
+      {
+        "bom-ref": "43656c768b1e35cd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e327bb983e50e3857d539486a379ad0d6a8a3967"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3593dbd35512e263c1a4ed9e30545e7f8ffb2f7efabc4e536dddc0868be4e872"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fb20d523732d839e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2c98c18c958411b8b7fe5b181770ff00346947af"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bbd8f5322ea82216e826e522a6a4ec2ed3086b57a25234d0044673eb374b8e2d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2ed78110c9df7608",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/node/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7787cbe72d49a1174ccabc243e7859843a2aa817"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e6b573ab97177c4d783cc85bd1c369d374ef242f461e8c0264c58327ef1653ca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c9d4efee8527c6af",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/triple-beam/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c8ff7e60bf9d5507804b6906a5e020081e5f68f4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c8ed1c5130fb111dfad72c99a414eeb10a3171be8076aca86307b4d80c9ca079"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5566c5ef0f2d78d2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@types/validator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "36a07478450a7244efc8318bcdd5c3363dbcebdd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "40e18e86a1328233729a4b46b2d636ff9ce4a0144123e27dee851d5ef9f4e460"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ea4eca02cb9841be",
+        "type": "file",
+        "name": "/juice-shop/node_modules/@vercel/oidc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3994d0ee8f9579a315dfe2198e4e5563cd5cdb8b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "989edf56a27f7fc414d6718aad5d5d69e83f14ef14eaacd2b3e59b47a67a51b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "10f7528bb7d6f51c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/abbrev/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bfc3606e605421f81936c77f156694df03ea1f55"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5bcbdff71c063d5177f25fd3a5c7a6c2a9d565d968765ee3a1e73449dc0bc671"
+          }
+        ]
+      },
+      {
+        "bom-ref": "69c7d253a56524f3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/abort-controller/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1919f0e7e241c60fff52bdd87df08ceee790ba05"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d64dcdcf9d0a1d045eb6bcaa5013d486f15527a3668e64b1155839a797da164"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4b5992f5fea424ad",
+        "type": "file",
+        "name": "/juice-shop/node_modules/accepts/node_modules/negotiator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c1b22e6ecae04b514912326957e6a205b015098"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8672e91f7395ce51ec789d883d7f7d872a40847bb83a6a3f89c3d1ded39e55d9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b9ce693503c3bd9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/accepts/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "131ba4d63747e6663a9c19409e43ac034bd532cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e5716d5d939db08c5c28ec6ae86ed67be5320f91089e2673fca1c5b876e57aa3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "388f5efc7eff115e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/aes-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "02af0ae260ec880f2595635440d69184dd3ae979"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60fc352466697ba86743b36101b2157cf413ac0e7d317788548993600f10cd7d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "531bac5ac0808031",
+        "type": "file",
+        "name": "/juice-shop/node_modules/agent-base/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "126adbedcff6faa6826eca63c75e9193237ab10b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a08cb2fe1d2b788e0a7bf6a9b7597dbeeeae804698c2fbd15de786d284d327c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb293d70e322e077",
+        "type": "file",
+        "name": "/juice-shop/node_modules/agentkeepalive/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "56d77987880ed3be6c5c0a6370f7fcfa1dc2cb58"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8bdeeb4c6f66678c3a97b2fbc3a0c93b9e03dc021e85145859e1c72be7526822"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8e47c714bdb22be0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/aggregate-error/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1a2aa44c34e2912cc96c75d0f1c2865a23a5e6f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "903137f787b80f82cdd11659b386966fa716be537e81fe9d474ef04ea0918f26"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b31ad5251d1f594e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ai/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aaa4507d92144a156d8c6c97c5e91e45913d8350"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d0a1d23f6547b777a0fdabce6c92bcaff7fb5db463235d8b2b814da7bb389d99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e47c5bd870e5b43c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1b78e043012e1ab5689d57377093e88f1400677"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b2dc166f2b74d5098bad38bdd3dd2f4d4775c626199872f5e36dbb48c40931d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0ea041a38219a5cb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ansi-styles/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2abbe25af4f77cdc6986e0a6b14e9088aa6d3d93"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a015c815240c949222d5f474721b5888dd9413fccbbd91ab552bac134317f76"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e75288224be73a0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/append-field/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0c83d1d2369a3dac3edce107c0e7ca22f5d853c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e8af240292f03363891c9fbb252d78dfcba4a4cba574d30aace32341d2fe7a22"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3ad0d6891edfd77c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/aproba/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a705c382734b6694d6c98a8825d7b38d905cad58"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6dcea0602535f88458b2e93b4dcad98451fdf1ee5dd5cbe8538cad12c3379068"
+          }
+        ]
+      },
+      {
+        "bom-ref": "129a66102f936600",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archive-type/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e30390a94384a39e4b46e8d55ea92f4a68f19c5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "731f325f6221bea8b2168c6f207296f9bcfc88f4f3189f38ac126ad663feb671"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2dc3923723ce69ea",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archive-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4ba4289c5ce1187cbb36a9debbea25356b9bc864"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f1d1cab9005aad5785c5544a117accf97bd896243131ebe6eb74b0a5600fe1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "73fa7431a10ddc55",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec0700462dfce89024e67c0437eabca858407176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9d95d7ae899322c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archiver-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b87a5196d43a0b967228fe8975640cf4eb50970e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dcf66f1fe9ce29bdcaf6b866e878365b8b1ebe76cab20149511529679c847ca1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "29b551e4cf5f51c2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archiver/node_modules/async/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5da55b9a896c8eed5f30013777ffbc8181bdfa67"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "670c381f9c93c77c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archiver/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec0700462dfce89024e67c0437eabca858407176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "98807851ad6b1731",
+        "type": "file",
+        "name": "/juice-shop/node_modules/archiver/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "66e8510aed54598ae1c823c8fee5f5a328374dee"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b64c234b963198bceb01078344022ed411c86b1239d58aa84ef93a2f143b5289"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b20bd365983cefe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/are-we-there-yet/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03e43bddeaf901ecbd2f1d09ee3f1efdfdd7da61"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a68108794c8c3b8c1806785cbaa94dd8a338907bd4676d2b54a4216edfa73b56"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75250c45d458759f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dee1e26f14c8468e2e42814a439315ce89ee517a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f7ed5a0dc9b4c939e92be6acdf3bd83abc3d7e5def9c1307f3c9f53bd7cb2f8c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "92bcbd1d6e952f4c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/argparse/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "98f9959fac3c999adf8991e2a4ac3c874c93f00f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "48b848e56c31eda738f76fb8573ae1fe0012c4b1ec9d9cfe8783517a142e9531"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c7fb288c7965acda",
+        "type": "file",
+        "name": "/juice-shop/node_modules/array-buffer-byte-length/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "79c934e5f793f408bf9e7d6cdae3b00479c8f882"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "477d1c0349dfbe051b3bc99b289a8360570264a1731f73e3c594ed8b9a3b6252"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c559248b18567f45",
+        "type": "file",
+        "name": "/juice-shop/node_modules/array-each/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee5fd48cb545b4345405c98bbfa05dbbc9ae1623"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55d0a75c82606adf64ec0f98d93db3920a4f3c882a253c10ec58b519c336e72e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4e671febf3e6523",
+        "type": "file",
+        "name": "/juice-shop/node_modules/array-flatten/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc51b89d0fb7cc640a0495baa4005364e83718c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c5e0e10cfa23f163d1fe68aa57a881d09cac39d720e1361c697b86c4d33e0f5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f820baad3e87eda",
+        "type": "file",
+        "name": "/juice-shop/node_modules/array-slice/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "498e1b0981039be5c67000ecb466f0b4ba520bd9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "456b16091f29b8d2343819f68f2dc4f890bd234cd9a2e27b30e28990663b076f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "94ab408cca768436",
+        "type": "file",
+        "name": "/juice-shop/node_modules/asap/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c768bb58495d19e1d5d195d3f212204714c7378d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f69d11cfb6add01ac63fce2a47e0b4596d667d8f43d89853ac27aab06a9fcf28"
+          }
+        ]
+      },
+      {
+        "bom-ref": "525d2394e0255eb8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/assert-never/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a38c1ee73c79bb5548e0119f2df68a26b6839439"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ab906b2a34e8f397a6006e587f5d716d24ebb58cd82eec36cb4e3476c500f78b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9bc2879ca1738c1c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/async/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "edef722d2ef943350b398c9c11b1fc4e2e4928f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e010fe63aa861e8a60fb8b9d3e7fb5205e3b8d6001ebe3ff95985996abe581a9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9826cc1cb6b4e6dd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/at-least-node/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9271d65ae400dff5e800ae6f031d1bf6f58252c6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cf26ac7a79b89eed8c70f7ee8b5195ed925f535b7c52577b9034702e7117fbc5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a358e1553103b29",
+        "type": "file",
+        "name": "/juice-shop/node_modules/available-typed-arrays/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "13e400badea570dca072b1116d9dbc627c94c4f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ffce2bbb0b85b9a20bcc674e4c78307ead42af0299e1d28a9dfb249566e0a319"
+          }
+        ]
+      },
+      {
+        "bom-ref": "126f3ec2ebb9909f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/babel-walk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f10c8c76a7c340e00bc91168a1ff049dbad7d173"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1549b64069d6ae24d7d91a466204624ab1509f12abb7924b6e0b603323d34d87"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dbf5ea33735fa806",
+        "type": "file",
+        "name": "/juice-shop/node_modules/balanced-match/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ef0a0d2fd68c3396309ab54ab08c5f8d362436ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b30c328501dead1870b894ad604405b2284b571c1f12664cdc61d92a2e3397c2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c6b81297885fecf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/base64-arraybuffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1853ae06931a67b3eb8bb76c801ac258966ff74e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c137a784510ece7d3b9b1d4de59c55a0594b1ed51b30c9581e8279cb705b0286"
+          }
+        ]
+      },
+      {
+        "bom-ref": "372cf503143a2853",
+        "type": "file",
+        "name": "/juice-shop/node_modules/base64-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e17d74f1f7f0fa4bca8ba3a2cff79b34f64718ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9758f3ab8c45e07bb9a368e32f9a8b3729623bbf47cbbb205b32d674ab2a91f0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "673bc497a7465a27",
+        "type": "file",
+        "name": "/juice-shop/node_modules/base64id/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25c444de022a4b4bb9e98d09bb0e8fe5a66d1b9b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26250fc512e912fc8dcdd1728025c79e85cc4727ba7e662d0ec0700f843efae4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e2d451167141373",
+        "type": "file",
+        "name": "/juice-shop/node_modules/base64url/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30611c9388765dd6c0c1291183460b5b99ae40a6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5d243a76cc698b4dbf9eeea3f62dd96719753b7d369860b6c8722146f7b83c7c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a5c83d8cc73c6ac0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/basic-auth/node_modules/safe-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2dbf60b08a148c64",
+        "type": "file",
+        "name": "/juice-shop/node_modules/basic-auth/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b2df92eda0861bfdf03b3689d8e6a53bbd607901"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eacbd5624f044dbbdd9daf971ee004012e835368f7002f2dee742275e463eeea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fe5a140886e9223",
+        "type": "file",
+        "name": "/juice-shop/node_modules/batch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5ed756847feb09f819111e18a8b51b6683ce916"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8b7595e8387929390fa5432f184e98059e32323a9ae3757fc0d251f44da22f36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "29c4ab4f33cd41fc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/beercss/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c4b84c6c4761bcd00ec2f252b16b0f1b90a864c9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02bd416d4df9c80e93838afc594798391bfa396fbb87eaacf4ce30908ae2ce9f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b1e74762afb1222",
+        "type": "file",
+        "name": "/juice-shop/node_modules/big-integer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c504e3cd069e16c72065b57157c1a923ec93ed7b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "720c9966ac00b6e579aed1c8927f9d9a98dcd4a0cf738276e83899e023595266"
+          }
+        ]
+      },
+      {
+        "bom-ref": "37677ea5c1e5f59b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/binary/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8cb90d0e380085f35eabe6b378749d8402f9db2d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "355ec61b56448e3d9ad74b286fa07e1b18bcbf153f45223b1a4f68d86bec891f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fdc5ad4bc35eb7b2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/bindings/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14bbbadeb1307b1f711ee10093d5b46a7889677c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a87721fe406e1f1798fef44d697b46ea1efe346fda118010334713346ee4207c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b61ca112dd4b48fc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/bintrees/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0541c9772153e0380217e17b877f3865ffa176ed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b1428f5f1084ec992b386903254420e8bbbd3cc9b3482dd8a8a031c749b1c5f9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "89538df7b14a9c96",
+        "type": "file",
+        "name": "/juice-shop/node_modules/bl/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "95c3eee39930a1a112884e039aa18eef6440528d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cac689c32b3053d3f3ad5fb36209c9a6300eecac11e258daf9098cc9974460d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "27803c508fb47d21",
+        "type": "file",
+        "name": "/juice-shop/node_modules/bluebird/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3bff8f918f77c01976fa2bff8bb461bf23783e55"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "06b909dc60508422d664b7734fb45f5466bfcbccff796db5413fcd1afb194712"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5909dbcf8abf3a8d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/body-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "50351230f348a07c5f98fb390f78bb32d23ff589"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "387e86820743b803cea33ff5ccefe0f9b7dfe7f561a5b2df5b98312c68d27e79"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7768c766b890b677",
+        "type": "file",
+        "name": "/juice-shop/node_modules/brace-expansion/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "494bd77ffaa1fc9d904a930b9e6adf6a12fed472"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "14798eb9b63a84e9243a616a0bd25829e766a4311e19603b1b6df2dd8c551862"
+          }
+        ]
+      },
+      {
+        "bom-ref": "403a905e568490c1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/braces/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "124d44a7e3c5fd1b2370ff51929158c7c39c46c2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56f08b888a4f30dc7cf8a7dbb36ffe92b737912ba36abe9d069d32167c957ac7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "83f536e76455d362",
+        "type": "file",
+        "name": "/juice-shop/node_modules/brotli/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1f95a73a0930da325211f5d256c3210e33f3c715"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "387b47d00ea96cab9b4c521629fbcdc7621053ac061812526f3c69700924cef5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c149b350cb9b7688",
+        "type": "file",
+        "name": "/juice-shop/node_modules/browserify-zlib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b76ac0de775f96ff1cf65c9a7f2892a5a6bc3f0f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "85034e889a63cb57e947d2ed81a87ffcb32831f7854a2e2648eb96ff56b10b91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d595ea7fc2f4c330",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer-alloc-unsafe/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eac3922d78d7c767750da439f58b88df8966ddca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "abd77cd9f8e32a213714c6a188c62a59d97bb9359824022db89f57da4949a549"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f34285303aea11ad",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer-alloc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6acc40da3b381363e82c3d32b8b64510d6627ba8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d607efec5e54b94b612bd7065186e00f1591fade12aaf41a170606d02f6ac670"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab11db294e6e4bba",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer-crc32/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ec2ea09d6d0b9bf7e3ed6e75af3d50bfe578902"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f94d0f0c1be8f8714670c5fee03899bdb6485d430236d81726e24012a3696e6e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe26e224140d9e7a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer-fill/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a57438f89e767aca1edc938a71bbe480917ee65f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "602a10e946f2f5eff5b19781d13fb3b589babe12815a1a9be4c7a673eb0fdd4f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3af0c1b1983512fd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer-from/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "49b8d27c728855d92e2609b2c67e82b89f57cee5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f7cde31d1db3e71738045206397d472e1f12513643ba4b9fd60ea337f22b1e3f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c7d52ab7a6cc3294",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer-indexof-polyfill/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "981d326c4f01015129658b464df7d98938100cd9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cd2622bc8900ccc51417ed40ae01922030eaba84760b5aa6f820b4c431e7ac65"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cfb2092f0946c9f6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b48c222660295ee0110538cfdd70b220aedf800"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5af7b62dbf5575a301cd13e8616f1d7d9cff3c90f9fab7bc3d6a1f4fbfee94eb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f1c18097274941a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/buffers/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8324a9b6635486c55bdc9921641dcc039b2f9528"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7091616d3b687b0de9dfbc6a1f8ab61e01742a3ec87f977bef64d1f299e231b9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "383132133e311a4b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/busboy/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b1d7ef4a9a615c7a947a39139af8edf1972546ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4faefdc1fc73a2c8a87dfa0cc6ca3dc3d9e518abf9b92d84aa495c59b3e20c92"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7f03dce0e5bb179d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/bytes/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d8fe3e70eb4ecf4bf58385e4b27f89b7ce656a28"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "99b21c09ce812dc76a06cd87c4753247cb9615c6a8501c5a5a9d9caa22ea2d12"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f1a9fc5d499afd6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cacache/node_modules/p-map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7afd4bd0f710b2b0c099a22a646cda6fb927688"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3869a3eed147c70e77d2faece50ee97e7e55b851e8f46428fe71e218a349237f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7e182075835e17cb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cacache/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4bfa58e7ac62a86d0f86b54faa34f063f3344a61"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3b4d9ce8c3a3f853d903c06b5ec38a06c8ac9a2ccb236bf6a532d92cfe1b07de"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e27d34645929393d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "000b39656a452f8e4ddcedb94597a6970c3f456a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "841d8ae966b0f3c8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6a175397a93014316dcf454724d6f93f2dac12b7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fa9898eaf4e2fb3ed3e0201cb1c40df1fa7aa67fc2442cb87827ac1435dd5d09"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0b11b6f1d8ebb7c1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2315bf1117b2f6bebee08fb9fd639a00ed7f099d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d86d32aa7e20779ba4ec8884babed30632cfd1cf193070eda9d8ef5c8640c1db"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8ea0d757193b998a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cacheable-request/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9ce876f09b4eaf8362aed671962a970175bf3bf5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "45bc898c23761b5ddd1fc7dfc1c09663969115ab867496af0fa075e71ed22c68"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a1f4f1fde53ccb1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/call-bind-apply-helpers/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba7d54557351d8746e4d2f88e7d4106ca4d0d541"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "59639b628c6846f674857c6a613fd47e2e4d2a24036cdf0f7a62ac634f4c8a5f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "016bd9fb12def769",
+        "type": "file",
+        "name": "/juice-shop/node_modules/call-bind/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0223fac2c7e7a940010416c2b34a562659d9ba0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c11be8b7f9bbe367c27d42fba734b8226c0b15e1e5e1c2d842822d9791f053c7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7ab03480025149d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/call-bound/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7c7c20ff22ed55c0f73a9ca1e378190b9ab3ba29"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dcc8abb3c4ad3774234272149020cb36d7b1a3d377a419454d1e7adb368dd9c3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e29db01d677ed175",
+        "type": "file",
+        "name": "/juice-shop/node_modules/camelcase/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7b4c16368eaa4ca5dba17965ea8557a35368a0f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b6d533c740d144de4da1493940b541978a77aae9d712dd0d609f60c58c83a73e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ccd061c7c2649dd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/chainsaw/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1208fa90fe3f162e1a72f3ce3751b66f6775830"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51910ad64abca4eb8c2c23abb2f713ba5220db89ed89c9fd198d27241a5a70ea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "84a99bb43530d1f8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/chalk/node_modules/supports-color/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "12db9c2598721e751dffd0b42a20b7ae419b20e2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "34c434b27dc21bd0de7b5edca42fa0d9ebf72d2ac823c72865a334cb8fcfb9b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "41c61a2e2dc9e704",
+        "type": "file",
+        "name": "/juice-shop/node_modules/chalk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6837c455c887920ad9b0cad624aa4b9b51625fd8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "80052c957e397ff669429ea957c2bdc792578c2178866f7a940c8eb975b5ca91"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b62396efdc553409",
+        "type": "file",
+        "name": "/juice-shop/node_modules/character-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a1b981e621b2868fbdb14e10de12ceea86bbe82e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "49974b723e98bec9dab8641bca5ee468739c04a0b7fcc501d762924f32f80aba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "83f4744a00d992e1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/check-dependencies/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0d5968e7c7e3727e9c4001180104b0eddd93cbd2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "94e24419ae07c9befa0ddbacbb12f26e030a288c78c37db8f5b62558ce3e8620"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f0589ad9ae4160e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/check-types/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f424a387a8b8c162e56279ca5259b40edd9f522b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb5b3c004a773d1927ff110d5caa2080a6c5a89a0f61612d251296879b46f62d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a82d5ef619e9fb78",
+        "type": "file",
+        "name": "/juice-shop/node_modules/chownr/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc7d452c2e7e9b57f311b04f8b5826656ccc8e1b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4300e90fdd91ec7035047473c60f880251a9801bd786302729d4277751d3b948"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b041ca649e9af449",
+        "type": "file",
+        "name": "/juice-shop/node_modules/clarinet/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4dc5d68200d25cdd05e4e38fef2ebb6ce2b6b299"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b6ed9b595f76a6c8e4a7db7cae4e7df7beeeede69de0e9908a69143599be1b41"
+          }
+        ]
+      },
+      {
+        "bom-ref": "86522d2d9e8328d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/clean-stack/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4783e06a89ee21c7109f053235b03211ec87f5af"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9b4a4a5cc61a09e61aa1ce84bc68c84aef90abf9a0280d09214a89189257ca7a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f7088a958b48b3da",
+        "type": "file",
+        "name": "/juice-shop/node_modules/clone-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c109beb613fd2573d6b8ccb99ed48f2b25360e94"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c4ec09512661e52caf27ee747116d8104fb7da25c7fbe82ffe760dbdda99e63"
+          }
+        ]
+      },
+      {
+        "bom-ref": "903ad5ca99c324f0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/clone/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0fdce1636b3aa8c1df63be2fdb3e3b66066b82d4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "07e9c7efd55a99cbe2909d1fd46b032b67cba6b493d1fbc974fddf4f2adebc83"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ce87336d3c40eb3a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/code-point-at/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b223a41679c19b6eb58a4ebb29c7bb5c23ffb2db"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "25069e9b754306d51bb333f034a741d99e052bee4c99d13ecdba7f485bb01749"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f2818f8a66270425",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color-convert/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "799d15c0afcf7b320069d0734a1806b3062da05b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b19880ef7c610484649d11309820cd55c8934ebc4bde0b37706e94483bf2bd0f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d16e82c1aa86b61",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5aa7aaf5028aece2d7a920d5644c25c87723d203"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "522669bd4c785d5c372377f5b139243f5fb6cf6335fc9df0e7c2d294b6b678da"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5705f64503a05431",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color-string/node_modules/color-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb882040c18e17fb8cbc49f064b62796ca24fe48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "816c067d75efb40e8daf99d11a40029c95cb3634bbaf8ba1a09505c56705ab5e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a05e1d4e692c5526",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color-string/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "18e0a9c366ada5dfe0d8d04698e3cf60f3044d5b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c07e159e468107920cf59dc92a06185593c180c2bbf12cd6baf9494da68c8d35"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d5c972262fec62fe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color-support/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a47d93a86d7864eb1866a3367f7c5ace53dc18d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "baf5cca1519cfaa530a21810bda9fe6236082d855a59ff66f5ef437bf51451eb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c0040a4efb8adfe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color/node_modules/color-convert/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4907e98a35921c9d764aeb9df809fdaa89120a9d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2ca1a776fdacc56b2c1463045e8b2edcc7ff31490c362ee84e258cc905b90e73"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4bce00deb15b2612",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color/node_modules/color-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb882040c18e17fb8cbc49f064b62796ca24fe48"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "816c067d75efb40e8daf99d11a40029c95cb3634bbaf8ba1a09505c56705ab5e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a591d5940603d89",
+        "type": "file",
+        "name": "/juice-shop/node_modules/color/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35844a694ca86f5724ae9b515c09453e5b0d79f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e056a5ef1ac8bd65d4a19eb544b2b3dfb69e21da39543e3f58456d6f1793019e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dd8a533268243431",
+        "type": "file",
+        "name": "/juice-shop/node_modules/colors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a4f69f04fe66223dfe4b4bc5c73653a2a6d410b5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "12d1b76eb6efbe581026d035eba2a3c916fc5d4664a9476d23bafc6813db9176"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b5b2990b66a7183",
+        "type": "file",
+        "name": "/juice-shop/node_modules/component-emitter/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "93e268feac3350d3806f9deca82dfce16d06d9fd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cdb4584e6657cbc5bd76295b0e3828969fec5cdf3c812178ea80f37378398080"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ace4cf44075fb98f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/component-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03289fd70f7e974c6f698df8d877912ccd127e29"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "93a42e729e1f42670f510fbb1b7e90e6834a4e60657c67da82d321a4d99a30d3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3e0941aa7c8c5bc2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/compress-commons/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "49b373b2919e1a111b2b198de6f73e229c1b4708"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0144c9f8c98abb94ae03eaec71cd3fe7190a8f1c77ea898a012ce30e72bdc6c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1f63a726d778b3cf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/compressible/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dd8d4a57b09cc1f78941ee6b3c36192c64775600"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "78af3f89054f6ef1bc4ba56724a5edb55babf7fc6a4e88b8bb5ae631afcf9219"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc8ca1076969a404",
+        "type": "file",
+        "name": "/juice-shop/node_modules/compression/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "12e3bb6f942049ca301efab637953ab8aad3e61a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c2303e1e6b34b76a1c913d4f09fc0b3e374d4539aa5c89b99d6d58ed91620e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0786275c397f0ae1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/concat-map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "10e204a14998c9e1d13bba6ab5243194a94d5d6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4fe5e8089b65ebfd55bb86f465ba896ba6a8e24b7b61de1e0f420f590616b118"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f81705f83ae4840d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/concat-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bf0359010a483481d391dca89ee461e718627b0d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "90182f042f9d995d6021ee7b9cb56d044b700fbf5f7dc03057343dcca4df00d5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4bc052f039f52f1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/config/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e8ef1128810fb2561de65ece79eb48991c87014c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f1bb1cba9e9cb4cc00e33db8dd4f254810d5df5f9ec4f51c6ffe9e396f84b0fc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7eb3051f10106c84",
+        "type": "file",
+        "name": "/juice-shop/node_modules/console-control-strings/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48149fd6456eb7fa73b547c26577132ed9fb15ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2da7c4bb166dfa347305d34eebafaec098a9afeaaa26e4844736597507dbb968"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d121ee6e625ea855",
+        "type": "file",
+        "name": "/juice-shop/node_modules/constantinople/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "04d4d5b1853df1f182ee1f1a285c283c25c3fe22"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7b0cf478d904186f397b8c75c0f8129d0f36bfcde75929880ac0bedb38c76c7f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3350034f065e5cb9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/content-disposition/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1b871ffaefe2a1fd69aa9b1538b4003bf0eae9ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2459c0e8fbeb5716ab06e9ef73747bba46ed2bc52e310bd4e9f0ef1f102da61f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7c5bf59b08ef9dc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/content-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1545c6d8538d7e59f375d4ae4b0e0d10471a6c1c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd78a5427ffca1966621301edc6cac2146c8c1e137f122161ba90dca7ec89f77"
+          }
+        ]
+      },
+      {
+        "bom-ref": "697f1e8b6a7eb8d2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cookie-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e3c194dcb531a61c8dc8c6d97fc65f138d52a09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "27eebaa9ad78117c9b6965e3c6cd24356504e5a7abd3450cafc46a1b6e1e97e5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "901a695222deaf15",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cookie-signature/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb071423205fc35573e714baa755e3a9e900a979"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ab66777a673ae096d6b5aa51b5edb46b84e6fcd85dc03358c35576e3df0464f5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "39740b66e9fb0595",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cookie/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "49ffb97b37b2a7b8b0967428ca088145d3483365"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7fa781bd142e7f38b66bff64b4e3a8be9e53e340e7ddaf27caebd00322602208"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8527e85024b84e3d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cookieconsent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba04d229240bc8c46ccd04088b8baa8dec795500"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9e3749607413186ef0b851086b376a19578e1195148c551683cac4fd47757fc6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a70a3faad8f17295",
+        "type": "file",
+        "name": "/juice-shop/node_modules/core-util-is/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "67e07f86f3ffc5d437b0c03d9bf2417493e64859"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9effbb5ec239b4de8bae0499e760bc86b7fa731e310e7a2721d8ffb667194e44"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6176a0a689118771",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "29a6d78b59fd864df0f1ced954fcc06e2e31cf1e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b314218cdfc9e9442efd35c74c4176902c0bbd74700ba30d6055e70a76455174"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b16455f311c4795b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/crc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dcc2939933df570c8260f4fd4fbbd6b88c420626"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3bdb1642fb5a6e1c822e5e3dccdce83c59bcd73e84934fdcd0c3c65ebda6718e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "411bb91c2d91a746",
+        "type": "file",
+        "name": "/juice-shop/node_modules/crc32-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "669fb5f9deac7203619c72ea7a0df0d4460417d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1913530699dad57c6bf7d89127c0c521266133a615b3685d51deca1ae9a33cda"
+          }
+        ]
+      },
+      {
+        "bom-ref": "32bb90e22bc2599e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/cross-spawn/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9becaa8ecb51ad9b303dd62369423cb9f287163a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2e106cd9b4ae4e34ead35218371a0d4e172da72515a4f8f97d69a2e1fe3dee82"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f747956ba0ac6de8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/crypto-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "65c10fa4433d97c3ebe204470e8caaa105d6fcd2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b021f29bcaa1cef60884f4281e0011a5e80758e0f6460e9a6061f28e37282ca4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a6e2d2e58a43f8f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/dateformat/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3d4b932fedff8c3566e9eff570421fae695c91e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9d72ce65bcf960ea44a19840e86c0476ae56034cca2181ecd6bced70559c97ff"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b7f9128914daf56c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8ebf0f80660d982fc68f00f82855696157e74b10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "79682bcb7fecb38a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decamelize/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ccda85295237a30d5621b1d9a4569be24c92564f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb07ecfb5937f8757b0721fdafa6febff75d3c159f6dc8ec0d6ad4e1d1be7d9c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7529873d750dd35e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decode-uri-component/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6202fd7f4a33d4ef4d36b0f1a26ee5dc22f7851a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8f2e9784337b3b4fa69359f88f75a2847e0aa17776f062cb518d008d8d408bca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "54445faae155465b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a8a1643a6d1bfc2cd01968fece47576aac7f85f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e4f071e185bd8373eced227d9fc256e7cb17c05aadf4a9ff25e6ebdbef489580"
+          }
+        ]
+      },
+      {
+        "bom-ref": "048e37fe50adfb70",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ae202ceb666d310e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-tar/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2a60c06be62f9b9c9eff038925e902ce2e3c2a69"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c218803dd64ee674ce941eda27ca12c5d949bc582de8cb30fc37f830c1184da0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "072b90dcc4a10653",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a6530cf198e519ea50ee8e0bf674c209f5280991"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11468db6795e371a155e5f59e4d3db4bac561f04bed7851609739ca2971363a6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "af0b03d530e94f15",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-tarbz2/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8868c09e4485e8a5259107e1627b82d28c9c4088"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "529925f1b024ee1493f613b8b8f341eb57c3f4d652387fb9d60ec6a94c55e848"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f25c1d37cf17861e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896"
+          }
+        ]
+      },
+      {
+        "bom-ref": "069886fa57eb73f3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-targz/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e50782d9594c0eb2209145de66307aa14762462"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "563940fa7817c65d09bf0825521cd80be7fe3371f655f63806dd39d0a332feeb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0b4fe4fdec5f27fc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5fb963b346a2cd3ac5d664048eeaf13db03da127"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "77dfe1fe927c8f631f4ff5cd7040a9f3fb8149ee65160d0f936dff5844d21ee8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0ce6699a1cdf0c21",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b7150c9c5b976f0f6c27c5a5e4c5466e40091c19"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "30c9eb7f6849e5e7eb35dfd625b2e474c7632fbe4377f2186763967cce5e61aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8a9b2c6bbdca623",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d9d1d73f03f4b32f19e6829392a51c9d15b7195"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07b00b58428f2341",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress-unzip/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd0b816b1f4ad813eff7743092370f6fdd251e91"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd8dcc48b9394f349abfe168301e8d0e33d9b48d9fca79108d6a6302c9349f72"
+          }
+        ]
+      },
+      {
+        "bom-ref": "49087c79ab88da3b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f822d3d504fa685d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress/node_modules/make-dir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5dc583570034b28410731ea0164940ba872f2a53"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d125b3068a54b746267706fa6c5e6087171fdf42f701cd7b64508c51dd1fec40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "efeb62e1931ffc37",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress/node_modules/pify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d9d1d73f03f4b32f19e6829392a51c9d15b7195"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d3110fcf78f67325",
+        "type": "file",
+        "name": "/juice-shop/node_modules/decompress/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cca6473d46387c59d174ea40cae6ee46365a8fdb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3d6e3c813ac057db9a5a7cd1ecbcb678df9238df896a7f791881d04efb7e96b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d52d03bb9ac8f3e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/deep-equal/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "917bab6d83cd346a03fad8ccb657ab7272de7314"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "21b5cf3db0f28c0b0125231ed308baf7d9324e96085165be0db27df55cc68279"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fb081383575d4eae",
+        "type": "file",
+        "name": "/juice-shop/node_modules/deep-extend/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "873beeb015297e8e026fdd9d97450877dcbb36cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "21b307891704eb34e9be621d7563d13734f75f41d8f97825862b05ca5bc2d217"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78ed13afd762ec30",
+        "type": "file",
+        "name": "/juice-shop/node_modules/define-data-property/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9384aa894159ee96e107cdd3002915849fc91fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bde7f1465b344a24da2b10d2ee99f87edf8e0ecd177c28370b60ad9595de730e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7718b158db4e8e71",
+        "type": "file",
+        "name": "/juice-shop/node_modules/define-properties/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7258fe1b09441a50b6399709b9f40811b7da135f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b61b15058833610f17197bfb60847926703e077b180de684ccc50866906f6fb1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ea0e8f35ebf3d5c3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/delegates/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f192d34b412f6fda6a541acee81de9e0d48648bb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7fe6ba799e1316869f2990cfe8e51bd29a40e1e5f327babdd38d23e3e23e8d87"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f7ec2f02477be9c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/depd/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c10082c1464a6f589aa10cda88285e780ebf857"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5a3659bcc2e47b25ebf9f23f38eb9452a58920bfe4b59410bfa6fe84639a3b99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a3daf2775b7c6810",
+        "type": "file",
+        "name": "/juice-shop/node_modules/destroy/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e12115ed9a1e2c56eb35ecfc14ff83b8c02935d5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f865b50652dc062f43142e01f55db2760cc10d255bd05afd232e738999c58188"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c85d04798e632cba",
+        "type": "file",
+        "name": "/juice-shop/node_modules/detect-file/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4bb909e6a4e96fae92a08102ea75db073df4348a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c9dafc723e89cbed5a46bd5661a8ce51ff3b0ea7ec1f1a446d91294bff47283"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9690ee8d7ea8d79d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/detect-libc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df38d1adc85f0f39030df82734c0d53a6a4ab728"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bb418f4fa450f8a418f8fc46c33727edef55aefd54c43ec6a9421a65ca8d9827"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fc78ac2cde347c2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/dfa/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8380e4b8de016791903fae93500e6bed99730482"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96c0ce3cc17b34aabd58fd442157766d9e244cba735e54ee4fe10d7841f0460c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "16ce227388c1b4df",
+        "type": "file",
+        "name": "/juice-shop/node_modules/doctypes/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "871d1d4274f18991e95e1fb8152ee7f389e357c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75c3011d12383ba4daaf2bd220c601da3c9b95205394ebd70b4a1c78814298bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "51fa7171beaa20c0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/dottie/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b45953cc74a96671397c527eea17d2c77f554954"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b7ea4b539c814825c0bd87dafae06dfb855705957500b28c30b00769c4062ed1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9df5eb2529c6786",
+        "type": "file",
+        "name": "/juice-shop/node_modules/double-ended-queue/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30542f1f765ce4999dbac3bbe0b3ff1df8dcef06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "006484a1d2b6898582f6b11c448bbde98d05fede3ed0b062250222329dc436a2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f63a788e7a9f1ee2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/download/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4a6b4729fde430cee32de953aa6fca071be059d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8294d202a217083501a4d8331056aee92b4e08a793652199ba381ddc5827445c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a01e8c6a56b9d199",
+        "type": "file",
+        "name": "/juice-shop/node_modules/download/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ae5526f3f8da448d11127e9eb7b12b4c0db0f5ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c50eeac8286ef9c74324c8a3788c920d89af79ee02273482661d0e0e53c6ab98"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9edf84213137c57",
+        "type": "file",
+        "name": "/juice-shop/node_modules/dunder-proto/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d4f4da85fa9e51b4843d29d7e541991cf377b8d5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "24df71008e4225c858f389dd2728b76cf66b752256d42a38ed7930aacae7fe2b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2879cc563d61729",
+        "type": "file",
+        "name": "/juice-shop/node_modules/duplexer2/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03b1919d071f65ef5340b0afb32ebf000056bfcc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "80a5177685b461feb7f741c08ab2268a63e108b03bae0e5056f6a6bebf8ce315"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e1a7ab27f3e2e89",
+        "type": "file",
+        "name": "/juice-shop/node_modules/duplexer3/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b78f4dda4b12e85d2889a30486b82c559f5744bd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "107bd6232c7aa9c50bc3d562b3052e69cadad3a691bdce012ddb244b6357e3de"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5dda5376e4372ea4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/eastasianwidth/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c3bff6d91fcbc648b17edd5f8e37bac1f47485a4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51db62f97656d02d4bc9670393cae42930dbd1ed89f5837056851807e602867a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "47e99e6723729d97",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ee-first/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ffe61f87f94a558fabc177cad5c9b90b16481cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a4eece6ff6b38bf7ac107323f381cc60500097a9cbdd473f5d5b45e68822cb89"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9a799bf773a161bd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/eivindfjeldstad-dot/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "af20b4726ad418b94f3f536ccc764cda1236840f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ace4488e54d7e874ef61df9734a1a6c87c3df723a9cd14ef88294001f4e64f0d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0b548ab01c91ac95",
+        "type": "file",
+        "name": "/juice-shop/node_modules/emoji-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c26fe90da5886724a2676b8e3d5890beeacaad20"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7bec29b9ca68f2c4becc60e866c2f9342ecdc89fab39841a818ccd9eda15c148"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc6092400d6924e0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/enabled/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35340901cea631effd557c9f64aeb682dcb2c459"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5bc65d6409ffeb2c9eada8c0706d2b6426697d748fa2f409342f3668f4ee23f7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ba653cdbf3773251",
+        "type": "file",
+        "name": "/juice-shop/node_modules/encodeurl/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40228259bb4f106706490d0b0b73cd4f35d6db44"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5df10798f4b086da95c24180d7519fa4f68e2057a48e2ff6b76b91d6ffed1e9b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1023d651021f2f88",
+        "type": "file",
+        "name": "/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3d90badf75db503f5dd3ff3fb76d120d1424978"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fc1f132395f84c7e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/encoding/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "52b117f2bc3113970224b9dc97b7fc18f7df30ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8a868d7c206bf2eb71c0721a957b7a255738678f72c290c880b46fec4ec54dbe"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c3a9fdac4df6f18",
+        "type": "file",
+        "name": "/juice-shop/node_modules/end-of-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e21c9362d2b1158118b6673f45fa1c6695c847f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "da504d0bef5a5974590b62f58df0003b448eccde6b5fbeb044506b7e43368eb5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "036c1abd4b435fbd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/engine.io-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4a12fbe97085b55ea1025807ce2d6e45ed3c29c5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3745d9cfcd726c33b1066fc4c0ebfdfc8590b762861e4ff7d1f50b37f338afa4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0cf5efb073ca4248",
+        "type": "file",
+        "name": "/juice-shop/node_modules/engine.io/node_modules/cookie/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b7049b02b54f0da0a956bc0967ce39f5429442a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "07269baaaad9a16ef8a4666d69cdd387891658eaf31af3026abd8b9e3fefc9c9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3f48fcdb2f5904cf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/engine.io/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "867baf5b5a330ab0443c88e654e8c43622c3d7a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a9777087f3273ec6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/engine.io/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "27adf065d55ceed6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/engine.io/node_modules/ws/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "55eba127d99266b82e347a07bc4e164aa9c134ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0104bf7fa4b359d2a844c2ad0d37a0bf6fe14531e4c9c33055004dce85e8d1e7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc1295a6a0603142",
+        "type": "file",
+        "name": "/juice-shop/node_modules/engine.io/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b4f930598e5129e2c27429b87b7554cb065e11d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b72c50246f14911e15b0f0145cce9a20b78bf8aabf4b79d4c178ef02f53f3a27"
+          }
+        ]
+      },
+      {
+        "bom-ref": "90faeb98f5ab7b94",
+        "type": "file",
+        "name": "/juice-shop/node_modules/env-paths/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b5b570f41c1d3e8f251fd06d075cefea4a3449a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b92833e5851ec53bd4cd8093f6099d0c6e6818c4374ec1d09aa25d4f9ba91ec4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1adc9fe36fc6e195",
+        "type": "file",
+        "name": "/juice-shop/node_modules/err-code/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5c7bc63340bc312d1563bb2b369e333e1165ab04"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff5360c17c3e197fc4a4a4fa0d07640292556d585a49c8651fd198e926d47bcc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9b4ad0053ccf06ab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/errorhandler/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1da18d3d3998adefa01c8b3d1260843baee1eeb4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f328451e39568b21310723feef6a731480bc3e74b239601a8babe2b7dd411c5d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "778dfc5c67cbe769",
+        "type": "file",
+        "name": "/juice-shop/node_modules/es-define-property/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1a35cb43fefef0d0e60920c4df5313ba630ee6d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a2cb30dae30a96705dcd9aa2d5fb190cf8200f27badccfa5a81a4374e5708b4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e73fab47d6e721cb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/es-errors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d13bcb37ab6ab7f0911ce728148cb1c8485a81d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a0a0bcccc76b915cb64073317312840cf6363e9144b96f406d0059774dd5278"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0082cf09a2a56fa5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/es-get-iterator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e5f87acaaa2bd7ba95797e07f31e74d503db6bfe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cce872f403e70751f0bc8dddb0f7d2e992eb624c9397f764fa7f2feae602ac3f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8cef15f58ce77014",
+        "type": "file",
+        "name": "/juice-shop/node_modules/es-object-atoms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "623e510034cf39440e8692aa26c9473765981674"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9975f032714dd642d08c9b50129096f5daf878dbede1ca3544cdcdbf45b48eb0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d5c9ea82a07112b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/escape-html/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f9d3fd64a0196e77965489ce9b81fe4ce3a9ecb1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd320a3e9d23249f5f7d3ce72f2fa426e28a6b2704bd2b281d0c92806a1f5223"
+          }
+        ]
+      },
+      {
+        "bom-ref": "424ba41d8f213b21",
+        "type": "file",
+        "name": "/juice-shop/node_modules/escape-string-regexp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f794290e774669d83cae4e20a497fbf680d20859"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c804f228dd0d4d3b9019ac361339f20cbb1664d62d6853aaa7c2855fbd60fd12"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d13b764708f5e6c5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/esprima/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c87daaded1f0130495358bdd1393757df2e9233"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "860df2e62153db26b370badf352d95edbf18e1eb54bdc2a479429b97155205b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9d6462ed3aba2bb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/etag/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e2debd5c6530254abe164bbd44f1e48b7c7c0018"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "836b9a5dd1c6af638f4602e83e2568277f9ab1f457db0b95d949c2a4ddb0462a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cfd1454d01adeb3c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ethers/node_modules/@types/node/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dde693dc49d0c144fe2402fb5031a5bfc32207d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d57a323bf4705370a5e2f0ce927e2f265017d2479fd31e9b32e11334c1550308"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5e6e88ec2af24cef",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ethers/node_modules/undici-types/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "648c0c8889b843ccd3d07972c8cb535517966ad9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0635ace61c576d1297d05c344c4fab0a77e8c88ffa185c9f18b23d18f7387c40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7ec7ea57e489f84a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ethers/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "341e8593c90d88ab6b8b325a87a396c011dad895"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86117317a7713eb371f63ff1fbf9366f22459e9a8621e83dc17c8c93e479185c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "80e35e6cfc93b03a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/event-target-shim/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce8a2ce9da7170ce539fb64b1f91287aed3c5910"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "980bdd7706c72d04a4df2e3ee2c8ffccf3bc72bd8e7cd13ca38be00cafc6e8db"
+          }
+        ]
+      },
+      {
+        "bom-ref": "98fd29a82f98556f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/eventemitter3/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9735c2bc0d60a2aaa6d810d4cf1c47774b914f9c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "675f6e2380c3118ca2c7e1bf39a2720b0eda169a282adabb0f38d27049a8283b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "385c47cb15022fce",
+        "type": "file",
+        "name": "/juice-shop/node_modules/events/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8aae12f382a34bc1dd6aae59d3f27e4098148e35"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "878ad3687fef7efe3757c1872a3af998c95197129a7445d632486a9591ee542e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "19869fbbd9b433aa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/eventsource-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8891ee39c65ac3e3b1e2a006e07c0f6c36f35253"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fbf7bb33e1aeee68a24ad31c756a8e07730e4d84b1648b0f6888d2cfdb1cbc56"
+          }
+        ]
+      },
+      {
+        "bom-ref": "691b2670058c604b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/exit-x/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "918feaff171528f47dca38f22b4a8f87048483dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e987b0c7eaafc6ba68476fc5be7d661a4cd162b1f8de0547b97ff81f045f8346"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8cd7cc8bebfb36d2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/exit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ff06cfc562bae46b67f745152b929ef2aa7c08c6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e2cb677a865c02d0a626eea6a718b9dd528cfb45ea20914bb6c396a7291c5e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "729fa6678872d3c1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/expand-template/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9fc7d90a7f18b4996e21b82c4eaff325c6ba07b9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "90f652967155275d9fab2887a845454ee797340b28cc0c1b00f1889aaa65f771"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b5f86b8049cce6f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/expand-tilde/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89622a13cd2bfce8992324f0dd2331d2e59d5eb3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b2d0ab00c2e5d4f6a4ecf0d6a43cb88ce72f44b1847f5c09088c2a485aac07db"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ea193f3551351ae2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/exponential-backoff/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ad6dedac96b4754817f15c7f62c6b1d72fa249fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c3076cc23aa8d9f5123900305b9c174af612bfef91211c658ab914611dd86fa8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "81ca7d73fc853551",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-ipfilter/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5fe2e65eb6f608ec98f5d7008da0268741977bdd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "716fb94c7b2816f24531c4faa87fe99d10d4bc87fcd5240157bfe8d9dc078fac"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eec3c81addafab49",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a202ae6847862336ee80642647cd5b5f63c78c0f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b47e393c9f3a368a8c9721dac7f50f2bb8ec02e11347366f6c5e600ae65e2133"
+          }
+        ]
+      },
+      {
+        "bom-ref": "304aae79d3db74d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-jwt/node_modules/moment/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1256eb9bb42d4f145e4bcd9e95064d3b4943f1f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b0a3d5ad3ee57c7bfc0803b6a38315c0b47501621742383a49af1b686f36a761"
+          }
+        ]
+      },
+      {
+        "bom-ref": "12d24fb58b585931",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-jwt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1360dc73f86f18b98bbfa0055fbf1d752740c055"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ee2b6c1812872e159adc637a884c404e7a08eb31a49c4b0e93c808ab85219207"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a012a6b68834163",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-rate-limit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ebdeb0dec13e1ee5d489b19a778944b4c35dd30"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "859e9ad6910938c8175dd88c8a6ee30bdda86d1798f3ea48aec816164de2c9a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "802dc94bbe6aa6ab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-robots-txt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee778d9a5d45cf536d1da3fe87d817e3fb65f599"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff38ca4c23992763a6e3647a806eb44093e2c64a3965d6bd5b6c8a7a3bb7085d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c93bc21a8f7cc527",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express-security.txt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1d1f8efa7065c501ac19ce18c59773746c57698b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0309502f5ccd0218c615bc67d87263be0027d3c19860c9096a4917d823001033"
+          }
+        ]
+      },
+      {
+        "bom-ref": "15b33a200090b7a6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/express/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f23a499f62bd04cfd60f30df0912884de5a9d085"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c7db3b72582355c80cdcef1ad7b2c9a8f53557550724c6bef8502e9818c2ebe7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d2d0d7ca7aec295a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ext-list/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed4b7b5ad0481785ef315749f1bece88fbd43112"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1aa02cbc277189344e32609c0f7e9303811a0ebbf1691607343468975257a2be"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8aa65198b6850bf9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ext-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9cc0d1f321318a0de7c63a80cb66222a60be6b16"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b7dd56ec22b6e02488e6631f3e8d0812228161b6f02e04d5f7f25a9e58f4fa53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "74dc4ffc94dacd4d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/extend/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6cd42f3e1865fe04ed104d8798d40232f74702a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d891b3f00bead114c4741d8a594e7aaa59114f53782ec9a9319a619709dc14f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f800d8e6e41bb6f1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fast.js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b488db397e98dd361707f8fa4d775f93c1254866"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "41ebff4b9f6a6598b47d69e2546ae3e5a439a72642ad3900669e39356d71477c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2f4b4303f0966fac",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fd-slicer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d8074c62f751ce835105f40fa0a95bcaa4979206"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c765386ed427fcadd9ffd7ae1c7748d7127685098fdb85cde3d98df7e931ed2d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "09e88e124bff5d80",
+        "type": "file",
+        "name": "/juice-shop/node_modules/feature-policy/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ad637c779e1c1a9b45134570ea43e473ae44d2d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a02b7816f5077eee026def9eef9b96f8511fa6e2995bacd168e0ad2311785317"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d5a708ea7ecd9df2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fecha/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "217ec9bfd1608fa49904b38e4bd8e09291bffc1d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "80ecd4a2611642303d3fdd2dcf480a806737c6b7e9b2306c9bb314fdf16c81d3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "909a6637974b6b1f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/file-stream-rotator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "006a62bb3da1401fb420e93f831f9901d455e6a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "743a71077be1d7bd2181334b5259f97cf396edcc5b61eb92fb9b26995aab80c7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fef91987c7863e5e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/file-type/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9bc985e64fa6cc889fd63347ce118082115fbe7a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "812c4de8a1af4058d6a1f7e38b2687a545d7273a9103058e8cf1177b5c95803c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "365678b61099dd94",
+        "type": "file",
+        "name": "/juice-shop/node_modules/file-uri-to-path/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5dee8a540c467ffbf9025481180c77a06a9f46f2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "71eb1e24bb9694f89c613fa0aa307f977dd43f41d11794c7b48fabf6c55f66b0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d4649f733bf7c84f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/filename-reserved-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9662d5519c4ea053d30cca8407bfe0e82c51fb76"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cdbab11cec5a1837bda72ad9b1e91fa10cf22e634b4c1d550440b9a85e3dbd08"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e1bd9a312827a88a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/filenamify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac191eead429dc383ad2b6b379a0e8ff1837bf28"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60ac75b25fe301fa718dec448dd812e5e64ff07aea1de630b934508aea8d9b98"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0af85138e63fbde9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fill-range/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1682e8ba503f3836b55fc5763adfd0605f0d1b6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "87f5c78f9b47d21f9ca62b60cff1d250a3b468eab320dd13c3f3ab2464a02735"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d9e299ef75ad64af",
+        "type": "file",
+        "name": "/juice-shop/node_modules/finale-rest/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f9a24d135e58874e49a609e85eb002f28fb716bb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef8d065b7073f5b58dc0f19f24263f0930dcf592e67ec4a94cd57b237b30a229"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4082e7ee3fb3faf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/finalhandler/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0e0e56a5c06345a6a43b7a61390736c503407420"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4907275accd15800e34bd953b35b64e391dbe182f75d870a5a30da72b4e9271b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fea9479006974fa5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/findup-sync/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f68cd5a7999712c9082df2201062980e9b28fa16"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "10a04ec68f05ab4a6cc47917431544ee7cfe7b760065913a3c65cc7b743b6857"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ac07afffb787ba21",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fined/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a1f7ac68d3496f59d5428c268fd757fa1df105f4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8d8b10b51c047096ab925bb9bb538cee021a246f36c61d675d12afc4f7953d9c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0e473f1d35d23918",
+        "type": "file",
+        "name": "/juice-shop/node_modules/flagged-respawn/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "515caf1e8682c8a724c316e64553e908828231f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6c04c192754301ec51a5506c3e6d6b89db47803a4f261abd49b4bd3dfcc7d6cc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0c6426edb695518d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fn.name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "339606d3e1f800255c7e03b02a94197f568cab3d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "20d7245ef0121af63e27998ea2c1a477a712809f4a621ca5246869c32ff76cd9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1454690602019c4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fontkit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1f933307496553b0ba751d5878ae0f0a8e661b40"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ffece6cf3f8adcb72394784ccb3772696241a93ba64fcfb5c5f7226b24be0662"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c739f428f1114e7d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/for-each/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1eb80e2f5665bd24adc0caa46741c4d4c52f4c02"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "789a488ade1ea7535497f7c86fded54281c4e7ff861fe8e0e667772a00680711"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b91d9540aa2d3e0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/for-in/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e68ca23447b0f106e434b1ca3071685929a40b7f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f0d68cfe65109d06cf02bcc45e4b8bc18678d530f580eb62d112d919473e2539"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d7a943e30086f5a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/for-own/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9e3f16c5c1c13709aca01bc598b74d6ebb48d447"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a10071296eaf81bef9f031ef4bacbf7a9d38cc3d262486a17e266801c105921"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d949c341704477e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/foreachasync/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f26165388b351226f15a9af7698ff5f7b9741e0f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ea65195de8e3e84b0d005f186188ef895d92164b5e09f284e8697e7300221ff"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a6b7e67487bc432f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ed47a76d7f1a65c0920cbf3d9f09c4adb9cc961"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cd1c6cfa95782e432dd2affaa88c3a6dda7f46c8088d91f3acc0fba79dce5075"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bc4ebb51a15d35d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/foreground-child/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca2af14071df0e6084e5797f9fbcf179d51f9e5d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "434959cc3a188aa891e21bc23f5684421425722faf2dec45b7cff2ca2934bd6a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a5244b1360fc32c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/forwarded/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5d558cad52024d41373ae030c0d7ff67e8dfd7fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "550a78f64b6a76bc353d6a10152af5750613d0d910f8478943176c1a6196158a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "364b8acfea441803",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fresh/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d90f7658279184066c5ee790cfa3dde6921951b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "65f8ebd91560a3a6143f06bd9066d337bcf5f0c53e4a5329b98894f24eefb8b1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a084d048261e3d3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/from2/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9be6ddd4214e1de4ee7027c4ea14ff38571d62ed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df32d5ef7cad54b2d82a468b91e81e657fb132ce6698f5fe308947eba083a5e7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f37c6ca7bd513f6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fs-constants/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "554513fbd310c245ec547539af3c2326f5d38bda"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9cefec768b4f8c52591b840367d077a46a5a2b72ea2778dcf037afd96b234671"
+          }
+        ]
+      },
+      {
+        "bom-ref": "806e27a718292c4c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fs-extra/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dd47b6994e49f103b9c06ef05a5ef7fc210135a6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "528b7d9a7708b1694510f752f286e7ef70f669fb604411645909252b3f99cd96"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8e32dbf239ee024f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fs-minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2e472ead48322dd560133d10f39db20ee5e3fae1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e90117e65341117ce56ab6aaa8b59291210601f69c63996fbe446a9a30237fc6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b9c2664bc699ddcd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fs.realpath/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2ec89eb99a2117211b3879fa1bf42a4aac964a32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2985019b1b3cf5894df9b831816f7b480833931da982489e3a98c346ce7da897"
+          }
+        ]
+      },
+      {
+        "bom-ref": "612d5b3fb47bc074",
+        "type": "file",
+        "name": "/juice-shop/node_modules/fstream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "acaf9487d855ef39c8c80b58d5ccec1d78ad67a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "167ac6b41593c409b18eea3aeb4272a2e33168404ac605a39d025eeb1b7f0675"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3dea1fde2755f5ba",
+        "type": "file",
+        "name": "/juice-shop/node_modules/function-bind/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1fdcd92c6ad33cfab1c556504198e29a38759a7c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "edb1c4faf4148e6e3d74ed8dbac1a1dc359a647ff4207aad4851396dc7a3559a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "95920d9f51cc66ca",
+        "type": "file",
+        "name": "/juice-shop/node_modules/functions-have-names/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e2328af43e01e155fde631bd72d8a7800289d67b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b821fe786f7afa6f8b2090ddbc053717528314ed39bdbff0e283a0b0103afee5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "47ad3db1f2d63631",
+        "type": "file",
+        "name": "/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b37cfda3b81ab97ca6c2845f42a134be22e90722"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "405cf1d8dcae361c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d73a908990051ad245c6de40672de507997f8cf1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8bab82161f70f70214df34fdf7c1cdfcef69d9aea8e9a56a575991a5ed7d905e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b395a6d548b30216",
+        "type": "file",
+        "name": "/juice-shop/node_modules/gauge/node_modules/string-width/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0a17570915e73311d0800c28660e70971f5bff57"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d33f936e64b142b548af5923f28d0e3bf1bc8cac3dca174bc0d1f8d068e91868"
+          }
+        ]
+      },
+      {
+        "bom-ref": "38a2bbc398ac2df8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9e0a8f6be8feff9265983acd92a0e76e12888c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eab61f2c1ea80a50",
+        "type": "file",
+        "name": "/juice-shop/node_modules/gauge/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35539d2558f25a9c424168ea7396c72433795656"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df591d77a6915f63b1930765f13d437c7d075024a794ccc608de1b0d3544da86"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c84e9baf9f145d62",
+        "type": "file",
+        "name": "/juice-shop/node_modules/geojson-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d9f6a7f819508087eeee64a0a125a76eaea897b6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4c3a2f48a5d486a8339f987ec4fb672be0c6e8d0baf382fbcf7d77dc4f635bc0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3302145c278fd4e5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/get-caller-file/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "89c75b65b2c80b295b9544b2c99086a517380f86"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "680a080d2885c05bc51dde429c80784bfb248ca3ef3685438079c5015721e2ae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee4602458e685a0b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/get-intrinsic/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "43046e9d01abc17bd97dcfc2dd8fa25bf8f8619c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "45b14763baacc59b0fd7b39e3ad983d5d2aaf7f5ed682f2fce9edb469826c999"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c137963ce136039",
+        "type": "file",
+        "name": "/juice-shop/node_modules/get-proto/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6dbd8c5f598b42b9445a7958c5749122e09158d4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "73839e012ac7134a632c9d9fc6bdb700ac9ab5553cce39eb789ba2b65663e734"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8128a63349967479",
+        "type": "file",
+        "name": "/juice-shop/node_modules/get-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ecf5eff5c593b997a40265bad859940565f1cf22"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "34078f73f1cd1b680486d29881da4a4ab72aae9e8f39ef097e3bfd6c7ce2c88c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "965c766200871a5e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/getobject/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "36da365b15fcfbe8dc2db30ab127d2f153c85c72"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5cceaa22701866be935d5fc0e14bbcfa13ebe30b756932fc918827a81c56b33b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "04739b4b0b357ead",
+        "type": "file",
+        "name": "/juice-shop/node_modules/github-from-package/example/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "34adfc587fde9ec7027c12386651c2b8d592646a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b0a33ff4aad344b3d09605b854a4b5bcf1b79bef1dc821fc32d206ba7cc0cf8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ac319ed6a29675c6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/github-from-package/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "72eb87470bfd738cfbaa08fdf06ec28b0c7f3775"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67742aa2b856e3523c2f89132e41cc5026c49ffe7df58bd3ea906caaa217bd79"
+          }
+        ]
+      },
+      {
+        "bom-ref": "011bd861b97df881",
+        "type": "file",
+        "name": "/juice-shop/node_modules/glob/node_modules/brace-expansion/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee29327a8b50605e858da5a9ca35c4dca1a3a21f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "579ffcbe9f96809c7f69366c34835370909b13669d757d6d614b030609f3aa12"
+          }
+        ]
+      },
+      {
+        "bom-ref": "154e3d94ebd33f0e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/glob/node_modules/minimatch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dc1725a3de0ef90bdb2be99bebe81e96405817df"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "07347ae64d38f4cc1be3ffcc83322ec40d4609f5f3e9dc027ae91a4617239ac2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a2922c6b83c8024",
+        "type": "file",
+        "name": "/juice-shop/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "05e7b265b75fb6b98f140712737e92c97c487cc9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5455b1a29f8c3f3b6a41c2c053bf0684f14464bb5360f7b8c8702bf45b2da0bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "67a5bcf114dbd68a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/global-modules/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7eb8f441c47a7147a88af25e4b180c0b19c0756f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d91d8ab2abee8c24045e372400accd67b4212357d592ee99eb41567bd422047a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "beebfbdc8d728318",
+        "type": "file",
+        "name": "/juice-shop/node_modules/global-prefix/node_modules/ini/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14b52ea8911e4e9f89acb4d876e87755e54529e2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b69a8d9b67c8a90",
+        "type": "file",
+        "name": "/juice-shop/node_modules/global-prefix/node_modules/which/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6aa908dedff8d74053157a8a908db304252c8549"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "88269288cdfae9bec4232d6b4fdbb4f52ad5db216219d6d701b02a2fde14162a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b7d6ab6bba81dea",
+        "type": "file",
+        "name": "/juice-shop/node_modules/global-prefix/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b819052d9650e51974f6e39f57bf125175b9860d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a58e288808740745879d771ed20d34c889572a6822709b545d661fa9a5555db2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4567bbe4621f5b55",
+        "type": "file",
+        "name": "/juice-shop/node_modules/gopd/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "682b4b77bd041501546a485298d662b1a54de702"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "33ace32dc861f6da9d1fd9d0a44c66e8c6ff3b13358d070683c1c2978ff5f19f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a8cd0b5d4a37d88",
+        "type": "file",
+        "name": "/juice-shop/node_modules/got/node_modules/get-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "000b39656a452f8e4ddcedb94597a6970c3f456a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f35000189fe47c81",
+        "type": "file",
+        "name": "/juice-shop/node_modules/got/node_modules/pify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772"
+          }
+        ]
+      },
+      {
+        "bom-ref": "051816eb83e876aa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/got/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1f84f9ede8d91e4fdaede119e1cb6dfac7162b92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "37caee779790d68f90ed8b63f3f9658da3c70ddc7cf6d282a87779196b7c42bc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "82e671cbb682865c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/graceful-fs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21a733b3f7e2ee153041de90fb03d5596934f346"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5747d4ba6b17165c6ecac30ab3a331715f41c7ad546e1f1574dab1bdcb116181"
+          }
+        ]
+      },
+      {
+        "bom-ref": "58c2e7bf393b113e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-cli/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e599b431cc2ab5680478c2f36e8f4cb0ff2512d0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "211eb236d706637b386a9bd72e5f8e2846b19e9696ade720549a278c2a7fb54e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "616db35a71e933b1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b37cfda3b81ab97ca6c2845f42a134be22e90722"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "31895b4937c7a1d8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "27a33893272864564ee2ba8b810d0f2bf4e30065"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "787f6262b31a31ec91978ac4488de398a4e780a8ce1e3a6fbbe17e3bdd105672"
+          }
+        ]
+      },
+      {
+        "bom-ref": "98711e398606917a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a1764894981b73b8c03d267fc59b5c2a8f46a25d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "afb4ae5465de455d491b9ec2caac993f6c52b2c2b00d9817ef33077f6054316a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe0dcb0d757f8f66",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d4fe454f58534e1ef4b26586cce7560d0a0c1593"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fb57051a060153501ecc4f0f405f694e4b8e354ff5a5e4a0e33ee47bdeca884f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d76fa8126e4f978",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9e0a8f6be8feff9265983acd92a0e76e12888c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b982645346723c48",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e492fe816d79b77deea6b08e79f1dd725e31968b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9b672598114d476cd159f22a3048f92feb9e2a26e3c0a5f2b097b00db96f7360"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6bd1383ccc1bb5a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-contrib-compress/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "74b3b66c0b882c2f6ad989971446ef680e558834"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d75fe9bb9ea6398b82febadba5e93001a8be6a2f73d2ab77fd7783cf981ec19b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ecb07c41e201332",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-known-options/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2f23630667ac2a43221ce73913f2a100444c9d3b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "68aae8e3a01b7a135031a78b5f4f866a3613ae1d2e733d343d007d420f960412"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8509b24a929db1e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c9ef7bd0a1c3d805814c654c457cc315c48c116"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "22faf274df69e97c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "651223fdfe370f7eeea056c8bb29f6303cabb3c1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9cd907d34a45cb73b5c8a459d5602a36ccd456794665c529a3a5b0f02e196f26"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9fcc7fb3c8f220e9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9da232166813eae3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "063af00e52b5181e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "688a5d7d9b58962757fdb849c4876e2ed534e12b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fef4b52efbeabeadfffd5994e90b1025eb24263286e34170675956637d368b1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "613266f4bb282bf9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c4abe10bd7383f277a3eac3ce43359fd92ad32e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d410a772f9f64b224482ec13815a4bbf1837c533e1be04b3687755c48b2efa1f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d2fe059c08d5ac27",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fd7bf6aca87308509a684eec0d57af6a97d2e673"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f3c2848bd95bc42d1d0907a53bc4c58af98d2fda3c6a392ff5f9eb3d7054f63"
+          }
+        ]
+      },
+      {
+        "bom-ref": "804706c860b40751",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1cd1c78691f7985f2a1b21d18698fcadcedef856"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "59591b6842c5175579cdb52ffb10c2cbda4bf4129755daa3bdc5d36059a65c24"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9a23cf5be5e6011e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-log/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4776e43427b086f1197f9fe45d810e2e31994f42"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f2ba99338a46596bc93ffb9b0bcaaf852093559fb8adc8a46a65c9f0b8570ca9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "66be0bb515221fd9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-legacy-util/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac0991341b67c10d582e6aaae42cf1a7f18bd5ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "73760a532d0d8ecaaf31356ee00535ea99aab390577db4ea274146280cac6d28"
+          }
+        ]
+      },
+      {
+        "bom-ref": "06f8b12d8acc73c9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt-replace-json/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3809536e511d1e2d35f1b474ecf83f0525a5488"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "48b4ef2e97791b7f824cf0d382e16ca0b3ab6b8f1a8554a17d214edfad8159e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5263ba663c126f86",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7e98b1c611c82c90901f8e7482d39e23a940976b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2d91894dee5ab72977f359cbce89ab9161675cd0db8cb56ad6a93fec9a33fa59"
+          }
+        ]
+      },
+      {
+        "bom-ref": "92c829e60a5fc7a9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "331a7d4bcec851ac4e7c1cc6624117fcab2be3af"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3c5a47bd1991588b045fbb54fb4def5d52d9bbf1a8abfca39d370eb2274f6733"
+          }
+        ]
+      },
+      {
+        "bom-ref": "033f7eb17ec14a33",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3d90badf75db503f5dd3ff3fb76d120d1424978"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d73bb0f1bd46efd0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/grunt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d2e82cae65e6c8c24f4685c74db6dbe7760f6ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1cce5bfa08cfa562e267c67bb623c9b8612f548a6cd5cc16af92a3476000e005"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5672485a27cc7f53",
+        "type": "file",
+        "name": "/juice-shop/node_modules/handlebars/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "303d964b8e10574fcd0e88ba8920b96b0b917c6d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "110a52011f3d7e7c411851e485747e203e4d061fc88b435c75a3b1def6a2d135"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2faecbbcaec48dbd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b37cfda3b81ab97ca6c2845f42a134be22e90722"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e33bad3362a90aec",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d2a70595a6482fc03d6615decd51e24073d5bc0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9ef1a1efe1471d262ecb5f55215109d051a1ef556e79fdd8fb31300f84d8ec5a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe883e727551607b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-bigints/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac647a2de47db6928f257a8a1e3b4274c198e083"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b811e76ed3775f79abd7ea695c4407d800678a71703762f50bdde6f1f03098d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fc154939830351a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-flag/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0a61b7395724eb79396b1cef110a74565de5ea88"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5f786f6d16a53e7171fda89adc83bbd9c07fc17fb9de7ea78431283972593984"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b2af6a257d4ebf91",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-property-descriptors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a3e6c1869a4e2f16574906fea431ce7a4bc1a022"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "59a91e2cf32e4303d248708999a9ec3afd8e3649a87ba7abcf2177dc1984e3d5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "876df4d341302d20",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-symbol-support-x/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2b9c85c4a1a16c5ebb307019bfadddbebba06a72"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55cc66bb9aa16da08a9e70e21d258108b9b510b2fe39310959c54711b78dcba0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6733bec50ac7712c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-symbols/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e49a565463e9e23d9c32d8ccc18009321af19bf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5190268c0e3308d7446d1f7c036238f329f786938453e6017cb90980b3612e7a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "236a24581b8ba05f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-to-string-tag-x/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "efa6ac5d32b7cf37e677de7c59bec08dfa68aefb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cfe639d187fa85a2ae2f8c0b5490ed8d26cee136ec7a18dbec93442805bb9172"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7325d82121f7b4b1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-tostringtag/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "75aeb5fec79dabebcda93a54b809a899fac1e214"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "30ab773c52021a6b800ea48f251abeeb1f6e378300f819204dfbb38d6e43f3ad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7fbddd0f0149134e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/has-unicode/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f25b286b591e5aa36e855957980e27569961d706"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f106bbff8f1aed94ef54031d8a4e5ebd0275b3fefc15361a96150d9029a9d510"
+          }
+        ]
+      },
+      {
+        "bom-ref": "97e162694a0b3d44",
+        "type": "file",
+        "name": "/juice-shop/node_modules/hashids/esm/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dbd2cf3b837c1ed989df0bd7c68e7e3afc422110"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dc5dc8f11f4b9b6d3fce9aff5d9ca80a33a8fae0f3dbc936ca46c34544b9e193"
+          }
+        ]
+      },
+      {
+        "bom-ref": "852c5f326ee70caf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/hashids/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f80c92184acd8d5f637070d27846932cbed990ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a259d571296946d349a9b2f60dccd26e3a212b122799b26e422c5c89989e42c5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2a5ed95000ca82a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/hasown/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5221fc7eb2ef1f25edc665579aac82a8445062b3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0e7437fae8ec34f1d908723882b99919c749d8c0953d9afa38d2674154bdd0e6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ac93b20e7e85d8a9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/hbs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "903f0298d1493eb315a6f02c7cf4a300721fc255"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "252ef4c8ef71cd4915e53b07e38937a9915969670e4df1347040cbb267c2fdd4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6c81bd7491869ed4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/helmet/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f45fd39929e3c9ca97a65bbcaf3d1567920807a7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a4f9450eb1a4a5cf7615b6e6869daf0e15cb93b543c5468ccdc17bfb4b01060f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4ab1e2a0de399d4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/hoister/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf8c5433ce82de1669c33ced53ca7921137caaf7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f933fea588f1f4793a42af6167cb2eda0e8870482e63e578117b1bbd9cca40ee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7770be27d5920308",
+        "type": "file",
+        "name": "/juice-shop/node_modules/homedir-polyfill/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "90510f253e4efff50c5b4abb632aabb3ece8a9ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b841920660c6b6a524d764904a766cc59c401ebaa523b12a3fd429f7774d7159"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4463b3fe9ffe6c4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/hooker/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "67494ba80a66767922c1d09ad788b0942f13e20f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6e06c9d7c91cf44224f8d3032172ac0b653728eee2e020ea6e0c6ab95d1f00de"
+          }
+        ]
+      },
+      {
+        "bom-ref": "25cad5e510e7222c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/html-entities/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc9154a0b80955c1b19d667648d70cc2624d64e6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26f25169d8e5b02059de306c648403c215fc5e26251ad6be2717b5731bfb2ee8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "de196616e834485c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/http-cache-semantics/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5d4b738e14b91ea4619d48058717be58524ebed7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b7911fc41261e41b08d55a9586b8fca73b22d61496c39d46be353033d2867f3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ae2b00e3d80026b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/http-errors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "23e3c3f5ca5a315e223ba47751bacc3550a10865"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d540721372bf8bf77b5fad31f6567a916e24d0aeeb78c81ba92b69feea9f1eef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9caac213d01820a2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/http-proxy-agent/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8c937cab7e53c98f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/http-proxy-agent/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3515cb99dcab89f3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/http-proxy-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f8b2b2bf2f3e2f8491496f9efe80b96442a803a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "38b61961aa0ba3028f2e120b3d883179281f6ba25fe22ff2214bf9f363161b65"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b7291fc088fd1ea",
+        "type": "file",
+        "name": "/juice-shop/node_modules/https-proxy-agent/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4f1e19542d709dc0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/https-proxy-agent/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3305d3fb7230afc1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/https-proxy-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "17ea193ab8be5c579a2d10e9a13bff389858f7e8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b08c1977d38f14f4be7fb5be33aab545e3e5a6e2e12100733a6ad97dec995206"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d65089f9e86f88a0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/humanize-ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e6e3f6368e65173263dd3f9fa806de8e74c54217"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b5cf746b84d4d4afcda0f9fd59c2120fed5e7f7be1ec52293879a8c13f30eced"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed400f3d2cbfdeea",
+        "type": "file",
+        "name": "/juice-shop/node_modules/i18n/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0893936ce514e10f9e39f4173ec28715250a6baf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea677f104de62c409c47338fbda0b12a31c074de2aec35a134ab07191f0f49e9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f21bbbbc5a1676e2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/iconv-lite/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a1e76edb6428e44345ed3851ff7af5d850434cf5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f7c96c32f7d6e0498be71b0ccedaf298bb00ab4dd40c1d63655ec53477db384"
+          }
+        ]
+      },
+      {
+        "bom-ref": "249792a85a27788a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ieee754/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "19b82f401d4e2ef5db8528a35b2e12d1a2630d65"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a8004b9c8dffe2e1b01a058ecf968a5d50beabcabc43cc98c655184ba6afc050"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0dedf75b9a519d2a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ignore-walk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "90dc22d9d2ed240a66e727ea9b8931ebcb8ae1eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e7ebec436cd93ccc3827d6a2b4d4e30da28d063604a4e4640cdfe9116b82a9b3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "850715eb15cf59d7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/iltorb/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6567bb730f22b22008933aee31fa214b59532e2f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8770f6e48b68a8c6870ee796c921140bd48879772b1917bd9bc3b5b7f9f47e28"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75aadabbd67ee2e6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/imurmurhash/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a28f2b413385af4188c4fc0ad1e0c38c2cd03cf4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aa3b07e7fa3d63aa96e401c3842b8cca1dd3247954baf92377094766e903c185"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9813bd1cd61ebbc4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/indent-string/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8e67654392f062ebc5cd54e0f7d06427700e73b9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b15d951490ea56f6309d9203e1c3cfd036ad1c67ca1c7f372cbfdfbf3faecb7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "117aea536f4eb24c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/infer-owner/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "520dabd4fd509ef15c618b6a8dac1f070f82a4dc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "84793570c7d0565481a1a713f9430d01987103e2e7d6c3121b1e6054eec1f625"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b7a2665cc80af54b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/inflection/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a346ba8ba91330083e37d70e74f0ac7300a07797"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "658ab85279b559d1126b7fb7ec389a22eefdbb186378c672ccb1524b51fc6986"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b917461b48fd3cac",
+        "type": "file",
+        "name": "/juice-shop/node_modules/inflight/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40e50820beed8bfee8ce186d5be617a8c213e7e1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5f2489e13f73e9ebad999134fae8a591f6d8b58e8341ec8e3b33397c4d1ef817"
+          }
+        ]
+      },
+      {
+        "bom-ref": "444252544c58c4a3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/inherits/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "62b11dd736a0047fbd8d2dc0406d2118a549a359"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "be645800bc94fd8de29c8ae91690549b316cc437100108aeea7b2f347693cc80"
+          }
+        ]
+      },
+      {
+        "bom-ref": "32f129cf490acc1e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/internal-slot/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "696536e795e6ff3c47d56b9e644e5e35d132a691"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c75e491911f4ec299ffa5415dd20e914feea1b69ddccea2a58c82b6e4c7a714c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "52cb46283cc3c2cc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/interpret/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "40169e9ec112583cdb2c363d627b7a16ea7fe3d1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b768bb2ae4ceec49a06dadb163165eb2af172baf43288f94e2c2d53b187175f6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5ad4fbd6aa1432b1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/into-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "71a5a430e9790858c3a6c90e6d9d072353ce2e40"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "882d4f5836f96d6c6a801aac00c2b928588508ca1d43fbea337602afa6fd607f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7df95a6ff73fdfeb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/invariant/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "59f8a398ae23614df8c1d975429934fdf9bc1949"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef0c08d9f91029e247bb570a04903f3a9bd646c1f2128d29e69ee171794cd2a3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "640ff5d9cd33ffcf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ip-address/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b8fc7d207cc0a71982e0f2e85879ac39110ee51e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "efb3d32c0c7996237f78af8fd820e3d58e66fa76593fb329fab6b3ccb260afd6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0436578906d27e42",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ip6/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7165eada544861027677ddcdf213c4e5967a3d18"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dfea7973e120653c2568cb8eb65e89d8ae8c25ab4995c4ff5e2cd5b7976f8a7d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2642635df213036e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ipaddr.js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "532be044ce57a9f81fed35f3742767f587cfbc95"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc1071893728a0e78fa40ce0dbe04c5a1021179fdcb5b229f274e3556d6a87cd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "297e84889b5744f5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-absolute/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4bb791bb15f2343372fbbce4a46304777cd7704d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fdd72b01eac6f6d37dae881d90cb127758f9c5053e85c8487d323aac1e45cac0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "24919c70e961d9e3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-arguments/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8c0d7ca0e6fe66cd74d472528d04778eb7cc50d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8962afc6bca1e62fc8d6413c1c82b0e060ff51fec9cb1d00d7c6b82337666e52"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe3093940a96e1b4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-array-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44fd3e5dfa707791be92aeeecc0fb3533b39bc71"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "38a3c4698e3f4f2235481483558a96e67be7e4e90ce5647950da73efd7ccfb1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ba6161cb53e2e29b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-bigint/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "68ec3664ed0d57b4cbbe598a49fadeef06b82fad"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "079916fe1d9e42dd3ed230521911d4ffa718f3bbd7efcc53d4bd8803b0cd11d9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "454408b1c839f347",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-boolean-object/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d8e80fa1a4ea5a6e58e4be826e5496a24df823e1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "908dcc16536fcfa62185c80010d9e92891f41e1d279b337d830d99a8dae9aed5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "841da918c26be2c5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-callable/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1f39ab1f57f84f43ff79dda15e9b93d7f138d73d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d0981565f03ca488d263c94d038717ec4face8b129b8ff18e792dabae2af755"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9c1c4717fe9e80f9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-core-module/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "39faf2be321b4a2f72d8fa7b72f4858163647b59"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "49d7841f3d48b2a09473b294a720b857d4450b10f4858d509edacb443555312e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee226a5355439bd7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-date-object/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0fdae008400e5f301759c2465a5776cef0d74193"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "224b3f8b6f9564aba91aefa417a925e00f3be92896af5bbeecf1e9e669e05ba5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0032317fd69fb2d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-expression/node_modules/acorn/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1ed049ec2757f4914862b3854b26363806c4859"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dfcd42c47d09aa794214c28476d5b519c157e17d9490eb2c50faee3defd041bc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "affbcc571713ebb9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-expression/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a58f5d6e36c8bede8f377c6ade9bea70208318be"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a87a48e8070af76c07b15557619ffbb6975f093121f5636fe69fa2f7f7d3ee81"
+          }
+        ]
+      },
+      {
+        "bom-ref": "606c977dd71d4271",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-extglob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3f1247dc7f917eba16d9607c17eb9818d2bf43eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8031afcd87f448d75ba8a5dd2cde9c68f982a94f406ebae8e5fb7cf6dfdeede2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8410f67339212229",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-fullwidth-code-point/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "49dbcba3eb3e3cba5b97bce28eb6194775d23c88"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b48496ca129073ed44a677b777ea3b91366c8bc228bc75fe858749a78ac1a32"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8dfb23f0a6ad62ef",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "57a53965f8f746a1f0f29696ad6e770a8beff7e5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1cce62b80db12fc033d85250b5881b1a288476229abda8e1abd983724befd56f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ae7e0d01ce9f8571",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-lambda/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7d1ac3b9e27615002074f87da8c39e91995ee88"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55c72a97449e2b52a5b763bf6cfa7de3b9603fe2a57074066ddcbf522578c9b6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b5124131db2784b3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed28234ea9e98bffdfbf923897ff644aa9e154d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b2d7c205058919c957fed69cbf8cdcd589dfc82c0aadc4c2e298f9ee3afd296a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b31909806a75e7c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-natural-number/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "096ffbf63a49e913e7758b58ceb3b64305517ba9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9170a51c5342b4a707c55517d66f7459ee82efa50169f1d9a1d98b345fbf6acb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c0460b06f9a24dc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-number-like/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fbfa13f628360f4178cca9025b4df52da7e81863"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "34ac5ec903e8f8eae2536d33611a0003ac66e8bae7dabb2706b42af74b54578c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "28e5f4fe030ed007",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-number-object/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "64ce0f3ea95faf731a61339f0cdf8586ee2e7e15"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0f647c3741eea832398ec6d2fab6dfc7d431e3a66e3def47ef01dae9ac79eb53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c97cee849a0e9adc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-number/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2bd4ba6c07c12d2b7af0035e57b46cbb7e133477"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51c133f4e41df982aef69027249ff9d7262645029f437d079adc7c83328fb620"
+          }
+        ]
+      },
+      {
+        "bom-ref": "38445b9b0be5d964",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-object/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "84ae32267e3fa601a9457e3361fd63c48a864595"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23bab3622439df0c6ade1d7671e6609eb55abe359b559da21c6ac1e8ba92754c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "36563eec6496d1be",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-plain-obj/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "96165e985c551894f224d8ef606b1cf98689b7ac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3f2d9ecc4ad7921576d65361b4fce21c5cfee72a4fc18e38b6c2050738df67d1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5c974df87a554e00",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-plain-object/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1793cde25acd0f4f2d9f820d34c8675543770b93"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9d230b1f721ff1453f40e10824eb4048072ba04c3d63979c48d59c20fabdbb96"
+          }
+        ]
+      },
+      {
+        "bom-ref": "55145fd4decdfed4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-promise/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "204b9c0844ad7952b8c714a076936074a9813263"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ebb992f44a73d06d3af839970ae14fa2a5a70a5dad61b527c21a9d89a774a617"
+          }
+        ]
+      },
+      {
+        "bom-ref": "24151757a6c6a142",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5693e910887ef21be281e8860ca0c3a29e59e794"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b99ff9cb5a079a1d6060bce2d31f06780d4296539a5b57106047a86561cd4db3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c5a4b747f7c76e54",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-relative/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "259ca538dacebc5458a1deef3600da0469f1f5de"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b4059db81cb29586779cb6281b3ca0605774e1185e0b92432d6da2e8da3ad45c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc64eb8ada5cf9bc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-retry-allowed/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b8190b0addd0dde7253ba68348942036fc545ee5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b9c34d3385c5f3050b73c5650977c0af8963165ecbba9f3c85d618c55b4f3486"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8dcdc08fd11f9555",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-set/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e0bfd95803a081436377c6057b747d27d1ce1fb9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e23457a11d7836233f8a98ee97dd7a2cfdde4381e46a92b160ffeffe2c3d001"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f86705daac27dbe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-shared-array-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "983f03d977afdaa38aca26493740f8eaca2f6d04"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a8c03e6ca8d6879d13cd4bc2cfd1e14c634006532a295016f4abdee27f5877e8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2bafa696f83c5442",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f2f490f635a13ed709ee5c0605df8067905ddec1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8cab336575fb9e86b6f6473b57fe06b734e7443a2f25359b542b289e9cb2c010"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d500e168ac50735b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-string/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1631d23f33757d6197f8ad6d696832b1a2759059"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e34f86b9cc8a1811587ca3eb5efdb7f158f3646693b5e657e7188c52b54a696c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a6426cf7d5f7d7e8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-symbol/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25682cb00f7d9b3167931c5bb00906dad9973d42"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ae8d1155c6252e4b7077944b25b03a2c175ae632e3ee78508f12cc1c94f8296a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eca69a82bf010990",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-typed-array/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a069bc3c4312b2c2911625277a938f265f8b80c6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51dcf15ccc424ce76b36bef2ef64df7a53e75294cbddf08b4f7e639133145cc5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f5bb87022800809f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-unc-path/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "56e3e8226782aa420417222268679e375aea5155"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b2edd3e5cf18fc0076ac78ca155cf7d892cd6525b5cc8995cdd57d2d40051860"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ccaa358632c3012c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-weakmap/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "18426dc3cc1e36705e80b9508a7c45f0f7d1e8f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "483ce3a97e913446c2e43013b79ae03240d583d938a61c3c3c0e2f095f56b553"
+          }
+        ]
+      },
+      {
+        "bom-ref": "28424c9275fb51bb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-weakset/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "70492aadf02d82ca5637e0ba90fa98040501ba27"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "689f191f14c6dd30bfc0325475a738cd9633cf632c8e4ec81714591817b4ad36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "023251c68683075e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/is-windows/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f452f4328f713c711a0e207be3d8a0958222c892"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "78963f69e47d6fb7b090bddd4e4eba074627fa32d5c4841a1839be88cf1418e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4caccd40a431016c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/isarray/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "73e13702b019b992300caa912bc2322a9093e21e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b0802c09bce6bf067d3e5f52390ea26972e11c88bb6ae38991316ac83ca14127"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9cc72a1f391dd78",
+        "type": "file",
+        "name": "/juice-shop/node_modules/isexe/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b3eab80c4ffd08eef6b3381b98de7be3649d06b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "395c2af9abeeaafe7391974c1eacfb2a2bdeef187f21c3f5582c49e0368e59bf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "51601545544ca18d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/isobject/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dd20c4d536aa7a67fb5ed1eb4e5122ecd57534a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c66c0936c8ac63e97aca4e747fe0da8df7d6f093eeb47fb29d4d186c41272465"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bd504ac489a4004e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/isurl/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cd24cb01b3ad1b0497249531912561ccd258c46a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9396a58aa6e42df65f7aecb92a08e6b5a84ecd6485ddfe9a3d481e7fd2cf1251"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f1973146e421e80c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/jackspeak/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "15e15f7f7565d0a355be813b2e68eb35e65102a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3379e9c1be25729a6c7fc160e840108e15895c368e8060e42f68598f9f3065cd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e97dfb4c1a0fedfe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/js-stringify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8828486a7978be6f38eb93353a990f4b00a7fc66"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "133b036b739bb71c44008eb9c2bee9fd3169327fff26d2b390c63ccd70f8c3fc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "057a4a954b3ba206",
+        "type": "file",
+        "name": "/juice-shop/node_modules/js-tokens/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6704feb8cbaf803288d9185a2fc86017e24ba55b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47345931827b3e26db9fe690abb81f856a0d040cbca8af1e69711a64cd58ce0d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ff51a9d522da2cd4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/js-yaml/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "95731315a952b3ce6af42e97eea092eacd9ebcfc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4cdbd7e882f90a7f551726d9ae3ecd8363fd31b39a9d2970dcd0ea46e24c8ede"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1bd4404754241d69",
+        "type": "file",
+        "name": "/juice-shop/node_modules/json-schema/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "513648712db28c1a0ea3abee63698dd426a84a7b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "22fe1fdf2eb8925bb5ea40f4dbff8fbfcd695190362afeadb8ce1b7d79f6f3f0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "49e24851e6ed82cb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/json5/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7a38f8d159bc79dac6ac618707de02fcd3063f2e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1927c4592e3811cf9b8c86e568df1c41a373b628b4b322f88872395ef87e2ba5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8f007cda3e6e55d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/jsonfile/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be1e382c53344bb2a1cadd3798f7a58e0aa6a511"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df710d3401289ba32728b5459ac334bf99b18259900ca22b2401f48d92892613"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be6eb5ce463c84d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/jsonwebtoken/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "305242068c0654ec18802417c31771ea78dd1dd1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5f6505d0fae5a241cbdd3cf6fa841034db7d9870ae774c59c342fad8cfb82eaa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4f934cbbe2a8d9de",
+        "type": "file",
+        "name": "/juice-shop/node_modules/jstransformer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b289d2aee71af7c52388667c93a40409604d0c86"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47dd1297b10e67e178c2a788856a518fd05a0e0b0919f1f9f12b777dd458c454"
+          }
+        ]
+      },
+      {
+        "bom-ref": "876fecfcdf83dda1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/jwa/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eab0e2efcf0c2ad608521805b5989c409723f9dc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c2e3758f078a67c136a198241daba4fd306a75c474e8358d375807f350a159a6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "12d983f70def9868",
+        "type": "file",
+        "name": "/juice-shop/node_modules/jws/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "515e309b1f538c91d0be3ec2334bd3a138f920f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "897314a2d7de9b7096761af9694c4b6685dde9f82f39326510c5862e1f15c882"
+          }
+        ]
+      },
+      {
+        "bom-ref": "629b8ff50accbfe5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/kind-of/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5cee1955868ef17a2d4c51f75f412419cc89e915"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0710f74718210573ae878c0a733775d2ad9e9d5a5053f0521cbf9347a39a01ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "df068e5b3c52e260",
+        "type": "file",
+        "name": "/juice-shop/node_modules/kuler/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c64c52e6c65728378f338e75e3278ebe469916af"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c22c6fe3ddd0ba047218d864008b002eab3fce6b499351e7a4c63e2cf703ae7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b81b17a376ae4213",
+        "type": "file",
+        "name": "/juice-shop/node_modules/lazystream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "799982547b24774bfefb32bfc82e2c98d77329f3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cf0860e26be0d5c9098d1bd0ce5c5faf1e02d6c6b050a14bbb40c2fc1c087fec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1eabe7c193372979",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac9fad510ffaa52eccff29729383a2f0ed602bec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080"
+          }
+        ]
+      },
+      {
+        "bom-ref": "258e57a61f93916f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5c540dad2b3981037a3e2ea4d66da80986ab8a37"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ee88e5b954fdf3a8480b1d01ef767d68d8ca2c6da269f58c5cf1c5550e9aa2a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb00f883ac43e4ff",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "346eddf46b62ec21",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35b672da35e299376d0ffc4f22fd57088150a835"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d44b9f96f989e342",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "73514830b941035ead3ae1de9cb5b8a3dd395f10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0bf67c397d8f6a9136d44eda86f417c0c81893e99697cbdf8733cb2982d7884b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "46a2eeb76da6c366",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "53b43dd098da8d4b0606d47cc71bbce0f9326251"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b97fabad0815cf49",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9db18a8163ab1fbb6e7c8bfd56c7483239d63c63"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "48edb940bf6ef53d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/libxmljs2/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1f8578eadc922aad04a6d7c7b0c34d52859ba76"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9f6e576adad1199ac47aaf3c8b2ecd28c4acbb9bd70c01d2772f319757e7102e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2054844de677bc67",
+        "type": "file",
+        "name": "/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "990b9b7b1e0c10a10b929022ea7d2c7123a69dc2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d2a8fd0bcd4b5a28fd7132b036e909998b63f5c98614efc25997705f85481381"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ef89633fbeb84d72",
+        "type": "file",
+        "name": "/juice-shop/node_modules/liftup/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "647850b8fba294d8450e62ae576687219a9d92e8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6e8687bb4f371e6a5a0316bc221394442e4fe55cf0c19f901b917e7765c6eeb5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e1a5c81be7370d9f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c5e890ef1a0688476da2fac589b8d70ee8b9e64d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c02b020c7ee58e1dd08812e7fe2808881433a4aaa4331b0a440961e8ce853e3e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc32c14b4eb29b9c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/linebreak/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f0f13cabdaa4467eddc525051411330fb1b9536"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "53f67b29d3d0c3bc43501bf17d658aa611a668128eeba39ae9eabeb1cdb505d0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07e20f898b9b1e12",
+        "type": "file",
+        "name": "/juice-shop/node_modules/listenercount/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "39b628e6e8b9f8e088189bc3be32981b305de75d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5a86ab80928808eeb15b05c191e506282760ac13059a9f0e80f4cc215e463e99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "37b938e0f95632dd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/lodash.isfinite/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c663108fc530fc52e8ce946399b099dad2f6114d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2abd2380279a93b32995b706fdb633fc9ac4f53166a770b1d146c17612444a84"
+          }
+        ]
+      },
+      {
+        "bom-ref": "92919f7d830d90d9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/lodash.set/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ee3b14200998ff446e2f7c90f6422cb02185980"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bb7cee8203b5e5ce6d1d38222d558f7862fb5df28ae57d27faae5bd2bc0b2f53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "965a1441fcfe0bd9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/lodash/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb811e51463439c808b7f983705ceff589b52735"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5ef0a453b679125b155af19e1477f93b577ea826a57e1545f77608d326966e6a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "143a0c2754b8605c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc0cd68d3d25a31abb16de7e2b5ff5e20d974403"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "266a3a7cb021ab1a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/logform/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d68cbfaad5e0831",
+        "type": "file",
+        "name": "/juice-shop/node_modules/logform/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee3e0f5dfcca636f59f35b524c6cfee6f3839835"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7fe3c68c465efc9460ce9abfbf95d5cacefc76fe159c7b171bf8923aa27e2660"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fdfc349d3cc4f8a0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/loose-envify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2162096bfa92a2ab1ab7bcde6fe70e590adb7eaf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8c2e27dae366396ced36fe0f7c6d35d71a1440fd8e82df5f2005a5297888a0d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "68959b4e3c8aeeed",
+        "type": "file",
+        "name": "/juice-shop/node_modules/lowercase-keys/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "094e1a4133dcde74b82f3517eecd3acbba0ce722"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b93a86a7d0bcaf9f4fbc2ff2732cecb237a70d541a5a8a3cd8c8b6b2829311dc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc081c7a01a4c9e7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/lru-cache/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eba45f816c43b1e505440b7a7f8392e38ba11306"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7e05794a5dc81dfc79a0f186c5219f442f2f735b08a3e9b91aba59833badc2d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab0374a31ceda411",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-dir/node_modules/semver/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21cae1218ba3b5465b4fe24b2834306c0091cec7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0f8d4d61f0398556",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-dir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "efaeb3af11445ed86a3b422c6779425597aedf92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d97dcd396bb3397b3e6651032ed52fd937dcfc6da85bd792792f3ecfb8206326"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb75757de8793ed0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "563b0d8af1a9641083e8f6cefbf4259fa845e7ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3973333e372a72e7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "046524b23a7aefb2b0cfd3ebbd0fd84c0f7df3f6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a33b5a293825b22957629dafe778ea4164e577499418cd907d937b874f27675a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "badab0d835e95669",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-fetch-happen/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4e321611ef7ad4a60c9b8db56a8e49c35f4624f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "279b653b3c792aefb9cef4f0822747a5d81c1fd135bc92bc1251112ddc695b84"
+          }
+        ]
+      },
+      {
+        "bom-ref": "754e691289db6fd5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-iterator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d4a1468c0616ef8d46d346b089bcb5d03ffe180"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "40aa14a22aba7bb3f924fcf0fd9228bc957318fcfeadf357533ee3d86782acec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "77aeccd6bb9e0232",
+        "type": "file",
+        "name": "/juice-shop/node_modules/make-plural/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d39bcf894b551faefa974cf0f466849a7c416c2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dea92be18b2be286d23fee583b178685ecd7e18c49d2535d0ba625a02722553b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "070947502445a27d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/map-cache/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "59f4b9e44939cd98fa3853cd0437d509aed52b92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f7a40df8df45e11963987035e12955b2e4a5fba23c8768fe1952d034680492d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9075108ecc5162d3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/marsdb/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "05593b5112e981dce1e0cc9fab47651e53dda0b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3f66481f2e5de498a9b36561856a2e689ba4ed420d7f552887783b3a44e3d2f9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "515059037484af34",
+        "type": "file",
+        "name": "/juice-shop/node_modules/material-dynamic-colors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb1f9ba797dca28daa3e95d60730f710789b00a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e45734427454c7c96b0f05f296a6a7a173475ae5c0cd9d3853df665be4432bc8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b62dbd78558c16a0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/material-icons/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b8622a72c9641421ce278db5b992acaa7a652028"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "622056b17608fe8a3a74c56215737e7835b0415795944a9ad00c0b4e1db942e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "536114092d8fda29",
+        "type": "file",
+        "name": "/juice-shop/node_modules/math-interval-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1e2f73e92f8caa8815589e89dcba720f53f0b218"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5db4e0e76fdf0f85f164380a4d113ae51c34752d0d4f57a9e360ac88d199a33b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb6af2dd3db6a914",
+        "type": "file",
+        "name": "/juice-shop/node_modules/math-intrinsics/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "017b2996c50a49f073f75e2cb92b61b9d4258bce"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "39d74aa5a354153130706286dd60a2d8409ce0c8f66546eff2edcac0afff17e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "62e64f50eaaed483",
+        "type": "file",
+        "name": "/juice-shop/node_modules/media-typer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "866c9ea28a167b6800da67cdbe18cc9f0ec5cbab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8ccf875e488e700b79ec48386e2f47c51c5f26297ec74e5e4e5d92dc5d70ef30"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b10754e77b7ff31",
+        "type": "file",
+        "name": "/juice-shop/node_modules/median/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9cbbd09b97f16663e8695325d1ce0c44ae624cf5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "48ae606a70183af9efa60fba296cfe1fdc103c06d3d5073e1b6c88312492bbe7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4d4352a3cf64ce9b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/merge-descriptors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d393c91c5d7c5291956c48571625b13cddd28990"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6321e7d658510186de8976bd577ef59a1dcc4f1371d238ce2e676e484d1ebbed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "60eca93805e06ec5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/messageformat-formatters/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "97ee08ab442ed44e08cfc000ed6f5a9f57795c1a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a29374a4688c850e080f311c796e3875a2c860c21389f59e82e5a17791c8aac2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9755813393d4a326",
+        "type": "file",
+        "name": "/juice-shop/node_modules/messageformat-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d65d6a13fa614fdd498350e8839e76bbd3259ff3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7d4f82a9c3781764f348c4bae11f4466f0ef8de8557fcb955a9246f14e2fffc0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ec186466700d3c7a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4c9ce9e1ead0092177f7ce3e2dc6f5c6ebf04c33"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2ff54f256f10f5f7d6d5542b83a1b659897f6b8620521eb8df01dbe83cc57b49"
+          }
+        ]
+      },
+      {
+        "bom-ref": "adf762cd8d519ece",
+        "type": "file",
+        "name": "/juice-shop/node_modules/messageformat/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8d0f9e8b22ad0e4931d7109d2b8075fa34d07b0d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9a3b8590efa611ef114b154994715e4f9c1226f16592922e48ab86245dd8c6b5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b72d6d946aafc0a0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/methods/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "93fab7b874afa4232986a2cab9a7e900b5eaee5a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1aea21641646c87a589208a9363141cd2acd503db45c635f8217613c45837c09"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c5a3256893df6770",
+        "type": "file",
+        "name": "/juice-shop/node_modules/micromatch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0ae8e81288771f32a5d752c97255f75cb2f48524"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "94dbc881c0329813f2481f35fcfa725a2285d45926d33e9b9b8b80b28487752b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3115c8d3973bdb84",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mime-db/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "192a69685a32f1ccc5df8a54ea0f117c48bd87f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d03e37b915a050af548d543f4e45ff5de06ec767c19e745f18c431d9dc26b5bf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0d3037e04bd45474",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mime-types/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee2c9eae301358bf7d646b5b7ede6c28fed4bf96"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5053cc10259c3913ab6b6c8f13170a619c0d1836c1d9081238329a559fafeb3a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a830d57a7dfec152",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mime/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0779ea22afe593a2ec0223d16e9ccb5d0e01e45f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f6a871d6ab40d2f2945d626a4d75da2fce78a35737c0870a0a4da9bee43f9d4e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a51932c7b9535c85",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mimic-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "082938445f1ca0117cf3c38752fb121b427d382b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a3c32b6656683020a9458474c9536dcbf37b873668b87635c19ff10b58f362ae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11dd36e7632b41b0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minimatch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9bac2254c52c209d494d1589dc2f5e6b7e8e5d9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eefa1c89527d52bbb2e8b053fe8ecf3e3ced399bdba82cf27e0e92edfd833938"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78c564d222aae42b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minimist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2bec91d11358048bff848e353df12837beb6ad94"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "252881f6a068a3e70386706d88a694b5e8e9e053b6d9f309fd9a329e651bbf81"
+          }
+        ]
+      },
+      {
+        "bom-ref": "22d89dde6453d917",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-collect/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ca3a77ca7b795148ecee5d9ebbe96e968dddb15"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "042ab826c5440a7d01a1cafae44c54840618319e2e64ed40df006c542b0768f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b26831fae1851b79",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-fetch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "20a8b7cdd0d9df659a448aef3a4589ca2a95d39e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "75e1d21fe4253c6a01b012e347900cf44c13f0ff541a5e000ff930faa504d84b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0fe7918f1f9521cc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6629da6ebb8033e9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6a16b480cbd582f969b3d0ed89a157316268d10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7838c61b87ee201a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-flush/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "30f27741b9d1e471f8c4546c5fbe6fc3c3754821"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "00eb6d6a76a29658c56bfc079f9e5ec008ae6ba136b83467777948280077185c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "802f6e79e7f11c9e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "45ce4633a654ff25",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6a16b480cbd582f969b3d0ed89a157316268d10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "055a5db129d56f1f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-pipeline/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e30c58465801deaceb4b81898e531c75679563b1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c20f059ca6012af5a3d255948c7ab1fccc06ad1d0019c669b08ba251cd4b281d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "24e62306decb4a7e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "abf5360c5e99d76b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6a16b480cbd582f969b3d0ed89a157316268d10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7286e5d09b6218eb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass-sized/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "615e0e93dfdbc65b217029380591abc9e9b64136"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55b337582c4192528f19eea2ababf77b18fe2ada15f346b25a2c1d276fec182b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9b7a79bfd7c6bb2f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "61235e7e9cfd09deb1ed8a00c522c6bbbcdef750"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8ab116187d5e9375d494f17437eb862cbee4b329c21f15412c6a5170ec2f55c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e8141e074dd677dd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/minizlib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ecda8f42a2256be6ae9bba8a268ae3964683fe09"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3e3b206f94f3bd444f18fed847d8caeacb84925c628ae3d87805bc1dd6c4c470"
+          }
+        ]
+      },
+      {
+        "bom-ref": "372a444cc857f337",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mkdirp-classic/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1038c88acb879de67ec347d0c4e1639e6ddc6f17"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dd81e4703dc7005247e7c2dc056c67c936923a40b4dc9b266cf8acf3442ba89c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "de05f3d3635e911c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mkdirp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "44ed68c9d570bf46fb09d444537a6520b60f77cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8856bdf1f9b0f5d6b79fc8af4c5d23ca25a41c8cbce465d4b2f5a2852eab1859"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8aa716065ea8d4b8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/moment-timezone/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f63ec700f7f848f155b904f161a24db413a96aed"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4b5a6218fe37ea04bbe19f463fc2477e141bfb8ee18506bd99e871a0d25c3dad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a6b74001939eacfa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/moment/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d32c71de37d4b9dffede0ee39dedd2eca5b4bb12"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e2f0870f4d1bbef11e8bf90babd72a4399b86b19da81de796a58457a37b8e13"
+          }
+        ]
+      },
+      {
+        "bom-ref": "be7cb4a0e24a603f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/morgan/node_modules/on-finished/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c29040f7d6143d368f7373aa6cced5817b070c87"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c67ecda258b136ba8f9bc2b6600979bde85308c2a27ea0941465d9cb12239cf3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "10b8b59bc8f30da1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/morgan/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "12b5f22ea2a5cfefd023b561d82364d939346484"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4b0296a5e97c48109500944481c91bc6548a3fa2d8cffe3eadb2efad148859e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f560b25d36019871",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "456b704d126e925b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/multer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9d5f9e911709c067c01dc860c8f6e35a7429a6ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "49eef045324ab4b414b473dd93dd471f68dbc68eaa7003e88e85b6f70c5b4873"
+          }
+        ]
+      },
+      {
+        "bom-ref": "979a7f8b605ddbd9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/mustache/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7388b74f1debb1f95b9fd3f1d61102a98c28909f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6cd082a032f4c79c9f57d1bbd0ebbf9626d05e25f3347b20d3745708b57ecfae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e7ee15040dd47f70",
+        "type": "file",
+        "name": "/juice-shop/node_modules/nan/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0e0bd529c8f4d49238fb7e91741829cf7b0d2686"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9be1db68926741824af69344a811048ea7f236090ee7b39fd639aec9e0a1f2c7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c4cf25f6f5fab773",
+        "type": "file",
+        "name": "/juice-shop/node_modules/nan/tools/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c8b6de0212f33be85f01aea1581791bd14aa2a73"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26c59824a231aa81659c1d72c0a359e271889881218212ececcd4b393dfe13aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aa40cb796beeb436",
+        "type": "file",
+        "name": "/juice-shop/node_modules/napi-build-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b502791eceb8f2957092667ec0ad17b7dba27817"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a49e21f07e39fa8b5ab477b981260594519dca2e0107e820826c040054a63a1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc41a0c6c2c2ce13",
+        "type": "file",
+        "name": "/juice-shop/node_modules/needle/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3d5aebece9ee472dd80cdbe1235c8ce746c76c25"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bc3ebfd4898960d942e65f60696f2af26917d6ddf016dd159c52beb9241d3983"
+          }
+        ]
+      },
+      {
+        "bom-ref": "515c31a35264a1ab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/needle/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "260e4302ad1cb13d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/needle/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9bf939335cef204af46611dc82702b42200fdc34"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5fa6ed0d41bd2d31a28d87fe3529024f19da63f499bc046fe292d0ce82446357"
+          }
+        ]
+      },
+      {
+        "bom-ref": "80d126206a698350",
+        "type": "file",
+        "name": "/juice-shop/node_modules/negotiator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "94342123a37046fc1dd4ed813dd2103479225426"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d7c1fb78e3186b6385077e0b7b365adca324274963e41e1d68f78b4f82105e4f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "93b875636af14ef0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/neo-async/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "420739d2572278d648b89b2206cfbf89e89832ef"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bdf14e4aab20dbe30f54ecb40d41ff75339327f9a1cf8638931ea16256ceaa6f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2445b200cf994c8e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/neoip/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "942efccc7392733b4afd569706e617d916358f32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "858dd14b36a3a87d7db24a605fa140e2d2fff44391857539d7c05d09c9f1d218"
+          }
+        ]
+      },
+      {
+        "bom-ref": "27e94e3d5b4f7860",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-abi/node_modules/semver/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21cae1218ba3b5465b4fe24b2834306c0091cec7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "367f72cc3ff35769",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-abi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "df5a7d5e4921222cd4686a78783540cea2c316c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b5db851f28f5d20f1d0aed33ccc40aceab12fb3472108cd1fe4f6118be11084b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1bff6c6e9aff0b8d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-addon-api/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7823e132377d718289188b35c5c8c362e8d89953"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e4947cf10e432c42459e60a00947ccd1ad2501e16cf1a530b3d39f0c2de5c83f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1df4c28150dedea1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "58ff9d74c88270726b05e383ba4d2641a18438f3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1903498f98eab52f962076359b74e436bb24cf484fd1a75af97a2509712029ae"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6873b277179a7369",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "36605d910c925406fc90023dbfdece89c4b97c5a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "668c167be26edf600ee1c4fab262d7afa5afa66f3fd389b3c4c942bab249f0c4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b8548863e650a0c0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "317e51d1f350fa28d851280d460bebcd9154acca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a892ac4d9de9c19c5649cd38963ff353ce637455f83667a6b3a691bee62a7912"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b5889f571fcc710f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-gyp/node_modules/which/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "519f542417e96085fb8a1ad8d7a0f913155b5e56"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9f06638e5fcb977409c2181382492dd0d62885999e5739a8f285960d5a78906d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "051cf960f44d4e2b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-gyp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5d92c5b3b8cda01495cd181fb02e407a93e3bdac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11896cdb5e5657602a5e6163c5a8fa145011b7feb27ce5d5222b1c82df84314a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b74b98635eba0b9f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3a785cd04b35cc9a5fb36ad1a97561e7d3c3cf53"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "49144a24c7d686ca276850e6ffdd97147148c10acf3fe94317c96aa07de6a6ed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "756b2029f7ca959d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c3024b92485c885b974e1f46cb2c32de716c6f06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b892ca79ae3b4a7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e6807bb3e5a5035a1cf03f1a855b3e6492f4ae1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3539da425561866028c253efb502461eba9a61f60e7aed6236df87f8f5fa8217"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e6402df9d6f97dab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e55449021f01663c8f607ceb7dbbf50d166624f1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f62740d4879900b0e5c1ab64580e4dae15e1345b162d148a260d39834c8f41ba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1522a215ba000788",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bcb1bbab5e11777e5eabdd3ddcf01fbf2529853c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a50eac171f8d9eead35f637c6c4bb965875fe5c876b5c888ba5fde46f4daf9d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bb714d36f79724eb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "332100289a0b019f231d6066376efdfb85345547"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d85eee455ed9a79caa4a91d52e89857e576d30eefc3c826f0bf4dfbe067d0679"
+          }
+        ]
+      },
+      {
+        "bom-ref": "85d8633f10f0145b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21cae1218ba3b5465b4fe24b2834306c0091cec7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0c861256e2c6fdd5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cb08ea3f1813046f69fe762a54ee739e63596d79"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a042350bb5cc1c9677d434b751b6a44fead64bcea99393a1251620db9c0e17a1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e21f3262d5f067c9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/node_modules/yallist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "96cc9bf2282dd9cd2c0bb49c2bca096782b2da5e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "27699a6415a43f128c0e8ddcd5bf6e265f6cf3a581a9d959c11b977244fadc34"
+          }
+        ]
+      },
+      {
+        "bom-ref": "63012fef1e9ef277",
+        "type": "file",
+        "name": "/juice-shop/node_modules/node-pre-gyp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "508afa4b14190f24381eebc0cbdd37fd03d370e8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f3e84b56fe45a07986847204250cb1fc382071adf2aa9e96bcea2ebc61355cd4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2da341e054a1bb6b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/noop-logger/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0e21795f953d07a6714df586fde5026d83794a17"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0af1b47cb5cb1cefca495ac1bbaa6a7e0372f2865103a5dacb64b99dfd990d17"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6ad91d59921a5b3b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/nopt/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bb6de23bed529e3e5ea2583b0f1702ebb9d02805"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9c2a5fec768304c3b6e67baaeec8cf4d4cd28a416c3f16da1de7db698ab772f7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eb4b48fa86bcf127",
+        "type": "file",
+        "name": "/juice-shop/node_modules/normalize-path/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4d6a654a05a46de332cfc70023e3ff0b39673fba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cd2d883ed14f4525cc3a87441b616327d38d1f8d096d12eef35f4c60dac9d796"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2207881fde14a648",
+        "type": "file",
+        "name": "/juice-shop/node_modules/normalize-url/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "671dad55b1d83fb8c0838614bf00a76f7592961b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "69befc6d902d0a1b361bbfb5ab863704b67ab5d9df1dbd9869a9152f6ad4c5d8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8b2c76159cfc6cee",
+        "type": "file",
+        "name": "/juice-shop/node_modules/notevil/node_modules/esprima/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "683cbde057cd3d8ff0105ecd318496ae8f6b19d2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9c8ec869b019be7bbc6e877aced29252cb4e229801e0dcd81ec36baf06c10722"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01dc710b583366fb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/notevil/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "120bad0d2afc319a5da02e45d3a921b134636026"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f9c36acd702b764beee8fdf8f3abec74b12bc1cb9b6b241ac9b88f8875e7c102"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a484ea48b0eb418c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/npm-bundled/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "aee4023f29d5d73bbb7dedaa7187b2711b0a34e4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2f824d252e975f9a48384b691e02add8d85390aae1ee9e839cc3387d34b946c5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bdb5cbbba9945619",
+        "type": "file",
+        "name": "/juice-shop/node_modules/npm-normalize-package-bin/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "11198c06f8e234719166cd7209046b80fc516ebe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67b169fe285b204b15486098d0811e526fdf0bfa1d06cfb67f51bcd59e056bd1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4a905e2b03f68e47",
+        "type": "file",
+        "name": "/juice-shop/node_modules/npm-packlist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "133a1af585371208c4017d29f13f33cd08dea5f9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55a0ee2e0cad20e525b8acf612ac1645f3fafa72721fde27e1a3b1e4a4aae7a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7991f8236a5265b2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/npmlog/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d655b0502579af043c389d145afe76ed496e3b0e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f88d2fef96cb03bfb402e22425b3b4214968f03d3c812e9c850fcdc5d7b9fd19"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1b464b86e8960c40",
+        "type": "file",
+        "name": "/juice-shop/node_modules/number-is-nan/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b550ea20e6c7ed59ae2d8c0a384245bffab3f18e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "242447f707a34988f6307983f56ab5efc4bee47dda47f931ad9d53ed9937c78d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0b37367e791109d7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object-assign/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "13257489764dfb0dfce9cf643096047658a826d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5990bbffa235fc675debd925d50f6c3f48a2b4526d8c9f7555cadec9029d0d7f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5b002e4308e6b08f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object-inspect/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f59a216249b68601d6e44515c4f9188a2110cc50"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "21c5c63f653705f44a60f5fe93752b231caf6ff07b01805740bd89b71b2d6d8a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bdef4a6943952ff1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object-is/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b37d4100f63846d229417569f747a582e0729f15"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "642cdbac75e401aa7ccb5c3a1ae12765dbf03ee9e844c6e2215114f8b0ad7f2f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9145131b28b27f5a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object-keys/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e40c3de9648f3ccff16f512b6316c7f1981b5834"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "60128330481888bf0e83a713699bee6668c5948821ef06106d8c9613b6081b45"
+          }
+        ]
+      },
+      {
+        "bom-ref": "55fa70341293c5b1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object.assign/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "450174ba31f98098017fbf306567e4273a95c328"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "982c86a45d0edc61215628380656301e17e5a7f83c9e3072b38dff6778b0e1aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "671e49fd632e294e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object.defaults/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e2e67e299fc4fc4f3a49c7d763bb40d9f8f952b3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "49c2b0cbb2f4939b127392fe318b41d1304bca237e963bb264b09acd38c3a7e4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d4b6f9ccee21cf2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object.map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc036829452a5b195d1139453fdd07550b7c95fa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a57d602ccb0e7d55a2b304aba41457457b46225682fe862c02374acb3c5c0c2f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cd9f0b70daf97369",
+        "type": "file",
+        "name": "/juice-shop/node_modules/object.pick/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7a553ddd8f24c96892437678a12c8a2cdd804312"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e48178e83342140e91433af2e90ae5d41b7d70058ef92e1afea3acb9149f991f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "791ffa620f3db753",
+        "type": "file",
+        "name": "/juice-shop/node_modules/on-finished/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "777e9cd400b42dee1199eacfb325876caeaff3cc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c812eca4b0dee2317cb446124cb27ae8e5b993c8fdd0144886b629ef6ef53fc1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2c60943fc0a8deb9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/on-headers/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "924744de2790eee065f7c1437c9d4757cab78730"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86ef65dd0d349960bfc6a01292c1d40f49b064fffca48bd209a0e693c534a246"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe8733ca624b6b59",
+        "type": "file",
+        "name": "/juice-shop/node_modules/once/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b2456f0417ad4f7dec058401908740c4da1ee7ba"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "33840d74c14c94bfb75c76374765b635531b1eacb88d7f1f2f380c94d0ea1328"
+          }
+        ]
+      },
+      {
+        "bom-ref": "73f2ae60f0382eac",
+        "type": "file",
+        "name": "/juice-shop/node_modules/one-time/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a7cf310a3413d75cf4374823b2300cfe2dec3b24"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "95f439060816dac444a0bd628e9849fd0894afe8e9eb4110bd737daadad46175"
+          }
+        ]
+      },
+      {
+        "bom-ref": "56afec5e74bcc964",
+        "type": "file",
+        "name": "/juice-shop/node_modules/opentype.js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2017ce966b04df622563e99bb7966c3b36998e57"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1cf7903eeaba55cdb56ba47ce893a3b104ccecd2e954061b5c5616529a9db69e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ac464401ad8e7fdb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/os-homedir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "36fa0ba7b479b41f98dde0822cc2a026bd5d7e14"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "465f469dc1dc630aa9347b28153da8b71d94b8fe87669bd1d49bc5b0eeeb364b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "73fc94c33cbcfb37",
+        "type": "file",
+        "name": "/juice-shop/node_modules/os-tmpdir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48367dfdddfa0b59ba77d7c490da5ed3124275b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "708404ce657fbad57a4804f3ccfcda877e038b981fb9675aebcc57de91e95694"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b4ff44448b7b12b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/osenv/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "76ff6531fce9614d1e45fa45269bc021992e75f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "184e6e41648f04dcb0d7141210a54bc2213c2e856aad7fd8f93a0bab7eb519c2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e493969b10689cfc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/otplib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "97ac8cffd99ccf116638eae4aca9a120135c5394"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "84dd2e60dfd43a4b03d1e185b06954a97d41f5a90354ac556b8ee2cb0937a448"
+          }
+        ]
+      },
+      {
+        "bom-ref": "44d3e97195f5c0d8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-cancelable/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1916b879c05ff7c43c6506dabd376267b118ad23"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a65bb176766f5b9eb222552c19d553637ab89a572a7d1a37aea1c38348e353c0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8ff53bb09aee275c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-event/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9828dde97e4d989a4e855f4338d18543162103f8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "35131b3ecb0dfec3dec4ffae014374deca7ed3c1fea16165f9bfc5fa55f4ad64"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d2613b8019b8cacd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-finally/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "29a603e1e24363c6a469d6922dd71dea18d4a32d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a96137ab1fb624d4e5fe2b6413417565e72323e709268eab8a790ea51eeda6dc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "db738852ac207adb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-is-promise/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ec1f21e446cce1704f5bebd6c76308c624b3088"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f320222ce152d59bbaa210d7b9f6c0b46c1be5f8b941aaa79388cfb84d63867a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8a3af3cd9d888574",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5f275de37ed635969b147d1adac21fd6d36ced42"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f0aeb7043d0737e5bcaf8c2bf83b4a8ded247922aca592d684e37499d028ae7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "60d0947bf502c15a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-timeout/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "100425335fbce935be2397458b04276a845443ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e95b82abb3ca8493c57213efdc80556eaf4be8409ca12dae831428c080c2c289"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ab0ee41dcb9290f9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/p-try/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "37f6698fd2ca69e00a1b747e374f1eb3d99954b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff793c821f36985cde9f9d9ff6297e6c1304f8e597aa2d48dc53eda83c11e54c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "06eead6c669cebd4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/package-json-from-dist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d93947bd52021bb5f785613249e0e198a3b48025"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "38fdaf168bc63a6422a7dbe7e41a7b52b02326edef8b14019e0333ef60b37b47"
+          }
+        ]
+      },
+      {
+        "bom-ref": "991512ae67b3ca41",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pako/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83f786af36407a022c0f83198df1429214210a1a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0014f350a6834ed6a2d1211e0a2e3aa471cb426edf63379c785f9647ea2b4e01"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e5593c2650f74764",
+        "type": "file",
+        "name": "/juice-shop/node_modules/parse-filepath/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a22d4709dc4be9310d39c64ec4f03233201f3d7d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a299df30f2845bc3e8529b1833806d7e85914d9ce19b6ebe57d5a553399adba"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5eaf2019c29960cd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/parse-passwd/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "25fb0f091c688a3376145c783fd823aa6fd93b82"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0ddfc8e12d83546f17c0a269d47eaad6f74aab078ab1da742097823fba730eee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2fa66ec620f6f480",
+        "type": "file",
+        "name": "/juice-shop/node_modules/parseurl/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "646dc756ff16c464fcb63e17b2cd5ee4ad4f8b66"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "98c7b953c844cac7c0be2d5abc6559c6fd3a6075fd159b04c0f1bf46145bfed2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6c0073f2ef0e4a7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-exists/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dc362acdf83f36298d8ea6c823ac1d0b3b2096ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e258d1a0d185ae469fec34de2af18913421b94181ef61238efcfe0b00d1b2c3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "03114fbabb32e275",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-is-absolute/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "51b80416ea8aff0f6f04b15ee2e114250ba1a14c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "be5b83877f6998b840b9365d7ab77e885f0d583337826c22daccaeb6e303fd4c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "38a243aa2633acf8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-key/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f330c46f59dbdd92dddf8a2cfc2c1569b469bdd2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "25594dab72681c910d9cc919263a4daf27d77a75e0d2c26a4d958d6d6b798f86"
+          }
+        ]
+      },
+      {
+        "bom-ref": "93e3de8a69756331",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-parse/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6ea9437323546aaaeb28afa33d0c9c7ed03e93a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9c680ecfd322afe056b4ccbfdb6c7043342276903f017c0a29b77c3926790d13"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6556a9414a9834e2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-root-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "715724f361b739f0c9721f038f1bd8b2bcbe5d60"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dc054d43f815636a3dbb6d82a610289afd57b61c18b6e18f7c1f800f15f74ff4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "56083616850bd487",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-root/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0c48e82e37942bc5a594e8ddddf7f83ce3e0633a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03a07ba10675a90d6eda6eccb2f138aa6c0980db2e30ff7b3f9a1a20f140022b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8a9cfc95170c02ec",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-scurry/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "57ceeacc9d50abbd7e370e6a697520cc0784baa6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eda5ff683c26f88a134198fa2700b371abc9092c61a81474226bdfc6f9348c14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "23e069ace56663b6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/path-to-regexp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eebea274a1c39b3d45c86875caae218d3d5938a4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "643e7a3db344a1513c1c7797d2aff9c50fc52cab665233e11768cfbca9f8c0f9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bf4cd52ed6a3b9a5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pdfkit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dc640b6b8ac5a82bd10be32a77fb21287dd4e25e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c839357686687a89e09118af96877e008463f9ec73743bd942393a1e1c8d2c2b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f20bd43005a5457e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/peek-readable/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "046bccda296eb83ebe6419bcca8d83b6bc38cc0b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7be739e6dd2c01c1246559662feba2794332d16e28ef9927fdcb5f8ecd47f510"
+          }
+        ]
+      },
+      {
+        "bom-ref": "07b2724397b2cef9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pend/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bcc6ba00d4e6de6354b46bc7687d946fe6a1446d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e4f01d39cc13c261f7ab81d0509d36bd98d8eceaf9ed75f2ab274286f3c3920"
+          }
+        ]
+      },
+      {
+        "bom-ref": "566439afd5e9f6e4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pg-connection-string/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4cf473bef682dfcf5787c61a2badc7100094d940"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b4bb600d392debbef01b428d3331e7fe2dfd0eef5eb142b49d9d77121e8aeaca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "46fe7fb936623d3d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/picocolors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6a7013e29f9b6720f52bc0502ee2968d6749d7a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ef2ac226c4811d312e12c64214c453878653e834482125ae475f27cea60de737"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5d67212cbce195fa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/picomatch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "736efee8b038ba25e328de826282cd73ee01c455"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "63264d817e856a4bff57d4304f2b38d2964a4f6df520eb169e7bcdb619f13e9a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6398415188b084f8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "920b385a20c890185d57e5ea1dcc86e3ff4d51a7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6f3beed79477c32ec1533609a75bef5cc3998e96657277519b3d66bfcc6d046d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "23f92dd62d239db0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pinkie-promise/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "737766e86a40fa8b428ab9528b41bcc88430757b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0be4b7f157d8f59a1e9f3358c8ffc374e0350467ecebea59f795a49639115eb0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "061ee233fa4a8436",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pinkie/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b110de0e6bdd8dca481c37b9defbcbced1e414a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "afcd1666f0ca44b0ffe0587fbd1db52799334626cb121ef4eaa1780a9951dfb7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "85aaca1ad38caefe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/png-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f6a2f416535c834f378921adae42405d92bf9911"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "afd3a9e519b30e7197605822ce772f1702014c74577bf536176419e0e7492667"
+          }
+        ]
+      },
+      {
+        "bom-ref": "24c31fc17c59ead1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/portscanner/node_modules/async/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5da55b9a896c8eed5f30013777ffbc8181bdfa67"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "65dffbbb2501286c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/possible-typed-array-names/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "23814e5ed3fdcea6f3c2e3299c1b9af685ba7c50"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0ff73753495cfff4556a5f8b7847ba1c06530341986e642a8637c6db74d87894"
+          }
+        ]
+      },
+      {
+        "bom-ref": "15328ceabdcb53bb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/prebuild-install/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e94e270dc48d57def16e7e6e55f92a2a87e90f4b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3a1c35a4b0d10d5f721dea267fdbf9981c37d13ffdd0fbd97044c5f1fcbcb026"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b925806eb704bdf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/prepend-http/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a8b03b82dbd901db3e7c35f46d9ff9ed842fb6ac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "310e7bb7d9e8be40ffd7a01972f41b43b14865db69290a157e748198544d9b0b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "976c58d8953da924",
+        "type": "file",
+        "name": "/juice-shop/node_modules/proc-log/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ef77e00bb180e2d474ef8ec427d3ddb2dffe8b60"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "636f411adcca5bcfec9c68ee39ce18f3ee00d27934dbbcde3c6635929faceb85"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5da7aa18dfb4524e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/process-nextick-args/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "75936b9172e05098607a006de74399060a53a79c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6d6d93d057f39bc3173d53e694b61833fd0ce89c1d669156169136d31a968131"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9257d210dc888a8b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/process/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "266a0cf0da901a3bdd4ab76d0ba9032640455ca3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8501b4909630e60c9e9f68c4ca8ccb1964688500e61c60408a26d5480a9dd3d4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1456dbcd6767f592",
+        "type": "file",
+        "name": "/juice-shop/node_modules/prom-client/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b93965acb54ef1e6422840164a2bb2d6898edfe1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1e7e9aac3c44d9396a057924677e507f67ef293435d5c9e2beb7c4d3358b8d24"
+          }
+        ]
+      },
+      {
+        "bom-ref": "34b55e7d6eb0ca6c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/promise-inflight/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "46be8c622d5a7a8c74a905df7eafb893fdb8a965"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "386697ebbf39442f0570d59c851e00ca22330a0a5ce3f389b621f6a0d6d7517a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b779ef1156750ff9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/promise-retry/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc649cbedea73287db37a431e5761e9c0b4abca9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "71c2995725304ffa82e03be2c21e83f3b7c0c557846df88aaed0f2b9fa75d911"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cdc9ce07fbb4358c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/promise/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "521b2aa15341f7fa10ae150c4aff97fdbdc755d7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86c20e9c15f4d9f1fdbde8abe56ffc37ae69deffbf3ffd1ecb88712cd0da79a5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "181ba5a81d19c6fd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/proxy-addr/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a04c60d6b2441d6e2a6ebddcab75aa6efc2d1d9c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e490a79f8058cbb7c0e9fd3b9977013102b5cbd8d232259b93bb2ebf85834a51"
+          }
+        ]
+      },
+      {
+        "bom-ref": "78e1bc9656dcf4ae",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-attrs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6adb0c7677506fb099c945daa2fade50883dc13"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d064880b628e0ddc37c08af0da95486766c2eb313163c887a21996d5c96dce86"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7ce204cb9603be15",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-code-gen/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e5b05f507b7a424591ac9c81f6f9f17bda582c5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d3ae59d22cb7ae708da8b0391ab0d4f96efd8355f194cb732b230c4e998d964c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "aa729be69afbaeee",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-error/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6b67957081e9f303679cd5f7c4519b101e917879"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6927ab8cdb89570d57b34d5953786ae2b56b89560301d452bc95c7519aa62212"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1c0e59c318639263",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-filters/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7a57db8c52388e0e345d522793b8842cd8d28ddc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "88d2560b67ad36dafaaf59bfba4d42aa8aad7e96f181f37e067227b267924037"
+          }
+        ]
+      },
+      {
+        "bom-ref": "76975097d2793298",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-lexer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c1c883900e11b3b22227f99d97cc525d19989b0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c49fbdee905f6f11a937a56b458e041e26bc418c3c29bd8d87603bd165a23944"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2036901cf6796365",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-linker/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1696fada4ca8ba8097ef2cfa28d4337ba7607d4f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e284fe50d7618ddf9a8a32a6fce649ffc1cd5bec45e01ecf282878599d41db4d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "988b38c8aeb7f1d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-load/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e13cea3113c17bdd86ca3eb40af38c2e1295706f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "04f9984f732962d8da625959b64c0d8ef4f7e1e5710a08109dd86e730a35dce6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d3d2faf252227d3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d111b223e7ec673a31910cda43a2ef7d4b2da1b9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b43513e8ce41a63f8cfc55e4dc9ab984f30660038837c734a1af60e0f3395bad"
+          }
+        ]
+      },
+      {
+        "bom-ref": "812196d333b35224",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-runtime/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8318bca8d15260b136ef57deff7a05b199dff789"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ec7b608c7bad13a87cf6def1504d52e9bbb9aa342a79377513c58b9a85407a2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b187d661b1bfa8ff",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-strip-comments/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d7037a265da4f9e91a6310af25e40ed858a33ebb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e499b0bb59d0755058031cd3a614c9ad196757ec3b36a761673f881592bb8d8f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "85b818c9ccf7f826",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug-walk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8d626183f9c9d359642139d252f7654feae0d189"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3073874b1942b8fa10554e527a2dd8a25ba98b4bf7352f4c1c26a5c272bc47e2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ee517e100149168b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "febcb2192aa59ee6981372e25850ea6e619e54c3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f31b3672f89b96f2caac2eab7f72867f188904022c76bbab7f9fac462e14171f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1a3dc74d4f25b9cb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/pump/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ba8b05dd465d8b6329881e2deb3c835149284fea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d369a9c97d4aaca4a637af77b6ead9169146809ff3c27268e62151b613cae016"
+          }
+        ]
+      },
+      {
+        "bom-ref": "816e28d56d1ca9e3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/qs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "28ff514a8a7863ca7923010f797ca3edaa52be34"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c2facc4c7f2752d13d3d222bc44ce4370aeeb901a9e9ad5f41d9bca489d1c7ef"
+          }
+        ]
+      },
+      {
+        "bom-ref": "76d4bb39a44a2421",
+        "type": "file",
+        "name": "/juice-shop/node_modules/query-string/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e8cc4ec989ecb29722e4e4e683c1ec41e3181fa3"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eb68a1c5d0725473fd4a6b2fe86a3858cdf56ab74971461c1e16000faff7cb9b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "95db10130a94a0ab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/range-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e82a50d4be1c57ded40bf39a5232bf5c6dabb46d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d0b5f54eaa59001dc86720a9be1fdf653bad83707d70842332fb3e8847f65a89"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f0cbf3d47bbb8d5f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/range_check/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dab1ef784249ced9cec139f8ab8116ef52b3c492"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2c24bfbea87b799d13ddf1abf348cd5343b811cfdc37a0e350a9456ce53405b7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b37a5b86f834bc5c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/raw-body/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3b4460aa6d8a136f0e419acb5d5e7c82ade86989"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3847f01a7ffd81ca56879b158b8301f96244113f152ed117bff3f3abf5f88a5f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "99a86bbf03981cd3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/rc/node_modules/ini/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14b52ea8911e4e9f89acb4d876e87755e54529e2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "76cd6ac1237dfc74",
+        "type": "file",
+        "name": "/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d33064d55afd32cee36afe2ef20a37d1e80c2967"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "52fba89a1d2724dfeafa21ec58f8c4a8a210103cc6b65b4468ab3fb973ad1753"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2a54dc0b7acf947c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/rc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "19966e2b4994a704ea472a1ba1eb8e1d14f446d8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96f035349a8e6034d380348ec3d454ed8ea3a602c7a5700eb36ff48310bdbe9f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b3229d3dd5689279",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e4a5d79d5ea9366beb66cf993d11b88603e6333e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "93165ce56e458216c18240cd961a522af5b18e51da06f55d88ac552234455d95"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d569e3dd244f684d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7d39893e264111de",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "33a4118b015167682f053d85f7bb21b9ff9d161f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67bde829e31cba3f50c77d14a30fa0f2295223b7ffa07f3b84606a5a79bb97f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "33c3565a5b5a9a87",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3156a9cd35dc750bebc2eaaf42a5933c8ee6b892"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b105ac0abbf5985cbe62ad28a34032d85c7ef623e0eb01f39441b0feb419004"
+          }
+        ]
+      },
+      {
+        "bom-ref": "01c364c2296f6c58",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a2e7e379ccac07b02eddfa67746a0e521f5a4878"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "246e18f32bc77525436b73f8ac600560f246f9bc05a36dedc07f448ae19239ac"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3a80f3fd74c07520",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e519b003fbce961f41cc48fa4237c6debda1266"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "31984c85cd4f3df0aa75075acdec98c25961496897d1f46d04ed4a701f129c54"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c6b25b02b01a9240",
+        "type": "file",
+        "name": "/juice-shop/node_modules/readable-web-to-node-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b48d8b20ab930e5208848273443f9bf3bb368df4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3ee3a77f8bf8c288745aec229244cb79b63b9959a9b7c8ee18e326286976bc6e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "11efac82dbda23c9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/rechoir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "074780fd0c9b73b6950e8d1575af5ff4b663414a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e63b051cbcd61e17c3ab84c9bd7315929c5425d7fbb91007a04245abf867a4b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "347a48bac44872a8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/regexp.prototype.flags/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f0b903f5607a2b6b97708e20a940efbf3d896589"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "03b311526afa87b388a05af86fb9ad86331888d2b5ef260e635c9023a9a14a1e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4fe1c43c8cb9cbd1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/remove-trailing-separator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca8ba920e17ef8348a3064c5705d3f90dac8b26f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5d1595f6fe1dc0db45fd3a05a64f0e5719b8af55ebd769f0bcba0ff6e7f8d7a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "00c67e72894f3c8e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c9ef7bd0a1c3d805814c654c457cc315c48c116"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6d68c880e70a33ab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/cliui/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3a61c252373aa1eeb6b761d39d33baac564ac4ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aefd282b90d2d0a055f3b40bbd2010531ba7cbf902e76a314fe09fe777491814"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a287440b741c67fd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/color-convert/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c4650eb092d493fd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/color-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "25a428342cf896b8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/find-up/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ca7872ad39eee7733cc76e3842bc670c99f8829"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "19b9626d190ae97ecbc47843ff5781c462b6acfca35a2652dccded7d046dce53"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7b7c8ccf4bb8f94b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/locate-path/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5f601eecc68d9b9eaf032912bf0326dafd3dc485"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6fb0681c3501741d68594c69a0baae9f558f2d426c136946f2c7780a8c5e27bd"
+          }
+        ]
+      },
+      {
+        "bom-ref": "132227093a14de47",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/minimatch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "280930d830662d7377fd7dcdaa659e3d536b71c2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3b73bedeed5d09d561ddac7e212eb37e3eb37f0daba8738e59607ce1caaf93ed"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1207b4084dcd1e82",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/p-limit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fce4cfb0ed8e8882a02082db5cec1437a90e2fdf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d4529e88d06488042103f25322b0b60d90dfc5de0ed61c3b7c7d27f2ac3fe1bb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0691554cd5c4c483",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/p-locate/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2a78ada043c0e10bff3b34fbbe5d1adb181b7c56"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "26d44c5d05942d6b315ecde2f3dcf78972cfb3b4c81c932ac2573d3eea5f5e94"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d047f7a48f32eda3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1fbb028113b65f2616bec5fc66afee5f329607ad"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ee3d1495da354ea19d3900e3f28a4e93cc202966623fee4ad6fe54346b385075"
+          }
+        ]
+      },
+      {
+        "bom-ref": "678b0939c2f79d2e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "728222492ccbc98db8f25613d6997f7524b9130e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2de71e9a1ff3e5bce791f5e3de66e1ad86f4f143d8c3ce4fbaad7a615e5c5e70"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4632d22e051de0be",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/node_modules/yargs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "58caaec51e509a371e3df929a919a3157fdbfc7b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "be417ad995e4f608d6f5243ad90b28f3f2604c73abb30d72382ae13358a74949"
+          }
+        ]
+      },
+      {
+        "bom-ref": "926fca47d3a31214",
+        "type": "file",
+        "name": "/juice-shop/node_modules/replace/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e3cc0e70d0bcee319ee831c0682c59b61ad3fb03"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c88ee721365a797b5846c260e968912c5de3b1966d843e8f8f0aadeea3421b6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b8df0125415c43ae",
+        "type": "file",
+        "name": "/juice-shop/node_modules/require-directory/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a2e7fa658504a11868812ca0f9f8b08433bc2e3a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5690bdddd6eb4abd795fa5319df7552279508df9d562d571e3132ddff3045a71"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6721a2da499d76c2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/require-main-filename/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "670907eeff6a76b76996f639a5e71a8cea7ed603"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cc3853357a59a82c9a0e5cebbe52221eccc4a52bced4557300b69bbec17fa41b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc9f8a802b671f39",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve-dir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6147edfc55437b27388119c5ff8ce89eb4208fc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c124e4c2746edf4bd9322cb823ce1b4e0168ed393bfe2e6eecd8d12a47498d05"
+          }
+        ]
+      },
+      {
+        "bom-ref": "56ad2f24d7bb294c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "36a106c595add60c403fd7a6178948de47422f9e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e4f9221a50e017b41b7c5c286f257108b2496327d10ccaf2a460592849e756dc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bcaf8a132d12667f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/baz/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0e5f7a5ddaf05e7d5a39fc67bbc4993de92e9012"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cd33f816f635bcf9cdbe5a13d877bc8901a1a90819b1d73c16b35b6cdbebecaf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1cf2d77432fe40df",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e5a9d36b5a39fc1f1c257ca949df43dd40a265ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2857c211f81109bda6a96584f2e7a1ac5610baa0f67bbc77f7e766c4152281f4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3c2838440a22e114",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/false_main/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9598eab563115c03c659ee404d91f9a6431df39d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "064d9e3c87123a24e31276d1bcfce16b81bb2156d42c07f427b8ddcbf675f790"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1ccf510f48c76807",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dad7dffe799806c49f1cccc039e3d6cbb38d1a26"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ed30bf3c22be924be67b278ed079ba425dd0ae37110d7027bf9369f771abcb36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc0b96dd500a3548",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b58a1b0588a1102572e64a4d2047ce8731de1a76"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ec13311cdf8e7ba462d94656a0f2f90c55b290dc1ad6f7e82da2d3b140c27f20"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3781a9b07b797932",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3926c908fd9627cc3e3094edf3a7fc547d4871a6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ab5dbb7f635d5474648e5ac92df08020b60d0d91a68a740e46186587e05d3da3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1727f199271ee9e3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9e0fcac261c4f4c0e6cbd05fd95ed904a9fe4b5b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f41fd8ba3d2df58d7d1658be4c77d11d07285fab1e94a6c8151b3548c6f0a8aa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4cc415386ae2326f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0803d5d30c2a6fec04f09b9969969a91743b28cf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "41ea23c25ff8e7080ab08d38a9f5de9ab986280902f7268de45bc0a5b7e9e028"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b9df803d6f2785c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/responselike/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "51b587b317d6db031acef526f84e2cf043442bcc"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "df25ad367800a698875604c21edf7f76e2ed563f7069d8659eeb8db46ab10117"
+          }
+        ]
+      },
+      {
+        "bom-ref": "954ab4ed5539271f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/restructure/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1fb9c1b78a8fee6469b904983154c54b0430586"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff45dfa0be24887b940014f1abe1d876079b5aff4d09b7db18061f5bac257faf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "480977e3ece2f1dc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/retry-as-promised/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "08c60998fb0b0ee0a723a490df8d67c8d8df7ebd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b411ec1e5930b4d30c6cce8d39d119136504607a09d4e27a7ce4a61632a512ea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5539b576001f4eb6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/retry/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "10dd0941e4e65c436c4f7111efdb1679c966c478"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c0733eb226e2a6572c7c9c2bc8b4a0efabe233971b0dee1e6d62c6898257e1da"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dd90a63728df783e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/rimraf/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec0700462dfce89024e67c0437eabca858407176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "69730e560c782d94",
+        "type": "file",
+        "name": "/juice-shop/node_modules/rimraf/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d1241a4f102aa0d377e63ee84d58b278677c3435"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fb2eed4a1f87b6d9c0b28cb502967bff6c3bfd3484e505b91b157d88200d071"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b189d0dcf6720a02",
+        "type": "file",
+        "name": "/juice-shop/node_modules/safe-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6ce1dddfb8739c577ae2ad84f1aba01427791f57"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e4018fdbfe625433371f48274fee26f520bbe865e0d8c85bf3aa07424134b90c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f14182cfef456ca",
+        "type": "file",
+        "name": "/juice-shop/node_modules/safe-regex-test/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cb66d98715b7a0639f1f793aa1865634860a57af"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b9efdb318b7f4094e6d2605ba9fbef93570abe1119488a491a4e8f3216781030"
+          }
+        ]
+      },
+      {
+        "bom-ref": "70f9b2ac853e1543",
+        "type": "file",
+        "name": "/juice-shop/node_modules/safe-stable-stringify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fbe83d8818942f4a13c95d9dc4a265a0a178f4d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "797e552ecb0f8ffe8ffb714e6c4888b28a8ca39eb9c0040836b2b6f640037798"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fd30fb1e07a0c73d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/safer-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ed0fab8e5cac53e4d072acbd82fca9be08f5e67"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4247a3a63c45a6a7ced1557fe4dd9d2a163af4915d594b95e5867b69a53edb52"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4a9a90ad3fa1b425",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-filename/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "583442f76c2f329bb602374055a9f565f952a002"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d84b93a20ba2ec3a997b9e0df651fb490c21fc53b44edaf5182b285b74a664f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b896c1c94c26653",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "92f89ed727789dfec8061a78aeb4b61afe286883"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f50e652e1cd48ada00210fa948baf45543853fe1a5e59497bc20744d454a2d5b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c2b690e9196d1a11",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7deee12976bd63abcda058ea45238790cf5e82e0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "042d85faac37437c9a63f3a73b1bd11b9b2d6f222ec06318c3b3f2c1b791ab03"
+          }
+        ]
+      },
+      {
+        "bom-ref": "66e919e78936f5a5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d78c2049a85f4b100f23bd9f9547ea79af37246e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "47aec9a46c6ea593aa2fdda8e9f8d9169eb1b9e60a1606bd3c28c6baa061bd9b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "09c0b56457c5a86e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/he/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e8229c2260816ecf6ebc6a5f4ada1162383d98e9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f014bb22a82665e6c6bfa092fdf8ae1253b4720880d708bf5b164bbf4485f56b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "63eabb1b4ea2a013",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9b04372e328879041da8678a7ccf3c06a28941f0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9531c552f8bae4773c1cd60c82aa6eddfb455efda55b2a20bb651fc010da58fb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8efe613cd48808fe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ab8acbe8ed0a77bb0ffdb1416758fb659f61d598"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "083f974e63787f3d95611642c78c036bc2c5e0fbed443804500b9328ea69f74d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5a4040d52e4206ed",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "727f3ff6469bd987fcea8093d885fd40ed5f0357"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eb5d62e173ed8dd45dc5417c5d9b1981def2e335f44b402507fcf206310d81da"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2acb2203f67243b3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a92e127209f2f143bdc03e00e3c32ac87b6dd13f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a06e45bb5ec514ac88be84d3f679ee1b87228a41b805bfcff0b8452be35d802"
+          }
+        ]
+      },
+      {
+        "bom-ref": "74b88c914fef0125",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8bb5fc68a015d61057dff1f32826f6c2aadec61c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c2ddaf59d49fc50cb922aef5723935c9c0827e40a33a65b18197a447d966bc15"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fb74b38eb55a949d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sanitize-html/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5bead99213de5940b0e8f01d3e1cebf7b52eeeb4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "91c64186e2ab5995c2bdd85edae12ef60a511bd27594e8c224aaaa7be4302ffc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "66a9817e3639ade1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sax/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "893420e31a29f39b1d5e5402a62402e2bfe4e4b8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fbba682a346c26e3ba992594262e91104018477c6e6a58221d64b23339f66dc4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "231bbe2cf48c1e6a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "74103756a0fe401ed4d8137e04607758a77897eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6ac8faa20b564c33",
+        "type": "file",
+        "name": "/juice-shop/node_modules/seek-bzip/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b9ebdcb7652f4785584d74376c1a378e786ba012"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c2456ab31a98e61c5fbaea0e50fc6ac816e1c1b9ae0798353cb70237a578ec42"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dee6d41ddfe76105",
+        "type": "file",
+        "name": "/juice-shop/node_modules/semver/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d364bb66b4d1d9d5830fd72fa0809bddb8ec83c6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "55c0bf1b742691521220be5da502e87a0d963027b5c889c52eb6bb9ae7cbf6c6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f0bb4dbd655f5770",
+        "type": "file",
+        "name": "/juice-shop/node_modules/send/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "329d5c20a36647b8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/send/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "be9e23af3a0b910ad55ba8d3fea03ee05acbacad"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2d511afc0dc9965be1f1a5b4b7966cad2e02b95be6e5ff962baabebc12739385"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9218c6e89bddd97",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sequelize-pool/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f4d051b193b22198e35b664d8137ce0faa320eb0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "32a3cf4651e735e074ea036282c1fd04ec4e70ea1cc59ee1ade8e1507cc672f7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "32061c2907f49f30",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sequelize/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "96d96dcffaa0d69c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sequelize/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fe06f4aeed2a591d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sequelize/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c2f39c7f8df35a56c610f8d70ba3359f1e7f3584"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7549212df1c0b263cdee3b2026961ee206b75661555c56e03f97e078a74e3bdf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a5d3ac6dadd9647c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/serve-index/node_modules/depd/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f7628780acc25dc2bf90d09203940e23977b7ada"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9df7afa632a7aa4e245c4583d06704b7f196cff999aca6d0a2492fa4d78f8e73"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f45c08a765cce80e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d57719351d640c46fa95ee1e5e3748a52d1b2b7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1dd477225e1ea42b2b77ead847803fad252fd8d38744a0d37fafd71c21294fde"
+          }
+        ]
+      },
+      {
+        "bom-ref": "821426c1c6105e0b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/serve-index/node_modules/statuses/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3eb797e37a18f16f3f41fed3cb41c8e425df5933"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "39cf653c972f99725bae6adab44da5df52185fa1fc3bdaf671a8f62d0e182631"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f59b4d99559e2930",
+        "type": "file",
+        "name": "/juice-shop/node_modules/serve-index/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d0fda17773bfa73fd6e108562c471c95b6b3a16c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "177ffd2dde5c523c1b2f008f8892b7f932fdf0882d407b48522fcd8cbfb95c0b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "77721909fb3b4000",
+        "type": "file",
+        "name": "/juice-shop/node_modules/serve-static/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "26cc135af6d3450084492330fd0234a31e33c28d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "068fbb0738f4eb2f8ea6ad2f9757ef060d0b79e7990bb9c3dc5ead72a0e3b1f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5b537858eecef2c8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/set-blocking/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1fd9e7bbe562d20ee078877ba14aaef71a6dea6a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e0c598215c66f2c35edbc3cb2a3433d45f9d4b726524c095c93e7376d87a3bce"
+          }
+        ]
+      },
+      {
+        "bom-ref": "920a234861da600e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/set-function-length/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bd0bcfc74bf8e9fe8d1edb2b3a893d096a6067f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2c81bab7f7a60d625164bd840d863548e3f9d4d1aa976b9d2966e5e1e36132a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a4aef3309d8b063c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/set-function-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9127dbfc1f2b960c9173553f74338ad3f2a4bb5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fc56137cbf0646e79e68881215cd5937db9830f3293e880e757b31832303e1fa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a65299b7a72acc6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/setimmediate/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9cb87b9a133431be9bc111ed4b2aadbc10c0eb0e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56c7968c8062ad56e94b8ddb477e514098e0fa34b060aa86b67232fdb12e184d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0815c4d4e9d93207",
+        "type": "file",
+        "name": "/juice-shop/node_modules/setprototypeof/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cbf2d7ae54256a7ab84245eb6d72c56f6a015453"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b39ddf23d2c12a751cb4af2ce12dd5c87314350be7526fff69b4a3ff2a2d538"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f6b1d5316ad667df",
+        "type": "file",
+        "name": "/juice-shop/node_modules/shebang-command/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2e2395a2e489846382e5cefdf011dcd7cacb82a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "44de390ae5ed6c5f9758b8b9c90b93fa53977d5361731600429f1de08f4b3f30"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ded0d574d822fcff",
+        "type": "file",
+        "name": "/juice-shop/node_modules/shebang-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4c10640951d12ad418aa40c29b550fdfe3d2567a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8018c6b8cc9900dfd1ac18a54956ba34c453fdc2da5e5fe555ee8f04133a1c5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5889f74c6cdb3423",
+        "type": "file",
+        "name": "/juice-shop/node_modules/side-channel-list/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5ac3ca0b70af7d5b7c3aba36e212d2e73038cd80"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "90f0c08c6c17f4a3fa3dd61873223957b89da4201f01dc0c8b95b0b9e6a2a59a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9f4df1d7c39a3624",
+        "type": "file",
+        "name": "/juice-shop/node_modules/side-channel-map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ab10f444db9aa7420125e321884ca7d765854b2f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "914a8bd732b82523d95bb697eec3e6d95badc5eb13b196fb0772e59354a3ab25"
+          }
+        ]
+      },
+      {
+        "bom-ref": "823e8e994ec3a12d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/side-channel-weakmap/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cdb337908d19d32a79dc189c7bce63981babc35e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8c11f0a1c6cfa549588d991a5cb1b04d62953277ed29f47463d415d5946388a8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "686adacd190684c3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/side-channel/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca10dba255c81fa003499be7fca61829ec3c331e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b33b18efda612f3149f2e5102b305cb77bc5067eae372fb1c83f74c263b5b18e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6f855ea33f2920fa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/signal-exit/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "69859ffcd06c12c103de10319bd03a2b5cbcb903"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "cec1bba4c97e0cf653c13c8c79f745aac2232131ee718c93c4236c1b9577a201"
+          }
+        ]
+      },
+      {
+        "bom-ref": "978bc53752fedaaa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/simple-concat/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f422558f27a7e5f252acbd8bdbc175e5c334733d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d6ae2e35a0c64b4469f1e531a3244efd50be7c115ef42d1422e54d14d9359e99"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9c82f68ac08dce77",
+        "type": "file",
+        "name": "/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c5a4c61cfb916b9f37bab7a1dfa468aa67621ed6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0c292d1260be4289147620bcdac5c9d87a54391253acd9c16b0bebbda2e207c9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e25e6eaccafcac5e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b6472ce506e8d5c379f868d79eb81e7a1b7f9989"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "50a55612f7430b826449e8404ab3137e28df64e75728c4c374c5a46e6e37a894"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b94e945e54a9fd07",
+        "type": "file",
+        "name": "/juice-shop/node_modules/simple-get/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a230100956cda434dd566886e048f791b4e2f373"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "edb86ca0d77c45e8c16c1b7ff777dfb58f762f635888bb2ebdc25fc48e0069f3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2758001ad706054f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/smart-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a9db89be9421029bd73baf8199042a08253a0b59"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "188644cdf467d6a768ad25ed3ee8eb845dc5cb29aadc4c88ca7c5cb5f631d66a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7cfb98bf45260e18",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io-adapter/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fb5c3162ffd9b1be27d08bdaa36ef6cf2e97aded"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "86922aabfaa9b82872def69312c92b61594068dc43dfc49b9e144a0496940cea"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dd7f0993f18a412c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io-parser/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "867baf5b5a330ab0443c88e654e8c43622c3d7a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4030fb9d0d24e574",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io-parser/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0076f00f34fb397e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io-parser/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8407ea865970282b35bed55b7833de5bd41e840b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "67463e2389df34f3fb19eda8e5bc3cc8caebb760a0530c5530a1e1ff9354600a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f001c5e9558f75ff",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "867baf5b5a330ab0443c88e654e8c43622c3d7a9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "38402745a1cdbcdc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fb1d0e8ce2969253",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socket.io/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6f22afab9c088cf3ce3bf2d7b4a804024b45844a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1672136700d2101477b56598fac2ffc3f75927b73e29970efa8d6b092e602f0e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "315091360349fc63",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socks-proxy-agent/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c83037594a975ce",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socks-proxy-agent/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "986c3d6e92a35352",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socks-proxy-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a52f0cff949fd82f9e42d4214d2917964d7a9bdb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5667d50ea8b62c802757a3a2737a6515edbae3129bb3ef0980ca5d15c91ed99f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dc9e254460d7e925",
+        "type": "file",
+        "name": "/juice-shop/node_modules/socks/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "523f507922724c638bd3c8b47a400471996db5ae"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eaddd44b758b8d53f4a9c11807748a7372319ef6b4ee680ac5e48ca64aece161"
+          }
+        ]
+      },
+      {
+        "bom-ref": "14b262c639f13c5a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "92992db85cebb6cc7fe8499883fab75317dede8d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a72e52a4583971e362e857316f0ac3455d8e337edfe9d517bb4b3df59c623019"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1fa1cbb3b623af5d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sort-keys-length/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a9e67fe75f99168558e087c823e00d16e2e5fd9e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "397d31b7680c4de5ef238fa187ab90c465d9001725425f1b5afcbc21da3117a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "eb8dc18755cb77ce",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sort-keys/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f83b46c2c5ffaafb231798460fcb5ed2f0f5abbd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "62554970e1506c5f08d966be5f20601b4f48ac0f4558b7b22302b8da77f9b8e5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "32aeea7362a9f962",
+        "type": "file",
+        "name": "/juice-shop/node_modules/source-map/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "14a0ce5da3f60b78d15612f9b2d3ef0e9bd38345"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3fdebd9f5c0107bcf7b73e0d17e0147042bcfb74884106e4428afbf17171ef06"
+          }
+        ]
+      },
+      {
+        "bom-ref": "de5726631b5114bd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sprintf-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e99c21e49fb559d1b16f5662d44028a4e96b19a0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c97349295cae4e40a6f16a26096330997257c00be67bd8fd0ac3391719e4ee5f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3f966750467ab724",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c20a133f8af3542513591f91ff497e787041046a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5b88548f042642dbf78f279484943e4814fc5bf7232d617304907442eef5acf0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a272df752b38764f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/agent-base/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "609a1aaa756f9bd0d85449d4c9e1040c170e9115"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "05daa619e51686fd21d15f987f943f6692c56b9f489f555cbaf42a4263d5c5e8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "90a3707c76c5b1dc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d792cfe57d00f2091f3d8d2625450abc412db2f6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e8b9bcbdd0c1936b2f42a8973ebe253772972e73cfaef6087b187346a47ba5d3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e1f05a29bc11d203",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b950dc47e5dcf04ff6ee11af65ab345b787fa32d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "382853487006ff7da906b0e7bea08c4f3a7b4491da6a17b7c7c82dcf6db9df10"
+          }
+        ]
+      },
+      {
+        "bom-ref": "45373b1e4d2a5749",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a23947ade20a2757d5abf7f9fec197c2674c0a20"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "96ba7fc1dcfad50de6c406fb3fcfe57850ebea4d8ecedbc0b45b9c59fc629d69"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a6fb8fb11eb1eed1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/debug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9173122cbb01dff6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ac9fad510ffaa52eccff29729383a2f0ed602bec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3000491ff6d16fcc",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5c540dad2b3981037a3e2ea4d66da80986ab8a37"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ee88e5b954fdf3a8480b1d01ef767d68d8ca2c6da269f58c5cf1c5550e9aa2a7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "57af52a551aee482",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "55871ab123b38e2af83fdab7b189a4a61ba46465"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02b36a2a2e729813a196c97486bb12955345e201d6ccda5fb2b322f62fa381ab"
+          }
+        ]
+      },
+      {
+        "bom-ref": "68fc1beb9295ee95",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4fcf177b51dd6ac24efce2242b42e97148785e7d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9035270ed26179ae66ebb75f50a46b3c919ed6b0536350ce5130b72077b59de5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "69332680a328449b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/glob/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec0700462dfce89024e67c0437eabca858407176"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "abdf859bce64a63a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "563b0d8af1a9641083e8f6cefbf4259fa845e7ca"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3cb2484f0169e9a4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c9882a8fcdc1aef336df3579af2fbb95974c3931"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8993f95f35c6bd7adef96df428b2aa1e6cadf1a6b9c33eaa917f05098bb1bfca"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a8801c1ad63806be",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/https-proxy-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8c0a375492fc2b2fc37efae92d78ddd0b07de53a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d41d9127cbed43df8e2d404bfaf41361942a8afeb82eb57ccf8515e04eb33d1d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1569f307dadaa8a6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "05256617890052107b341acf6cbe16fd9f22f86c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b06071b99bebe6cc7f7716f65ed4f36ff54aaf78d74ea0bec72f9029a8e2c215"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d541d9319703d2d3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8821070ee31fdf50e1f86d2044631dd4844dc388"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "550620d374c9f9c931c5a97a899b00ec74b5e89db48dce76b9c113dbf9e2c6f8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b0ca528e6d9e2bf4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dde8a3b4590fbdcb",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ff5c7864735844778d9f653604ac1754604f89c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a0f049a58dbf9fd58e9b4686db2d51200cdea584c9b6425b400faa24133ace25"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4613be6a31858741",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d8d597c8560806f8ed174711d725bbef811d8e03"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4d59739fa5052e0c91edc0642ad95414427ffbac186c5570257cec8eb78dd751"
+          }
+        ]
+      },
+      {
+        "bom-ref": "24b88fb4c25903b2",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "51693666ecd8db24",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5745585933310f7807eebd4e9bc01e2d83ba160d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dd7d78caf139ba9228a84bee7bb5fa7b92e4d332b836f07bdf1b0f9e78fa6340"
+          }
+        ]
+      },
+      {
+        "bom-ref": "725386273f5af8b1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/mkdirp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "46da394a85c88f3288e19ccd89c03174e1360c52"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a3c93aa17fe811f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/ms/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c290eb97736177176d071da4ac855ab995685c97"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1805cb91847316d0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "35b672da35e299376d0ffc4f22fd57088150a835"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ef768b2fdad81833",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "73514830b941035ead3ae1de9cb5b8a3dd395f10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0bf67c397d8f6a9136d44eda86f417c0c81893e99697cbdf8733cb2982d7884b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "56817f2eb8e02c70",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc62a4513e54488bafdeb2f4095483538cc80503"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "961dd5d2924a81e0c75ae3e5853784ae270e894b86c0229e31ed8619893a582c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7283d28339d0970b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41bc0fcee7ad3ab38c8de1c030a849af36bbb262"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "13b247da6685d68bbbb6da390709fee7a2d6ce0658095bbc921ba31c1cbd86fa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cbb18bf6790d0019",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "53b43dd098da8d4b0606d47cc71bbce0f9326251"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d0ce634b88bcba82",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"
+          }
+        ]
+      },
+      {
+        "bom-ref": "beaf95ad2c4e1d2e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/rimraf/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ed8ec0789d4558ea2492b653fd0be9f16b90020d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9e484656e512c9b3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9db18a8163ab1fbb6e7c8bfd56c7483239d63c63"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "256982ce543519d0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b376e943406ee22b05111950d5053884327ec513"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bbe51d9a0b7ac254c152efcc699dc65958e6fbab666d1c87d8b5873136b56a10"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e9dd3f2338f35546",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6e55d0ea8fbd72c6e89310dd958b22dcd6d2e56a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6b456b51d5431d6c47bd8ed15994582096f42e3e3cced980ecf4824bf627869f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c8197b7e163b4876",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f351144cafb23a2e78d442708fcbcfdcd4c5420f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "280af43113a60826e63a6bf79e115fdf5f89d5866f663cdde3d229640671cee1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4a45e178056d7a4b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/tar/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8b9fbec9a68117d7405c65ab254846287a63a494"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "89bd6d32c9e56eab63f3f62b96080aa43afa530675701610d74793d4719d1137"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a125a282d992244",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9ffc9a77d53279c1e6dc931d443376bdda383931"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1a1017165f7029207fc753240baccebb6b658881fec0b7cc88558d833a74c711"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6464bd44e785a7d9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ea2ce7c13d4cba3ed5e48e0c8dbe7e22c7f38220"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "15936d07741b462fb77ed70603112bc2f8377869f326b15c185b78cea1692269"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6df594c27c6246e0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7f52b4652fe9ff874b294815483566da18d118ec"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "433984d8ab6027ebf54dea96093fb32a231fb0c4f16cc08445da7d62a6d8837f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fca3bff103eac7e9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d6a16b480cbd582f969b3d0ed89a157316268d10"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1d589fdd77cbaf1f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/sqlite3/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "97366bb2fa9d63bb9660b3d130efb6d37a6b80ef"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "c782c19485b0026e209076a236484a62885cb3a0828322a2936043230ed1ec41"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8e2ca8a0d342448a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ssri/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "203926d505f969e44375e6a40942ce43ae490f44"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5c18917c39afce09b6ebdfd212c736c390d74d1a72db8bd1561117f949669252"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dbba4a5b4801cdf5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/stack-trace/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4ab8ba513ca79e30bcbe250d567418e8571d897e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9d4ebf4546836593d64b8627bab4f12100a33e39810cec6e175f3e71f0825c16"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ff575d3109ff007",
+        "type": "file",
+        "name": "/juice-shop/node_modules/statuses/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7fcf010639ac286c47c517ea92d7ab13cbbee298"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dc2508da5568ba768d94b73126cd20a5df934bc0c651ad681022236484ca156c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f0a2ae5752e08ced",
+        "type": "file",
+        "name": "/juice-shop/node_modules/stop-iteration-iterator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9da2c93d8d5dadcd5c5c6676b8da87a09dfd5299"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d081cc886d55d23d704721c7b03b78b0f5600459a75d9b2fb63449d99d87cc81"
+          }
+        ]
+      },
+      {
+        "bom-ref": "abd5fb5e77216f1c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/stream-buffers/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d8ca85d78d4faac879d4ec7cdbf4eadca10888a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7f6be66ac31f7dc6351d5737aa3d1cf016209b737c1b36b763cf6d5f15d112df"
+          }
+        ]
+      },
+      {
+        "bom-ref": "72695e569dc88c7e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/streamsearch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b75e7127bad8663e7e009826561501526d2afd16"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "029b54b7db483222a64b99ab0e27b37d0ca59ca4a95d591b121b2cfb3a45eacb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "92b3927b796b282d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/strict-uri-encode/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a82ba4bf6c6714c55d554a492ec4f4b4b0a2aa9e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d73babfda858dfced0e39e23cd72e7db28ea986f26d838cd9c4f7d287a6feeb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "96592c293999170c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/string-width-cjs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5306c15bba6cb123d9f061ca85eb56576c6638f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "bbac2ad7fe4e46fe",
+        "type": "file",
+        "name": "/juice-shop/node_modules/string-width/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a5306c15bba6cb123d9f061ca85eb56576c6638f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f7d81a6cc7d02b37",
+        "type": "file",
+        "name": "/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75341186905ba72b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/string_decoder/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "da598f24028fdd9f3801969161159c1bbeb2034c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e278ca18803862a6d1b6bedc6a3394159ac86e5c4a162614fef006c79dcda3a2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "15d851933a94501b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/strip-ansi-cjs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "892d549c672831716abe655f087946d2644f2852"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530"
+          }
+        ]
+      },
+      {
+        "bom-ref": "14d5c8b21c5763bd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/strip-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "892d549c672831716abe655f087946d2644f2852"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b96a65719cad758",
+        "type": "file",
+        "name": "/juice-shop/node_modules/strip-dirs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "485740a0eee81e8d7459585521c0b7fda39bfb72"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "34d0fd27a6a9b87b1aed243a0c85ef98abe77e04946cc065162f62f6badcb10d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7a644e064b21f3fd",
+        "type": "file",
+        "name": "/juice-shop/node_modules/strip-outer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d5564549073d159389a2b94894bacf92d24cd93"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "998a40b2428ff1fe95ba0ceff8a99565d16fa80763a276bc0aa4b21fc5a79993"
+          }
+        ]
+      },
+      {
+        "bom-ref": "baa5c6efd995f5af",
+        "type": "file",
+        "name": "/juice-shop/node_modules/strtok3/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4c0a17cf164dfbab502a584082eb6e1847e6677b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4db1129e1b61a3d33a7955fefcfc4923e02cee3d238015545db4d3f67d79c99e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6b5388ccd2943d77",
+        "type": "file",
+        "name": "/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ca0c14a63df0bdf41422d5e8c79d38e214da561a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aef0ae2d21ae9181d8702c2063ce0ee274ba1063e5312e4baab5673aa6d4d5db"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5676177d191bd9c7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/svg-captcha/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0efdde17b2dbfc8fa8ca40aa6950c67e0e877631"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0d9c39548169d675ff8c0dd7ebb76319d4aade71f423dd9643092f4e968341ab"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ff8456e72f49483b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/swagger-ui-dist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "798672954d4bc6de27c5c9a268a96d75b22e63aa"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bd16f463bc0ca4c4d136bc53930113560db8d95518ddfaf94a55117bc70c399a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dd7468f2aca5349d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/swagger-ui-express/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3e3986c37083e87abdc0f50382b0e13d1e989e72"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "2a7d7d50229bd13523e90730b6877cb9caa1e9491aa378640093a4040894d376"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0a00a93dff90b9d4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar-fs/node_modules/bl/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "093539237b878bed9c3aa2b22e8c1b84cd414df7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fea66d3b8671e46f77e83db040837cf72da180b8d390d53c43d882fd553659df"
+          }
+        ]
+      },
+      {
+        "bom-ref": "13c7fa3b9b9fc537",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c3024b92485c885b974e1f46cb2c32de716c6f06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e2d40ebf9f403806",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f9034430c03fe50c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f5f0d892c75460d1d9b79580c165740daf8513fe"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bf26c92d0b2d3b865681bac5cf3bca4cd405e33fcb47f45216899aaed4f81010"
+          }
+        ]
+      },
+      {
+        "bom-ref": "02387e3da6dd388f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar-fs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b65b60b762d1806f9292fca397e2492ce3308629"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ba35bcca6e868b872346f2905b3ff58fed8c99d475f9b3124afbf5de37514443"
+          }
+        ]
+      },
+      {
+        "bom-ref": "795d0b6e0dbb6560",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "82b92a8ad07a5547aa365bf7d54c48e4752fed7e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "00e16b8127d249e89451e861b7757b51c7d8918bbce7273c978fdb3f121cd403"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f6c88fce460a2592",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tar/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b68f0fbfd5f06dce070841eb03ee7784b25e694f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5dabbd9d4e4f0c6c7ba3096814c68bdce77f393e44938e05647f29b8d7351905"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cc00ecf7f44a7967",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tdigest/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d346cb0cf35a0ada66aa9aa426d7ca7b1bb537ab"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d956f6e092443eb1dca696b921b85ca86c93241de87a0fb8af4fcfaa15797b42"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f32ee3ba438100b4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/text-hex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "22adf500975e8bb558a26de483d7b7c2044cb6a8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "84b96b962f6fa158dfb9d814778d0f8f1635c35d4ed0dd65fefc6afb30570eeb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7106765bfc1f0e86",
+        "type": "file",
+        "name": "/juice-shop/node_modules/through/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8bc63accbab0e155f8aa7c6eb46eee6e859bcb6b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6580a473cf2f91c6752a01d2c31f729cb14f7e042b830ba46f8949f89e26bdb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "55380a75c98f7643",
+        "type": "file",
+        "name": "/juice-shop/node_modules/timed-out/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4e735d6703795556aa1bdc916058d1d301d6d746"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "fdd01b108ebb6fc5e033fb494fbd52bdd7ac38759cd66e930cd43d49b86ecab2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d89817f435fa3c47",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tiny-inflate/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "34700e8451c817e74d6c6f9a1c0801703e11a63a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7a97c9567b054c9294036537d42a112f4bd4263892fbfe2714e6acdf25816c6d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e353d34eddfe338e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "87c30edff77dd2a0847ac92b0a76837682d64eb2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "aca49395d61ef383a09f74555c66ed45817ca2b5724e710a4dc9e0471b83d8f5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2c13ce75b2c95ae7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c39e8b54abb2ea9a53dbb2013c1854057971f7a4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8deb10b4e1f7cc2fe8236a70995f4c6b5ec3ecf93f02f2b6427a8600d2c1d20"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7f621bf368f173ba",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tinyglobby/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "800e1c7af60c9646b06d305edb23dee61466bd66"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "83419fbcd0e8b6b1fadd70f647cba140e9fc7f59748525541b9874fa1fae152e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f243486adedc0a05",
+        "type": "file",
+        "name": "/juice-shop/node_modules/to-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2e3e5055412187a0c53bf11b58b792633297aba8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b9a28e593c952536fd850edc56098bf40679a21e7d1aa6e64a762921af663ef7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4920032169d1f85d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/to-regex-range/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c16a607925055788aae94f1123fa0d769af161bf"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "766fc1bb34fffcd503c89f4194188ce059795c52fd0dc6753cd4b7dcfc3fe1ec"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9785a62dbac3d780",
+        "type": "file",
+        "name": "/juice-shop/node_modules/toidentifier/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e8fe1d02a381b71a33e41588ae26746d34fa4903"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f34c59f784d43da6e633390d85d14ca60539b4676159444f313c62fcfc3b68dc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8a7f536793e7dc3b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/token-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "45c7c0d74ae7dd7472a18f68b9ad05815a6f84ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0715f6c496a2e1866067d32679bb610687465f6f94724bb1c7bcdc1b50964f08"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0822241bd66b60fa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/token-types/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3836dc720a9de8346b44e9b48075a0cf40a12a08"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8376de6a6272c19359e4feb53a8206760777291a7a09cec3964ee37fe092354e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e3dca88fdc9c0ce5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/traverse/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "06c9415120aba8a3d5a3564763b9b406cb96f23a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "305d53d5257aa2a3618a2ce42ce50ad45d1b108186580f3c00482e42086b2d14"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9bd9c8858842107d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/trim-repeated/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "43166e064e6112331c58224799fcda38e15dab92"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "caf8852960da48c505e1ec6884878a9bb52b8fbbb8eb1dcc855f19a7f50fe4ac"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0f0b5cd1b3d2db3a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/triple-beam/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1e356e8f3df9978c633d2fdd6adef6f8f6f17f9f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b7c3d5228846e6719feb034f1aa72f294f1804ef9cf1f3fd7e1659413b9b3950"
+          }
+        ]
+      },
+      {
+        "bom-ref": "64642fe15886c73f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/truncate-utf8-bytes/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "97ad55b3d7fef9910d4e8b426845e9a2e8bdbe01"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "8da766c7092b0ce9fd8f3b2ac2f41d1b739df9210067d3f710d65d95c9c17a7a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8edd1128fd211f4f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tslib/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7227cadc95e0155ca68f85e9487ebbb9091034e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ecf3460a204a34f0ef8ea32d0f9828385658d4e5d5e271f93f40e7b36a32972"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3b0d3a3c8a9b2423",
+        "type": "file",
+        "name": "/juice-shop/node_modules/tunnel-agent/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b0f728acf482a20e28d3d25e56b084529c2533d4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "08a8560b650b49370af44148a8645c11675ba97d21ee7f347d8d434b13c51074"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f8635e004c386c2d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/type-is/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "28d55c4730fdacf9019317fae0ba93a0b6aebd0b"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "87917e3dda1080179447633c3edff7e4b917d62b463893c88cef5be0b2babc63"
+          }
+        ]
+      },
+      {
+        "bom-ref": "39ab322fb235d54c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/typecast/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "21c7885a03c0f346f10b8c44d64dc5e2b06a4345"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "751046532a62d8d98efba8b21055fea0acf58057a69713cf4badbbbddc30af6a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "593170ec620c328f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/typed-array-buffer/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d2a1cbffbc42f558a580d54bd12a6a496ac1b569"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f0f933ad37d3be61efcb8c4fe64088cd97a4bc86038d5bc19f33df1e995bac56"
+          }
+        ]
+      },
+      {
+        "bom-ref": "23015def3c20c60a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/typedarray/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "80e445329a66d6a606165762bb9c34dd7caf135d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "622ebab64ef61f10e4dd28a099e88545c477ccf7d5aa28d2eb4462c857e76fda"
+          }
+        ]
+      },
+      {
+        "bom-ref": "68d69ec01d461681",
+        "type": "file",
+        "name": "/juice-shop/node_modules/uglify-js/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "babba559ebf25dbad8e337ff1e622e1e499ecd28"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4e7908267a1b0dfd5af0004dba63e8392ffc509ae986d5931017a55d7d65167d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8f40f521334774b3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unbzip2-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "cf8bdf0d4fa8254d541678572099ad8738f1e054"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ebb4f3f85319e57392b46070e1c39ba33ad74aa2f01934ffea0ecfcbb22282af"
+          }
+        ]
+      },
+      {
+        "bom-ref": "ed44397c37947978",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unc-path-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "5e66f1c422e03aee88f570bd73d7498db87bc036"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ec92f74becc17cf02d61f006553f750e6a9ebbe2e5dfb4057003f9e67065f973"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3d86f22b0539a548",
+        "type": "file",
+        "name": "/juice-shop/node_modules/underscore.string/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "becb44287069fbf82c0b0d3c281b1bcfcbf135f4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b8a24fd9e9423e22f083c7cf94fbf8f45caa56bf9e662fb58deb7a5999ab5e34"
+          }
+        ]
+      },
+      {
+        "bom-ref": "69f1629597496dfa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/undici-types/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "def899bd021e6c2f7b962f89c29326e2eab41c2c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11f873b423b96a5ad444a099685ca6b9de1379dcd83fd8d368e757ddb53658e4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8ee07232ca8c209a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unicode-properties/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6d843d2dbd0f2cb1a31a2ae38b8e90fcb43d75a5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4dba3776474dc9f928749684eeaeabacb40fd0e58ef704b2c2a976201830183b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "71648dca7a744fc0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unicode-trie/node_modules/pako/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d10e69957646e41e179176878d2a3de76aaf4f13"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "dc1090fc2228e15fb13cc8aa81f3c99c9c0a4237f99a42d1c7ffda1b137cf1cf"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0faaa7038316ccaa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unicode-trie/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "06c142c393c921d1f8ea85e83697d9ac3c737b06"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "11742ae162c45a0f55a4d85ae1c6dc7dd380e203173d3bca04e72ca3b68729b6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "50c511fea07112db",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unique-filename/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7ab7ef7fed369084e86d0800e1861115c3ff1bcd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ac3d03b4b239b3eff717b2fdb3dac9f32fd9bf49ee8c20cd87f82fd148c2a7e5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "52fb31983803b69a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unique-slug/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6bfb7b3e3ad92a208217828bc65a87369999d06f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "23b9c2630936c9633601c95d91165f2d5dd8f099886e058873eb282ac537fdb7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "378665bf4cf9fb8f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/universalify/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ee873fdef51ff8bb443eaa2e404c470fee171133"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "10e53f10939bb8a4a73af6e06829b670bbf9da66a36edcc644441852806b87ee"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cb0a97786428ba3b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unpipe/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "f67f2d17a18c3ded93c9423903df8e6678f4e416"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "28b717f978d2a4fc72cd08236931443b63fe6586102df3d1967e2b21ea8c5e11"
+          }
+        ]
+      },
+      {
+        "bom-ref": "71aadbccd34b2a1d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "798aabfd8f98b7acc51b06ccf115f6f5f13ff3bb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5e8f820b5628dc16da723fdb42c0c8c50a59f201591a335310fe754a076598f6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b6604634b4acc5b9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/unzipper/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ff392885ebb8c1ee02209a3803b2e7d3f585fd01"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "10a99b6c186386454323df981067d807c9cf22493d3636bdad05e599adba5635"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6ce0e7d71f8f50ed",
+        "type": "file",
+        "name": "/juice-shop/node_modules/url-parse-lax/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4f3578d706cc6f6b8c71191b6846e74e91d60259"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7ccad07cb7916cb11fdf9ee02fb93a9dceabc860c1550186506c0744b1504f76"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2b8e827065d20bdf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/url-to-options/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "72b6578557d3299f9e72b3d0bcca11f73e3581af"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "39f7f5ee9153c83263fdf0c38e140d34ec4a9bbb88c9988862e2f0530033994e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "905c50422d2126c5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/utf8-byte-length/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "223456bfa4f5067cc378339ab9c448b028e4d203"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b889d007bbd065efe6d9dedc6b4905794fb17b179e0591501782df6afc085314"
+          }
+        ]
+      },
+      {
+        "bom-ref": "964957d29aaf7223",
+        "type": "file",
+        "name": "/juice-shop/node_modules/util-deprecate/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "2e69081e7bab6e09d3dcfd680716fdeea577431d"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "7bba467f049074957e693fc06672848b040c38fa071b6eed8690f5fbe090a8b2"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c917aa1887219802",
+        "type": "file",
+        "name": "/juice-shop/node_modules/utils-merge/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a03473329c34092ea6a88cc11c409a4ecf8bad33"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "6238e6d7e2fddd3e4826014b4e69cb20d332b472999728a7157db454c69121b8"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8d3874c860a7dd13",
+        "type": "file",
+        "name": "/juice-shop/node_modules/uuid/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "a58d29c1fd72b80ea213864527ae7bb48ae3f2be"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "56c3eae5f83172f7ab5205980ebd9a1328f6436628d893720938d5679208922c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9996fe96c3b72ad6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/v8flags/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "fe85f10e486cd4e1d7ee177facfe769a897c033a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4a2fcc6269964dfc38575354664c1c3643ae60829841e79bc7d750de58b244c7"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4dbaaec070163f8f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/validate/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "47c6d175ec289a4e7ef3cad1758e784810496aa5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "605a57bda1914000b35b68d484f713b57b95a244fb82371c00b0cbfbc908ec4b"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3d2439a2ce7181e1",
+        "type": "file",
+        "name": "/juice-shop/node_modules/validator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "eb80193f4fd9b5609d93bf399acf2ecce162f1a0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "e33c239e4e4cbd1142b7ad37e831951f45cce3e655f3164eb88c7e1eae1a2af5"
+          }
+        ]
+      },
+      {
+        "bom-ref": "21bc029e764d5a8a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/vary/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "82f740e2254b786f7a3a39a762d4d0fc6ec7b008"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "73edaee964d527117a9f69d6360fbe6cec534abd9127794be01a6af58a139daa"
+          }
+        ]
+      },
+      {
+        "bom-ref": "62c497608972c61d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/void-elements/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "b0b8e02fd6d29a691289f9d279e1be41201a79c4"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9cc3503e65c64719269421c1820f11bb66ad5a5f1597ee68e350ed18dd23b98a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "64e58455ebbccb56",
+        "type": "file",
+        "name": "/juice-shop/node_modules/walk/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "48409567c2bff0f58fde79948118ac9d50ada686"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a2a8f916e38926b6b45761a7e8eb14952a1754a0bf0d2c3689038af9bf156bdb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "42831aaf00e02ad4",
+        "type": "file",
+        "name": "/juice-shop/node_modules/walkdir/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ec0b65e01578e50bb446aca570ba7b5efde8e29f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "628303c50a0895ba01d1869d6adf63eecf2d3534e2b143f98d3f21eca77d25d6"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c6fc01af242b0b0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/walkdir/test/comparison/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ff50ca027638d23483435b73da1bdcfca4b7f269"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1fe01eca0bb65e21e447caa7378df650ffd1a129ef80c0a07bea254c07646628"
+          }
+        ]
+      },
+      {
+        "bom-ref": "3aa28850c2ccee95",
+        "type": "file",
+        "name": "/juice-shop/node_modules/which-boxed-primitive/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "0af7e24076139571355204f3bace1c3a603949a6"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9e0869e7c145b1d1e6ea0e63b2870a1aa230e7f75ffe69240908c90d35c02aa9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a0a8532600a9308b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/which-collection/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "7c6ebd4f25ca1ca27d30f8d395cf4f330f619638"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "bf95e02a88d5b89dbc6b544c334a317c234f3c4a237f9f1dcf611506990ed196"
+          }
+        ]
+      },
+      {
+        "bom-ref": "37aa91132aded5ec",
+        "type": "file",
+        "name": "/juice-shop/node_modules/which-module/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "66bc9244d8b750f43d498703675d6d71f8e1981c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "02f6f6833d09c32100317a390892888ae44da4f712b2271d4b308bcace09a99f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0951123f27a35925",
+        "type": "file",
+        "name": "/juice-shop/node_modules/which-pm-runs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "d37f6577f5a53592a5080771fec8aa3340b1a86c"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0eb3591abd6e960733cb1d8739e329d2565397e5a3d8b4326b30c80f31d69ab4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7fa70dd613cbcd4a",
+        "type": "file",
+        "name": "/juice-shop/node_modules/which-typed-array/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "83d5355df4ef773d3a2d050c11d6c5d2a34310e7"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "ea9e55ff13c852ed5ac5746a4049a3f6131722f8372f2c3fc0b3802a5538588c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "dd6b8d59e47cff8f",
+        "type": "file",
+        "name": "/juice-shop/node_modules/which/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "402837c5ba60f95b309957adc4657b8fe4fb1f05"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "43010039ed5e89f7186960be682b3cb5cda5ab6cdfb06cbfd4f081cf0e7b4260"
+          }
+        ]
+      },
+      {
+        "bom-ref": "316cba6975c317db",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4c7437872b679c9cb6df8a53d4928c07c36a18dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3b443ff0b23130799b2c5755582ef6f62096064e4d270d0122b03477ea68ca1c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "75a49be9588b5785",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "8b4b76c3bc63680159f5e97ff8e3a218f25e7c00"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1c5c73b201f50ae5201dc7afad16ccb32f16c411040c5b93b689f4c6ade17c27"
+          }
+        ]
+      },
+      {
+        "bom-ref": "93da7a948f426d63",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wide-align/node_modules/string-width/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1b26460d736e2cd59d75ff10cbdee5c483f6596f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4118bb2266a7a1adaac138d4b5813742483414c9dd536b98a851e032ae98adf3"
+          }
+        ]
+      },
+      {
+        "bom-ref": "99df3422b00da101",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "9ce1d9cd5e0e83463c97e87ce10e25bbcc6f9e4a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "682840451efde52b36dba755741011e0d82bc2a89760e24aab8c564723d8369a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "4c70d1587d93fce3",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wide-align/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3a42d35dea67d3af17d76c4232cf1f56532b1732"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "524d5d89924ba461deda48989a748f8450bca19fd00eb8ffa07dbed870bfdfb1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "709e5220159d8ebf",
+        "type": "file",
+        "name": "/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"
+          }
+        ]
+      },
+      {
+        "bom-ref": "50023f4b46ff45aa",
+        "type": "file",
+        "name": "/juice-shop/node_modules/winston-transport/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "41ed9fa7f4c7c753ec90200f0c3df7665149afb8"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "212ebeebb9f3f301a77fe581c1c367ef9d70ec8b3d7c46593010b2fd2e89bda1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6edacd55143e99d8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "bc0cd68d3d25a31abb16de7e2b5ff5e20d974403"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "345f5b4ccc197a25",
+        "type": "file",
+        "name": "/juice-shop/node_modules/winston/node_modules/is-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "dac0050410d80a991cfa4ccdd0eb37f4020b49dd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "07cf93d9490a2d7ed7731810b49b1c314c760291bb66cdfbc0279258ceb65ec9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9b89e724bf648843",
+        "type": "file",
+        "name": "/juice-shop/node_modules/winston/node_modules/readable-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"
+          }
+        ]
+      },
+      {
+        "bom-ref": "e3c4704299df6454",
+        "type": "file",
+        "name": "/juice-shop/node_modules/winston/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "20eab7a88cdb780cb1023993439f123e19020641"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "f96cc6b8da151f7237b2fe38629ed06f55b7f230b281a70ddfa128e1b2648e6c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a20c4ba00d904fad",
+        "type": "file",
+        "name": "/juice-shop/node_modules/with/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "36745b30bb45cffb3ec3646489ca7406c3235363"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "30d01a7f84509e2ee075442a2e56ccbee6a9a98c46d86f32659d24b2b34a8609"
+          }
+        ]
+      },
+      {
+        "bom-ref": "caf9eddb3fc86d80",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wkx/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4fbad714a31c115ee6ba9b12e896792bd1a783e0"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "12eaedf0c094ee3c00b553926c70585eeeca003e9cc31d4c869fe68f711f2ea1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "c55f12d127faaa25",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wordwrap/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "91c29dfbc287ca5f45c833a5ab47bd471f344ad2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4346d2850babb5ed5b1685510e007adc142384e6468613f32f460db2cfee1297"
+          }
+        ]
+      },
+      {
+        "bom-ref": "9ac05bf51377a17c",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3c9ef7bd0a1c3d805814c654c457cc315c48c116"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "d1a4df64de024c87",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7c116a18a7e955ab",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1e2daec5ecf3b3b0",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi-cjs/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "3442b7381f1b431861a986d8cdf144ced299db29"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0b0cf0bf62bd0cc71da2128e3269e63edd566feffdd501aa3692acd6db93c3c9"
+          }
+        ]
+      },
+      {
+        "bom-ref": "fdbb7ecc8c2f463b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ce200865f7a4839de6213072c7986484139c50b1"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "a58f1d6dbaca116f4aaa83906a0a992da2303a07ca920b2ce877573988eae352"
+          }
+        ]
+      },
+      {
+        "bom-ref": "71b34af59138aab8",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "adb4944aaa807d2d90a6d54e220759c3081c10d2"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "0cf1f46ceee4b380298db6e6a54f14d345abe09abd5f650cbc20c8ac2ab27744"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2e45365470f5058d",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "238c48183550d02ab5c0dd37e13d57006dce640a"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "a582fbd2ab8be328",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "53ae7a1b3953e86624927fec8421d453d9c88e41"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659"
+          }
+        ]
+      },
+      {
+        "bom-ref": "6df85ad24e28a08e",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6c109cf2dd51ea9d89ed05e64161782df7559477"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "228b214dd06ca80ab3c36e2b890a8696a39cea65585f6d61498c922c615e18a0"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1ca9c34b48444b8b",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrap-ansi/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c14f366cb2c71b662f7edb2dcf7370a513fc641f"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "609dd6ab176847e57e799dba2e4c4ad355abe463ec67a5ab0dccec08b67e6761"
+          }
+        ]
+      },
+      {
+        "bom-ref": "7bc2f2f96c792ac5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/wrappy/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "156d61004996b07079664753e7b5c415b99e4c89"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "712ac9c4c3cef8bc79f42cf6075ff18551f4cb768f35158214fd643853ad7abc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "0bc7015f9686b629",
+        "type": "file",
+        "name": "/juice-shop/node_modules/ws/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "6f2ab48fb7d118a83ff9ae1ace83309f2db23321"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "61c104d44cd4ff02b190f970b8cb0a8d70af0a7274e0eff46580b1e20200decc"
+          }
+        ]
+      },
+      {
+        "bom-ref": "5cb0553d6523d9d6",
+        "type": "file",
+        "name": "/juice-shop/node_modules/xtend/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "1ff55cea8456af743102bdd7fc40b95fe34a7770"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "b02ffef8cda96c5c3ee00a00390e63f608362c2ddfb3ed754e181d013a45d48a"
+          }
+        ]
+      },
+      {
+        "bom-ref": "1b3dd836551c4000",
+        "type": "file",
+        "name": "/juice-shop/node_modules/y18n/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "ad32dfe662561409f091e109f6830ccab42124ff"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5995de811ffa1b8a8e9ed9bd0444f60058dba9ce1ccbe12f2d5e12c31a975d9c"
+          }
+        ]
+      },
+      {
+        "bom-ref": "2365ffb651b17448",
+        "type": "file",
+        "name": "/juice-shop/node_modules/yallist/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "4eaebb818148fd3bcc27e1aef2d88497999f675e"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "1b9d47057ce39814531ff93f668823b4fa03e7d23945449c274a1ff6d4cc297f"
+          }
+        ]
+      },
+      {
+        "bom-ref": "8e682d2a2ca0f297",
+        "type": "file",
+        "name": "/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "74103756a0fe401ed4d8137e04607758a77897eb"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d"
+          }
+        ]
+      },
+      {
+        "bom-ref": "f5e289aeac55de10",
+        "type": "file",
+        "name": "/juice-shop/node_modules/yaml-schema-validator/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "39604da28e16de9ffa9046ec18a06b36baabcf32"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "5a89e68a562c98edec01f9aefacf2d5f95e95d0dd543e8e0125a9333f59bc2e1"
+          }
+        ]
+      },
+      {
+        "bom-ref": "549be1d3f68fbc47",
+        "type": "file",
+        "name": "/juice-shop/node_modules/yauzl/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e91b995ab78ed0ec2c169efc0c17f7f25c679e44"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "9119ac0c70d33b16e3c69dbc5cdeab71eb513124a04d961f2c9e7402c9fec8eb"
+          }
+        ]
+      },
+      {
+        "bom-ref": "b73a67394a26f9c9",
+        "type": "file",
+        "name": "/juice-shop/node_modules/z85/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c7c525898d3d17ae288951589d49a82860f873cd"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "eb5ed55479185f63ff524af3718856f22fcbdee2befeeb2537b171bb90266896"
+          }
+        ]
+      },
+      {
+        "bom-ref": "52235df3c58a6ad7",
+        "type": "file",
+        "name": "/juice-shop/node_modules/zip-stream/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "543a5a3cbe7a0a3c766e9acc28a9d79696183d79"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "51c0c491481381690f272d535d4d1453fc4982f13bb96e659faff5a4487b8133"
+          }
+        ]
+      },
+      {
+        "bom-ref": "70f9e28367cdb7d5",
+        "type": "file",
+        "name": "/juice-shop/node_modules/zod/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "e168ef2ff344c6d274af1cb6cd14b33cb3f16d95"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "70eedbe34fd52385a4ae2f3e5759b19682189f0118ea73a6e7c32c677f61668e"
+          }
+        ]
+      },
+      {
+        "bom-ref": "cf87c4636bf6d5a1",
+        "type": "file",
+        "name": "/juice-shop/package.json",
+        "hashes": [
+          {
+            "alg": "SHA-1",
+            "content": "c29cbaf50f88c8bdf4ba41094a238fa93d5199ea"
+          },
+          {
+            "alg": "SHA-256",
+            "content": "57b2d89c1b3500dfc04674b00c9ba374e1ef423ababb64e814b39f90fe87c933"
+          }
+        ]
+      }
+    ],
+    "dependencies": [
+      {
+        "ref": "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc",
+        "dependsOn": [
+          "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14",
+        "dependsOn": [
+          "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14",
+          "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/libgomp1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=8d4d6890752630d0&upstream=gcc-14",
+        "dependsOn": [
+          "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14",
+          "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=arm64&distro=debian-13.4&package-id=4f12411d3227085b&upstream=openssl",
+        "dependsOn": [
+          "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc",
+          "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&package-id=02b5bf6dd9ecb243&upstream=libzstd",
+          "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&package-id=90e7d5b74b631f9d&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=9cc8acacefdee288&upstream=gcc-14",
+        "dependsOn": [
+          "pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14",
+          "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc",
+          "pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&package-id=02b5bf6dd9ecb243&upstream=libzstd",
+        "dependsOn": [
+          "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=d9521b4a2d6d0070&upstream=tzdata",
+        "dependsOn": [
+          "pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=b579583c7128019b"
+        ]
+      },
+      {
+        "ref": "pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&package-id=90e7d5b74b631f9d&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1",
+        "dependsOn": [
+          "pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"
+        ]
+      }
+    ]
+  }
+}
diff --git a/labs/lab4/juice-shop.cdx.json b/labs/lab4/juice-shop.cdx.json
new file mode 100644
index 000000000..fe65f6ba7
--- /dev/null
+++ b/labs/lab4/juice-shop.cdx.json
@@ -0,0 +1 @@
+{"$schema":"http://cyclonedx.org/schema/bom-1.7.schema.json","bomFormat":"CycloneDX","specVersion":"1.7","serialNumber":"urn:uuid:d0c3bc8c-59cd-404e-ac13-dd325a975583","version":1,"metadata":{"timestamp":"2026-09-20T15:16:29+03:00","tools":{"components":[{"type":"application","author":"anchore","name":"syft","version":"1.52.0"}]},"component":{"bom-ref":"9a5566eb61b934e9","type":"container","name":"bkimminich/juice-shop","version":"v20.0.0"},"properties":[{"name":"syft:image:labels:maintainer","value":"Bjoern Kimminich <bjoern.kimminich@owasp.org>"},{"name":"syft:image:labels:org.opencontainers.image.authors","value":"Bjoern Kimminich <bjoern.kimminich@owasp.org>"},{"name":"syft:image:labels:org.opencontainers.image.created","value":"”2026-05-12T21:09:09Z”"},{"name":"syft:image:labels:org.opencontainers.image.description","value":"Probably the most modern and sophisticated insecure web application"},{"name":"syft:image:labels:org.opencontainers.image.documentation","value":"https://help.owasp-juice.shop"},{"name":"syft:image:labels:org.opencontainers.image.licenses","value":"MIT"},{"name":"syft:image:labels:org.opencontainers.image.revision","value":"f356a09"},{"name":"syft:image:labels:org.opencontainers.image.source","value":"https://github.com/juice-shop/juice-shop"},{"name":"syft:image:labels:org.opencontainers.image.title","value":"OWASP Juice Shop"},{"name":"syft:image:labels:org.opencontainers.image.url","value":"https://owasp-juice.shop"},{"name":"syft:image:labels:org.opencontainers.image.vendor","value":"Open Worldwide Application Security Project"},{"name":"syft:image:labels:org.opencontainers.image.version","value":"20.0.0"}]},"components":[{"bom-ref":"pkg:npm/1to2@1.0.0?package-id=3cea2309a653e6ed","type":"library","author":"Benjamin Byholm <bbyholm@abo.fi> (https://github.com/kkoopa/), Mathias Küsel (https://github.com/mathiask88/)","name":"1to2","version":"1.0.0","description":"NAN 1 -> 2 Migration Script","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodejs:1to2:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/1to2@1.0.0","externalReferences":[{"url":"git://github.com/nodejs/nan.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:1to2:1to2:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nan/tools/package.json"}]},{"bom-ref":"pkg:npm/%40adraffy/ens-normalize@1.10.1?package-id=08449108469244be","type":"library","author":"raffy.eth <raffy@me.com> (http://raffy.antistupid.com)","name":"@adraffy/ens-normalize","version":"1.10.1","description":"Ethereum Name Service (ENS) Name Normalizer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40adraffy/ens-normalize@1.10.1","externalReferences":[{"url":"git+https://github.com/adraffy/ens-normalize.js.git","type":"distribution"},{"url":"https://github.com/adraffy/ens-normalize.js#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens-normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens_normalize:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@adraffy\\/ens:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:adraffy:\\@adraffy\\/ens-normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:adraffy:\\@adraffy\\/ens_normalize:1.10.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json"}]},{"bom-ref":"pkg:npm/%40ai-sdk/gateway@3.0.114?package-id=58ba8f899e54409f","type":"library","name":"@ai-sdk/gateway","version":"3.0.114","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@ai-sdk\\/gateway:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*","purl":"pkg:npm/%40ai-sdk/gateway@3.0.114","externalReferences":[{"url":"https://github.com/vercel/ai","type":"distribution"},{"url":"https://ai-sdk.dev/docs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/gateway:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/gateway:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/gateway:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai-sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai_sdk\\/gateway:3.0.114:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@ai-sdk/gateway/package.json"}]},{"bom-ref":"pkg:npm/%40ai-sdk/openai-compatible@2.0.47?package-id=7050206931a8a0d7","type":"library","name":"@ai-sdk/openai-compatible","version":"2.0.47","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@ai-sdk\\/openai-compatible:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*","purl":"pkg:npm/%40ai-sdk/openai-compatible@2.0.47","externalReferences":[{"url":"https://github.com/vercel/ai","type":"distribution"},{"url":"https://ai-sdk.dev/docs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/openai-compatible:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/openai_compatible:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/openai_compatible:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/openai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/openai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/openai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/openai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai-sdk\\/openai-compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai_sdk\\/openai_compatible:2.0.47:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@ai-sdk/openai-compatible/package.json"}]},{"bom-ref":"pkg:npm/%40ai-sdk/provider@3.0.10?package-id=ddf033d1fcc3a4ce","type":"library","name":"@ai-sdk/provider","version":"3.0.10","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*","purl":"pkg:npm/%40ai-sdk/provider@3.0.10","externalReferences":[{"url":"https://github.com/vercel/ai","type":"distribution"},{"url":"https://ai-sdk.dev/docs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai-sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai_sdk\\/provider:3.0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@ai-sdk/provider/package.json"}]},{"bom-ref":"pkg:npm/%40ai-sdk/provider-utils@4.0.27?package-id=f71eb29e81964317","type":"library","name":"@ai-sdk/provider-utils","version":"4.0.27","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@ai-sdk\\/provider-utils:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*","purl":"pkg:npm/%40ai-sdk/provider-utils@4.0.27","externalReferences":[{"url":"https://github.com/vercel/ai","type":"distribution"},{"url":"https://ai-sdk.dev/docs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/provider-utils:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/provider_utils:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/provider_utils:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai-sdk\\/provider:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai_sdk\\/provider:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vercel:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai-sdk\\/provider-utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@ai:\\@ai_sdk\\/provider_utils:4.0.27:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@ai-sdk/provider-utils/package.json"}]},{"bom-ref":"pkg:npm/%40babel/helper-string-parser@7.27.1?package-id=27b0de0facbfc672","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/helper-string-parser","version":"7.27.1","description":"A utility package to parse strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/helper-string-parser@7.27.1","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"},{"url":"https://babel.dev/docs/en/next/babel-helper-string-parser","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-string-parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string_parser:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_string:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper-string-parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper_string_parser:7.27.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/helper-string-parser/package.json"}]},{"bom-ref":"pkg:npm/%40babel/helper-validator-identifier@7.28.5?package-id=479dbd661d17b859","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/helper-validator-identifier","version":"7.28.5","description":"Validate identifier/keywords name","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/helper-validator-identifier@7.28.5","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-validator-identifier:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator_identifier:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper-validator:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper_validator:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@babel\\/helper:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper-validator-identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/helper_validator_identifier:7.28.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json"}]},{"bom-ref":"pkg:npm/%40babel/parser@7.29.3?package-id=f946fdff20133cb6","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/parser","version":"7.29.3","description":"A JavaScript parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/parser:\\@babel\\/parser:7.29.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/parser@7.29.3","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"},{"url":"https://babel.dev/docs/en/next/babel-parser","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/parser:7.29.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/parser/package.json"}]},{"bom-ref":"pkg:npm/%40babel/types@7.29.0?package-id=b6b729489b959534","type":"library","author":"The Babel Team (https://babel.dev/team)","name":"@babel/types","version":"7.29.0","description":"Babel Types is a Lodash-esque utility library for AST nodes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@babel\\/types:\\@babel\\/types:7.29.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40babel/types@7.29.0","externalReferences":[{"url":"https://github.com/babel/babel.git","type":"distribution"},{"url":"https://babel.dev/docs/en/next/babel-types","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:\\@babel\\/types:7.29.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@babel/types/package.json"}]},{"bom-ref":"pkg:npm/%40colors/colors@1.6.0?package-id=2aaa7cc50004f91b","type":"library","author":"DABH, DABH (https://github.com/DABH)","name":"@colors/colors","version":"1.6.0","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40colors/colors@1.6.0","externalReferences":[{"url":"http://github.com/DABH/colors.js.git","type":"distribution"},{"url":"https://github.com/DABH/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json"}]},{"bom-ref":"pkg:npm/%40colors/colors@1.6.0?package-id=3b8ecc6044fe8e57","type":"library","author":"DABH, DABH (https://github.com/DABH)","name":"@colors/colors","version":"1.6.0","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@colors\\/colors:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40colors/colors@1.6.0","externalReferences":[{"url":"http://github.com/DABH/colors.js.git","type":"distribution"},{"url":"https://github.com/DABH/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DABH:\\@colors\\/colors:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json"}]},{"bom-ref":"pkg:npm/%40dabh/diagnostics@2.0.8?package-id=8402a3ee9b2da555","type":"library","author":"Arnout Kazemier, Martijn Swaagman (https://github.com/swaagie), Jarrett Cruger (https://github.com/jcrugzz), Sevastos (https://github.com/sevastos)","name":"@dabh/diagnostics","version":"2.0.8","description":"Tools for debugging your node.js modules and event loop","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@dabh\\/diagnostics:\\@dabh\\/diagnostics:2.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/%40dabh/diagnostics@2.0.8","externalReferences":[{"url":"git://github.com/DABH/diagnostics.git","type":"distribution"},{"url":"https://github.com/DABH/diagnostics","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DABH:\\@dabh\\/diagnostics:2.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@dabh/diagnostics/package.json"}]},{"bom-ref":"pkg:npm/%40fontsource/roboto@5.2.10?package-id=f1e3cc681fc66fc0","type":"library","author":"Google Inc.","name":"@fontsource/roboto","version":"5.2.10","description":"Self-host the Roboto font in a neatly bundled NPM package.","licenses":[{"license":{"id":"OFL-1.1"}}],"cpe":"cpe:2.3:a:\\@fontsource\\/roboto:\\@fontsource\\/roboto:5.2.10:*:*:*:*:*:*:*","purl":"pkg:npm/%40fontsource/roboto@5.2.10","externalReferences":[{"url":"git+https://github.com/fontsource/font-files.git","type":"distribution"},{"url":"https://fontsource.org/fonts/roboto","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@fontsource/roboto/package.json"}]},{"bom-ref":"pkg:npm/%40gar/promisify@1.1.3?package-id=8e41d6aa1fe261a3","type":"library","author":"Gar <gar+npm@danger.computer>","name":"@gar/promisify","version":"1.1.3","description":"Promisify an entire class or object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@gar\\/promisify:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/%40gar/promisify@1.1.3","externalReferences":[{"url":"https://github.com/wraithgar/gar-promisify.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wraithgar:\\@gar\\/promisify:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@gar/promisify/package.json"}]},{"bom-ref":"pkg:npm/%40isaacs/cliui@8.0.2?package-id=1b734807f495fb6f","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"@isaacs/cliui","version":"8.0.2","description":"easily create complex multi-column command-line-interfaces","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@isaacs\\/cliui:\\@isaacs\\/cliui:8.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40isaacs/cliui@8.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/package.json"}]},{"bom-ref":"pkg:npm/%40isaacs/fs-minipass@4.0.1?package-id=0ab257647e45f4d4","type":"library","author":"Isaac Z. Schlueter","name":"@isaacs/fs-minipass","version":"4.0.1","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40isaacs/fs-minipass@4.0.1","externalReferences":[{"url":"https://github.com/npm/fs-minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs-minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs_minipass:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@isaacs\\/fs:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:\\@isaacs\\/fs-minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:\\@isaacs\\/fs_minipass:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/%40material/material-color-utilities@0.3.0?package-id=6720a0856054de8d","type":"library","author":"Material Eng","name":"@material/material-color-utilities","version":"0.3.0","description":"Algorithms and utilities that power the Material Design 3 (M3) color system, including choosing theme colors from images and creating tones of colors; all in a new color space.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@material\\/material-color-utilities:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40material/material-color-utilities@0.3.0","externalReferences":[{"url":"https://github.com/material-foundation/material-color-utilities.git","type":"distribution"},{"url":"https://github.com/material-foundation/material-color-utilities/tree/main/typescript","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material-color-utilities:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material_color_utilities:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material_color_utilities:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material-color:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material-color:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material_color:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material_color:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material-foundation:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material-foundation:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material:\\@material\\/material-color-utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@material\\/material:\\@material\\/material_color_utilities:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@material/material-color-utilities/package.json"}]},{"bom-ref":"pkg:npm/%40my-scope/package-a@0.0.0?package-id=e38f30a540597121","type":"library","name":"@my-scope/package-a","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@my-scope\\/package-a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40my-scope/package-a@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package-a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_a:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_a:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my-scope\\/package-a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my_scope\\/package_a:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json"}]},{"bom-ref":"pkg:npm/%40my-scope/package-b@0.0.0?package-id=7c30bf5441790ef5","type":"library","name":"@my-scope/package-b","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@my-scope\\/package-b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40my-scope/package-b@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package-b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_b:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package_b:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my-scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my_scope\\/package:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my-scope\\/package-b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@my:\\@my_scope\\/package_b:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json"}]},{"bom-ref":"pkg:npm/%40noble/curves@1.2.0?package-id=2a40db3b54912cbf","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/curves","version":"1.2.0","description":"Audited & minimal JS implementation of elliptic curve cryptography","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/curves:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/curves@1.2.0","externalReferences":[{"url":"https://github.com/paulmillr/noble-curves.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:paulmillr:\\@noble\\/curves:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@noble/curves/package.json"}]},{"bom-ref":"pkg:npm/%40noble/hashes@1.3.2?package-id=46670510cb133f58","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/hashes","version":"1.3.2","description":"Audited & minimal 0-dependency JS implementation of SHA2, SHA3, RIPEMD, BLAKE2/3, HMAC, HKDF, PBKDF2, Scrypt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/hashes@1.3.2","externalReferences":[{"url":"https://github.com/paulmillr/noble-hashes.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:paulmillr:\\@noble\\/hashes:1.3.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@noble/hashes/package.json"}]},{"bom-ref":"pkg:npm/%40noble/hashes@2.2.0?package-id=f3098e32ab08ad1a","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@noble/hashes","version":"2.2.0","description":"Audited & minimal 0-dependency JS implementation of SHA, RIPEMD, BLAKE, HMAC, HKDF, PBKDF & Scrypt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@noble\\/hashes:\\@noble\\/hashes:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40noble/hashes@2.2.0","externalReferences":[{"url":"git+https://github.com/paulmillr/noble-hashes.git","type":"distribution"},{"url":"https://paulmillr.com/noble/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/plugin-crypto-noble/node_modules/@noble/hashes/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/agent@3.0.0?package-id=114921a3f2bc9d12","type":"library","author":"GitHub Inc.","name":"@npmcli/agent","version":"3.0.0","description":"the http/https agent used by the npm cli","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/agent:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/agent@3.0.0","externalReferences":[{"url":"git+https://github.com/npm/agent.git","type":"distribution"},{"url":"https://github.com/npm/agent#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:\\@npmcli\\/agent:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/agent/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/fs@1.1.1?package-id=644572bbb1e01679","type":"library","author":"GitHub Inc.","name":"@npmcli/fs","version":"1.1.1","description":"filesystem utilities for the npm cli","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/fs@1.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/fs@4.0.0?package-id=2f7974422b4dc793","type":"library","author":"GitHub Inc.","name":"@npmcli/fs","version":"4.0.0","description":"filesystem utilities for the npm cli","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/fs:\\@npmcli\\/fs:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/fs@4.0.0","externalReferences":[{"url":"git+https://github.com/npm/fs.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/fs/package.json"}]},{"bom-ref":"pkg:npm/%40npmcli/move-file@1.1.2?package-id=a988a9e98434d4e0","type":"library","name":"@npmcli/move-file","version":"1.1.2","description":"move a file (fork of move-file)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40npmcli/move-file@1.1.2","externalReferences":[{"url":"git+https://github.com/npm/move-file","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move-file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move_file:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move-file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@npmcli\\/move:\\@npmcli\\/move_file:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/move-file/package.json"}]},{"bom-ref":"pkg:npm/%40opentelemetry/api@1.9.1?package-id=cec9eae229b431dd","type":"library","author":"OpenTelemetry Authors","name":"@opentelemetry/api","version":"1.9.1","description":"Public API for OpenTelemetry","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@opentelemetry\\/api:\\@opentelemetry\\/api:1.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40opentelemetry/api@1.9.1","externalReferences":[{"url":"https://github.com/open-telemetry/opentelemetry-js/tree/main/api","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:open-telemetry:\\@opentelemetry\\/api:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@opentelemetry/api/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/core@13.4.0?package-id=cbb29ecdd13a1687","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"@otplib/core","version":"13.4.0","description":"Core interfaces, types, and crypto abstraction for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/core:\\@otplib\\/core:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/core@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/core/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/hotp@13.4.0?package-id=9b8148ea6c71fed4","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"@otplib/hotp","version":"13.4.0","description":"RFC 4226 HOTP implementation for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/hotp:\\@otplib\\/hotp:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/hotp@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/hotp/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/plugin-base32-scure@13.4.0?package-id=a47960048d5c6e0f","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"@otplib/plugin-base32-scure","version":"13.4.0","description":"Base32 plugin for otplib using @scure/base","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/plugin-base32-scure:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/plugin-base32-scure@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-base32-scure:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_base32_scure:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_base32_scure:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-base32:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-base32:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_base32:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_base32:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-base32-scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_base32_scure:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/plugin-base32-scure/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/plugin-crypto-noble@13.4.0?package-id=4d1b6166fb37fae8","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"@otplib/plugin-crypto-noble","version":"13.4.0","description":"Pure JavaScript crypto implementation using noble-hashes for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/plugin-crypto-noble:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/plugin-crypto-noble@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-crypto-noble:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_crypto_noble:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_crypto_noble:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin-crypto:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin_crypto:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin-crypto-noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@otplib\\/plugin:\\@otplib\\/plugin_crypto_noble:13.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/plugin-crypto-noble/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/totp@13.4.0?package-id=a1c0314d0d8a9007","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"@otplib/totp","version":"13.4.0","description":"RFC 6238 TOTP implementation for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/totp:\\@otplib\\/totp:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/totp@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/totp/package.json"}]},{"bom-ref":"pkg:npm/%40otplib/uri@13.4.0?package-id=6133631980d96c3a","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"@otplib/uri","version":"13.4.0","description":"otpauth:// URI parsing and generation for otplib","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@otplib\\/uri:\\@otplib\\/uri:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40otplib/uri@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@otplib/uri/package.json"}]},{"bom-ref":"pkg:npm/%40pkgjs/parseargs@0.11.0?package-id=80ef1a2248d5a920","type":"library","name":"@pkgjs/parseargs","version":"0.11.0","description":"Polyfill of future proposal for `util.parseArgs()`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@pkgjs\\/parseargs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40pkgjs/parseargs@0.11.0","externalReferences":[{"url":"https://github.com/pkgjs/parseargs#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pkgjs:\\@pkgjs\\/parseargs:0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@pkgjs/parseargs/package.json"}]},{"bom-ref":"pkg:npm/%40scarf/scarf@1.4.0?package-id=19e6077d1014f2df","type":"library","author":"Scarf Systems","name":"@scarf/scarf","version":"1.4.0","description":"Scarf is like Google Analytics for your npm packages. Gain insights into how your packages are installed and used, and by which companies.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@scarf\\/scarf:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40scarf/scarf@1.4.0","externalReferences":[{"url":"git+https://github.com/scarf-sh/scarf-js.git","type":"distribution"},{"url":"https://github.com/scarf-sh/scarf-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:scarf-sh:\\@scarf\\/scarf:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scarf/scarf/package.json"}]},{"bom-ref":"pkg:npm/%40scure/base@2.2.0?package-id=ee108a8614147fd3","type":"library","author":"Paul Miller (https://paulmillr.com)","name":"@scure/base","version":"2.2.0","description":"Secure, audited & 0-dep implementation of base64, bech32, base58, base32 & base16","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@scure\\/base:\\@scure\\/base:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40scure/base@2.2.0","externalReferences":[{"url":"git+https://github.com/paulmillr/scure-base.git","type":"distribution"},{"url":"https://paulmillr.com/noble/#scure","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@scure/base/package.json"}]},{"bom-ref":"pkg:npm/%40sindresorhus/is@0.7.0?package-id=a29ebe9c01a24b05","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"@sindresorhus/is","version":"0.7.0","description":"Type check values: `is.string('🦄') //=> true`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@sindresorhus\\/is:\\@sindresorhus\\/is:0.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40sindresorhus/is@0.7.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@sindresorhus/is/package.json"}]},{"bom-ref":"pkg:npm/%40so-ric/colorspace@1.1.6?package-id=17777e0ca19ea47c","type":"library","author":"Arnout Kazemier","name":"@so-ric/colorspace","version":"1.1.6","description":"Generate HEX colors for a given namespace using color v5","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@so-ric\\/colorspace:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*","purl":"pkg:npm/%40so-ric/colorspace@1.1.6","externalReferences":[{"url":"https://github.com/so-ric/colorspace","type":"distribution"},{"url":"https://github.com/so-ric/colorspace","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@so-ric\\/colorspace:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@so_ric\\/colorspace:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@so_ric\\/colorspace:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:so-ric:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:so-ric:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@so:\\@so-ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@so:\\@so_ric\\/colorspace:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@so-ric/colorspace/package.json"}]},{"bom-ref":"pkg:npm/%40standard-schema/spec@1.1.0?package-id=e5e6f6143a3e5536","type":"library","author":"Colin McDonnell","name":"@standard-schema/spec","version":"1.1.0","description":"A family of specs for interoperable TypeScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@standard-schema\\/spec:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40standard-schema/spec@1.1.0","externalReferences":[{"url":"https://github.com/standard-schema/standard-schema","type":"distribution"},{"url":"https://standardschema.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@standard-schema\\/spec:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@standard_schema\\/spec:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@standard_schema\\/spec:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard-schema:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:standard-schema:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@standard:\\@standard-schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@standard:\\@standard_schema\\/spec:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@standard-schema/spec/package.json"}]},{"bom-ref":"pkg:npm/%40swc/helpers@0.3.17?package-id=079d0d4fdf762801","type":"library","author":"강동윤 <kdy1997.dev@gmail.com>","name":"@swc/helpers","version":"0.3.17","description":"External helpers for the swc project.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@swc\\/helpers:\\@swc\\/helpers:0.3.17:*:*:*:*:*:*:*","purl":"pkg:npm/%40swc/helpers@0.3.17","externalReferences":[{"url":"git+https://github.com/swc-project/swc.git","type":"distribution"},{"url":"https://swc.rs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@swc/helpers/package.json"}]},{"bom-ref":"pkg:npm/%40tokenizer/token@0.3.0?package-id=43352d2f6855caf1","type":"library","author":"Borewit (https://github.com/Borewit)","name":"@tokenizer/token","version":"0.3.0","description":"TypeScript definition for strtok3 token","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@tokenizer\\/token:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40tokenizer/token@0.3.0","externalReferences":[{"url":"https://github.com/Borewit/tokenizer-token.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:\\@tokenizer\\/token:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@tokenizer/token/package.json"}]},{"bom-ref":"pkg:npm/%40tootallnate/once@1.1.2?package-id=eeeda4243db3c868","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"@tootallnate/once","version":"1.1.2","description":"Creates a Promise that waits for a single event","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@tootallnate\\/once:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/%40tootallnate/once@1.1.2","externalReferences":[{"url":"git://github.com/TooTallNate/once.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:\\@tootallnate\\/once:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@tootallnate/once/package.json"}]},{"bom-ref":"pkg:npm/%40types/component-emitter@1.2.14?package-id=ae93160dfc27d07c","type":"library","author":"Peter Snider (https://github.com/psnider)","name":"@types/component-emitter","version":"1.2.14","description":"TypeScript definitions for component-emitter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/component-emitter@1.2.14","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/component-emitter","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component-emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component_emitter:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/component:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/component-emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/component_emitter:1.2.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/component-emitter/package.json"}]},{"bom-ref":"pkg:npm/%40types/cookie@0.4.1?package-id=1339467e13b5c752","type":"library","author":"Pine Mizune (https://github.com/pine), Piotr Błażejewicz (https://github.com/peterblazejewicz)","name":"@types/cookie","version":"0.4.1","description":"TypeScript definitions for cookie","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/cookie@0.4.1","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cookie","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/cookie:\\@types\\/cookie:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/cookie/package.json"}]},{"bom-ref":"pkg:npm/%40types/cors@2.8.19?package-id=bc4bb778990d4ea4","type":"library","author":"Alan Plum (https://github.com/pluma), Gaurav Sharma (https://github.com/gtpan77), Sebastian Beltran (https://github.com/bjohansebas)","name":"@types/cors","version":"2.8.19","description":"TypeScript definitions for cors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/cors@2.8.19","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/cors","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/cors:\\@types\\/cors:2.8.19:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/cors/package.json"}]},{"bom-ref":"pkg:npm/%40types/debug@4.1.13?package-id=b2c0dc194c1425e6","type":"library","author":"Seon-Wook Park (https://github.com/swook), Gal Talmor (https://github.com/galtalmor), John McLaughlin (https://github.com/zamb3zi), Brasten Sager (https://github.com/brasten), Nicolas Penin (https://github.com/npenin), Kristian Brünn (https://github.com/kristianmitk), Caleb Gregory (https://github.com/calebgregory)","name":"@types/debug","version":"4.1.13","description":"TypeScript definitions for debug","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/debug:4.1.13:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/debug@4.1.13","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/debug","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/debug:\\@types\\/debug:4.1.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/debug/package.json"}]},{"bom-ref":"pkg:npm/%40types/ms@2.1.0?package-id=495a18008d72fd0f","type":"library","author":"Zhiyuan Wang (https://github.com/danny8002)","name":"@types/ms","version":"2.1.0","description":"TypeScript definitions for ms","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/ms@2.1.0","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ms","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/ms:\\@types\\/ms:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/ms/package.json"}]},{"bom-ref":"pkg:npm/%40types/node@20.19.41?package-id=507abdbdc4dc5589","type":"library","author":"Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), David Junger (https://github.com/touffy), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Sebastian Silbermann (https://github.com/eps1lon), Wilco Bakker (https://github.com/WilcoBakker), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)","name":"@types/node","version":"20.19.41","description":"TypeScript definitions for node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/node:20.19.41:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/node@20.19.41","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/node:\\@types\\/node:20.19.41:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/node/package.json"}]},{"bom-ref":"pkg:npm/%40types/node@22.7.5?package-id=6fe716e8b0927a9d","type":"library","author":"Microsoft TypeScript (https://github.com/Microsoft), Alberto Schiabel (https://github.com/jkomyno), Alvis HT Tang (https://github.com/alvis), Andrew Makarov (https://github.com/r3nya), Benjamin Toueg (https://github.com/btoueg), Chigozirim C. (https://github.com/smac89), David Junger (https://github.com/touffy), Deividas Bakanas (https://github.com/DeividasBakanas), Eugene Y. Q. Shen (https://github.com/eyqs), Hannes Magnusson (https://github.com/Hannes-Magnusson-CK), Huw (https://github.com/hoo29), Kelvin Jin (https://github.com/kjin), Klaus Meinhardt (https://github.com/ajafff), Lishude (https://github.com/islishude), Mariusz Wiktorczyk (https://github.com/mwiktorczyk), Mohsen Azimi (https://github.com/mohsen1), Nikita Galkin (https://github.com/galkin), Parambir Singh (https://github.com/parambirs), Sebastian Silbermann (https://github.com/eps1lon), Thomas den Hollander (https://github.com/ThomasdenH), Wilco Bakker (https://github.com/WilcoBakker), wwwy3y3 (https://github.com/wwwy3y3), Samuel Ainsworth (https://github.com/samuela), Kyle Uehlein (https://github.com/kuehlein), Thanik Bhongbhibhat (https://github.com/bhongy), Marcin Kopacz (https://github.com/chyzwar), Trivikram Kamat (https://github.com/trivikr), Junxiao Shi (https://github.com/yoursunny), Ilia Baryshnikov (https://github.com/qwelias), ExE Boss (https://github.com/ExE-Boss), Piotr Błażejewicz (https://github.com/peterblazejewicz), Anna Henningsen (https://github.com/addaleax), Victor Perin (https://github.com/victorperin), Yongsheng Zhang (https://github.com/ZYSzys), NodeJS Contributors (https://github.com/NodeJS), Linus Unnebäck (https://github.com/LinusU), wafuwafu13 (https://github.com/wafuwafu13), Matteo Collina (https://github.com/mcollina), Dmitry Semigradsky (https://github.com/Semigradsky)","name":"@types/node","version":"22.7.5","description":"TypeScript definitions for node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:DefinitelyTyped:\\@types\\/node:22.7.5:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/node@22.7.5","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/node:\\@types\\/node:22.7.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json"}]},{"bom-ref":"pkg:npm/%40types/triple-beam@1.3.5?package-id=3e3be5c397de8382","type":"library","author":"Daniel Byrne (https://github.com/danwbyrne)","name":"@types/triple-beam","version":"1.3.5","description":"TypeScript definitions for triple-beam","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/triple-beam@1.3.5","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/triple-beam","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple-beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple_beam:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple:\\@types\\/triple-beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:\\@types\\/triple:\\@types\\/triple_beam:1.3.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/triple-beam/package.json"}]},{"bom-ref":"pkg:npm/%40types/validator@13.15.10?package-id=361105c50aa24065","type":"library","author":"tgfjt (https://github.com/tgfjt), Ilya Mochalov (https://github.com/chrootsu), Ayman Nedjmeddine (https://github.com/IOAyman), Louay Alakkad (https://github.com/louy), Bonggyun Lee (https://github.com/deptno), Naoto Yokoyama (https://github.com/builtinnya), Philipp Katz (https://github.com/qqilihq), Jace Warren (https://github.com/keatz55), Vlad Poluch (https://github.com/vlapo), Piotr Błażejewicz (https://github.com/peterblazejewicz), Matteo Nista (https://github.com/Mattewn99), Daniel Freire (https://github.com/dcfreire), Rik Smale (https://github.com/WikiRik)","name":"@types/validator","version":"13.15.10","description":"TypeScript definitions for validator","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:\\@types\\/validator:\\@types\\/validator:13.15.10:*:*:*:*:*:*:*","purl":"pkg:npm/%40types/validator@13.15.10","externalReferences":[{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped.git","type":"distribution"},{"url":"https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/validator","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:DefinitelyTyped:\\@types\\/validator:13.15.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@types/validator/package.json"}]},{"bom-ref":"pkg:npm/%40vercel/oidc@3.2.0?package-id=aa9ae944ca729d3f","type":"library","name":"@vercel/oidc","version":"3.2.0","description":"Runtime OIDC helpers intended for use with Vercel Functions","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:\\@vercel\\/oidc:\\@vercel\\/oidc:3.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/%40vercel/oidc@3.2.0","externalReferences":[{"url":"git+https://github.com/vercel/vercel.git","type":"distribution"},{"url":"https://vercel.com","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@vercel/oidc/package.json"}]},{"bom-ref":"pkg:npm/abbrev@1.1.1?package-id=7797aed52ef29847","type":"library","author":"Isaac Z. Schlueter <i@izs.me>","name":"abbrev","version":"1.1.1","description":"Like ruby's abbrev module, but in js","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:abbrev:abbrev:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/abbrev@1.1.1","externalReferences":[{"url":"http://github.com/isaacs/abbrev-js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:abbrev:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/abbrev/package.json"}]},{"bom-ref":"pkg:npm/abbrev@3.0.1?package-id=bfcf5eaa5daa3133","type":"library","author":"GitHub Inc.","name":"abbrev","version":"3.0.1","description":"Like ruby's abbrev module, but in js","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:abbrev:abbrev:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/abbrev@3.0.1","externalReferences":[{"url":"git+https://github.com/npm/abbrev-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json"}]},{"bom-ref":"pkg:npm/abort-controller@3.0.0?package-id=7832aa1cacf310b2","type":"library","author":"Toru Nagashima (https://github.com/mysticatea)","name":"abort-controller","version":"3.0.0","description":"An implementation of WHATWG AbortController interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:abort-controller:abort-controller:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/abort-controller@3.0.0","externalReferences":[{"url":"git+https://github.com/mysticatea/abort-controller.git","type":"distribution"},{"url":"https://github.com/mysticatea/abort-controller#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort-controller:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort_controller:abort-controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort_controller:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:abort-controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort:abort-controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:abort:abort_controller:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/abort-controller/package.json"}]},{"bom-ref":"pkg:npm/accepts@1.3.8?package-id=fe1f2ff03fb9475c","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"accepts","version":"1.3.8","description":"Higher-level content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:accepts:accepts:1.3.8:*:*:*:*:*:*:*","purl":"pkg:npm/accepts@1.3.8","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/accepts/package.json"}]},{"bom-ref":"pkg:npm/acorn@7.4.1?package-id=c0f7127acbceb420","type":"library","author":"Marijn Haverbeke <marijnh@gmail.com>, Ingvar Stepanyan <me@rreverser.com>, Adrian Heine","name":"acorn","version":"7.4.1","description":"ECMAScript parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:acornjs:acorn:7.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/acorn@7.4.1","externalReferences":[{"url":"https://github.com/acornjs/acorn.git","type":"distribution"},{"url":"https://github.com/acornjs/acorn","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:acorn:acorn:7.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json"}]},{"bom-ref":"pkg:npm/aes-js@4.0.0-beta.5?package-id=6ad4b0036eebc3a0","type":"library","author":"Richard Moore <me@ricmoo.com>","name":"aes-js","version":"4.0.0-beta.5","description":"A pure JavaScript implementation of the AES block cipher and all common modes of operation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:aes-js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*","purl":"pkg:npm/aes-js@4.0.0-beta.5","externalReferences":[{"url":"git://github.com/ricmoo/aes-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes-js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes_js:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes_js:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ricmoo:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ricmoo:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes:aes-js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aes:aes_js:4.0.0-beta.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/aes-js/package.json"}]},{"bom-ref":"pkg:npm/agent-base@6.0.2?package-id=51a9723b91dc3bb1","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"agent-base","version":"6.0.2","description":"Turn a function into an `http.Agent` instance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:agent-base:6.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/agent-base@6.0.2","externalReferences":[{"url":"git://github.com/TooTallNate/node-agent-base.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent-base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent-base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent-base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent_base:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/agent-base/package.json"}]},{"bom-ref":"pkg:npm/agent-base@7.1.4?package-id=0dfda7c3870cf8f4","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"agent-base","version":"7.1.4","description":"Turn a function into an `http.Agent` instance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:agent-base:7.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/agent-base@7.1.4","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent-base:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent_base:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent-base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:agent:agent_base:7.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/agent-base/package.json"}]},{"bom-ref":"pkg:npm/agentkeepalive@4.6.0?package-id=c6a7724321f5beae","type":"library","author":"fengmk2 <fengmk2@gmail.com> (https://github.com/fengmk2)","name":"agentkeepalive","version":"4.6.0","description":"Missing keepalive http.Agent","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:agentkeepalive:agentkeepalive:4.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/agentkeepalive@4.6.0","externalReferences":[{"url":"git://github.com/node-modules/agentkeepalive.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-modules:agentkeepalive:4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/agentkeepalive/package.json"}]},{"bom-ref":"pkg:npm/aggregate-error@3.1.0?package-id=7cedce27af4fa8d6","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"aggregate-error","version":"3.1.0","description":"Create an error from multiple errors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:aggregate-error:aggregate-error:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/aggregate-error@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate-error:aggregate_error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate_error:aggregate-error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate_error:aggregate_error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate:aggregate-error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:aggregate:aggregate_error:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/aggregate-error/package.json"}]},{"bom-ref":"pkg:npm/ai@6.0.180?package-id=46d6f2a266f873e3","type":"library","name":"ai","version":"6.0.180","description":"AI SDK by Vercel - build apps like ChatGPT, Claude, Gemini, and more with a single interface for any model using the Vercel AI Gateway or go direct to OpenAI, Anthropic, Google, or any other model provider.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:vercel:ai:6.0.180:*:*:*:*:*:*:*","purl":"pkg:npm/ai@6.0.180","externalReferences":[{"url":"https://github.com/vercel/ai","type":"distribution"},{"url":"https://ai-sdk.dev/docs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ai:ai:6.0.180:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ai/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@2.1.1?package-id=ba5607392e56dee9","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)","name":"ansi-regex","version":"2.1.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@2.1.1?package-id=2b280fc78a93d0b1","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)","name":"ansi-regex","version":"2.1.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@2.1.1?package-id=b93db3f55b850b14","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)","name":"ansi-regex","version":"2.1.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:2.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@3.0.1?package-id=dddd120589f7009b","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"ansi-regex","version":"3.0.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:3.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@5.0.1?package-id=215b7da2acde9858","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"ansi-regex","version":"5.0.1","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:5.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@5.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@6.2.2?package-id=836bae2338a59355","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"ansi-regex","version":"6.2.2","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@6.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-regex@6.2.2?package-id=02cdd6725ca2a358","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"ansi-regex","version":"6.2.2","description":"Regular expression for matching ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-regex_project:ansi-regex:6.2.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/ansi-regex@6.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@2.2.1?package-id=65b4c3eb14b71ee6","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com)","name":"ansi-styles","version":"2.2.1","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:2.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@2.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@3.2.1?package-id=f879ff424c2ec284","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"ansi-styles","version":"3.2.1","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:3.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@3.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:3.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@4.3.0?package-id=c3f3679aac65318b","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"ansi-styles","version":"4.3.0","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@4.3.0?package-id=c365b03d53f8ca80","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"ansi-styles","version":"4.3.0","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@4.3.0?package-id=f3dee5a49bb85e72","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"ansi-styles","version":"4.3.0","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@4.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/ansi-styles@6.2.3?package-id=c9c45ead032034a0","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"ansi-styles","version":"6.2.3","description":"ANSI escape codes for styling strings in the terminal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ansi-styles:ansi-styles:6.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/ansi-styles@6.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi-styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi-styles:6.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi_styles:ansi_styles:6.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi-styles:6.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ansi:ansi_styles:6.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json"}]},{"bom-ref":"pkg:npm/append-field@1.0.0?package-id=40d1f9967f309c48","type":"library","author":"Linus Unnebäck <linus@folkdatorn.se>","name":"append-field","version":"1.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:append-field:append-field:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/append-field@1.0.0","externalReferences":[{"url":"http://github.com/LinusU/node-append-field.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:append-field:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append_field:append-field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append_field:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:LinusU:append-field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:LinusU:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append:append-field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:append:append_field:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/append-field/package.json"}]},{"bom-ref":"pkg:npm/aproba@1.2.0?package-id=81de4b22dbb401d0","type":"library","author":"Rebecca Turner <me@re-becca.org>","name":"aproba","version":"1.2.0","description":"A ridiculously light-weight argument validator (now browser friendly)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:aproba:aproba:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/aproba@1.2.0","externalReferences":[{"url":"https://github.com/iarna/aproba","type":"distribution"},{"url":"https://github.com/iarna/aproba","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:aproba:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/aproba/package.json"}]},{"bom-ref":"pkg:npm/archive-type@4.0.0?package-id=3fb8ce78823b4311","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"archive-type","version":"4.0.0","description":"Detect the archive type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archive-type:archive-type:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/archive-type@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive-type:archive_type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive_type:archive-type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive_type:archive_type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive:archive-type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archive:archive_type:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archive-type/package.json"}]},{"bom-ref":"pkg:npm/archiver@1.3.0?package-id=dec4b5088a113d49","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"archiver","version":"1.3.0","description":"a streaming interface for archive generation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archiverjs:archiver:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/archiver@1.3.0","externalReferences":[{"url":"https://github.com/archiverjs/node-archiver.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-archiver","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver:archiver:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/package.json"}]},{"bom-ref":"pkg:npm/archiver-utils@1.3.0?package-id=35ab1a4a9ad1f907","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"archiver-utils","version":"1.3.0","description":"utility functions for archiver","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archiver-utils:archiver-utils:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/archiver-utils@1.3.0","externalReferences":[{"url":"https://github.com/archiverjs/archiver-utils.git","type":"distribution"},{"url":"https://github.com/archiverjs/archiver-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver-utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver_utils:archiver-utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver_utils:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:archiver-utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver:archiver-utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiver:archiver_utils:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver-utils/package.json"}]},{"bom-ref":"pkg:npm/are-we-there-yet@1.1.7?package-id=38e39a5c3788e5c4","type":"library","author":"Rebecca Turner (http://re-becca.org)","name":"are-we-there-yet","version":"1.1.7","description":"Keep track of the overall completion of many disparate processes","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:are-we-there-yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/are-we-there-yet@1.1.7","externalReferences":[{"url":"https://github.com/iarna/are-we-there-yet.git","type":"distribution"},{"url":"https://github.com/iarna/are-we-there-yet","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there-yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are-we-there-yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are_we_there_yet:1.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/are-we-there-yet/package.json"}]},{"bom-ref":"pkg:npm/are-we-there-yet@3.0.1?package-id=a1e5dbdcb445cc0b","type":"library","author":"GitHub Inc.","name":"are-we-there-yet","version":"3.0.1","description":"Keep track of the overall completion of many disparate processes","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:are-we-there-yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/are-we-there-yet@3.0.1","externalReferences":[{"url":"https://github.com/npm/are-we-there-yet.git","type":"distribution"},{"url":"https://github.com/npm/are-we-there-yet","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there-yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there_yet:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we-there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we_there:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are-we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are_we:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:are:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:are-we-there-yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:are_we_there_yet:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json"}]},{"bom-ref":"pkg:npm/argparse@1.0.10?package-id=d60313d70eaae47d","type":"library","author":"Eugene Shkuropat, Paul Jacobson","name":"argparse","version":"1.0.10","description":"Very powerful CLI arguments parser. Native port of argparse - python's options parsing library","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:argparse:argparse:1.0.10:*:*:*:*:*:*:*","purl":"pkg:npm/argparse@1.0.10","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/argparse/package.json"}]},{"bom-ref":"pkg:npm/array-buffer-byte-length@1.0.2?package-id=f2867470e7b27597","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"array-buffer-byte-length","version":"1.0.2","description":"Get the byte length of an ArrayBuffer, even in engines without a `.byteLength` method.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:array-buffer-byte-length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/array-buffer-byte-length@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/array-buffer-byte-length.git","type":"distribution"},{"url":"https://github.com/inspect-js/array-buffer-byte-length#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer-byte-length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte_length:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte_length:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer-byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer-byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer_byte:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_buffer:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-buffer-byte-length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_buffer_byte_length:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-buffer-byte-length/package.json"}]},{"bom-ref":"pkg:npm/array-each@1.0.1?package-id=7aadb2fc6095104c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"array-each","version":"1.0.1","description":"Loop over each item in an array and call the given function on every element.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:array-each:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/array-each@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/array-each","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-each:array-each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-each:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_each:array-each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_each:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_each:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-each/package.json"}]},{"bom-ref":"pkg:npm/array-flatten@1.1.1?package-id=5041c141565d0833","type":"library","author":"Blake Embrey <hello@blakeembrey.com> (http://blakeembrey.me)","name":"array-flatten","version":"1.1.1","description":"Flatten an array of nested arrays into a single flat array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:array-flatten:array-flatten:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/array-flatten@1.1.1","externalReferences":[{"url":"git://github.com/blakeembrey/array-flatten.git","type":"distribution"},{"url":"https://github.com/blakeembrey/array-flatten","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_flatten:array-flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_flatten:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:blakeembrey:array-flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:blakeembrey:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_flatten:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-flatten/package.json"}]},{"bom-ref":"pkg:npm/array-slice@1.1.0?package-id=a261f10f751ab469","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"array-slice","version":"1.1.0","description":"Array-slice method. Slices `array` from the `start` index up to, but not including, the `end` index.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:array-slice:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/array-slice@1.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/array-slice","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-slice:array-slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array-slice:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_slice:array-slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array_slice:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array-slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:array:array_slice:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/array-slice/package.json"}]},{"bom-ref":"pkg:npm/asap@2.0.6?package-id=1c54e38011c51e5b","type":"library","name":"asap","version":"2.0.6","description":"High-priority task queue for Node.js and browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:kriskowal:asap:2.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/asap@2.0.6","externalReferences":[{"url":"https://github.com/kriskowal/asap.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:asap:asap:2.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/asap/package.json"}]},{"bom-ref":"pkg:npm/assert-never@1.4.0?package-id=e57cc97cb7061a4e","type":"library","author":"Daniel Lytkin <dan.lytkin@gmail.com>","name":"assert-never","version":"1.4.0","description":"Helper function for exhaustive checks of discriminated unions in TypeScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:assert-never:assert-never:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/assert-never@1.4.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert-never:assert_never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert_never:assert-never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert_never:assert_never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert:assert-never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:assert:assert_never:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/assert-never/package.json"}]},{"bom-ref":"pkg:npm/async@2.6.4?package-id=50f2f4c26ff2ccab","type":"library","author":"Caolan McMahon","name":"async","version":"2.6.4","description":"Higher-order functions and common patterns for asynchronous code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/async@2.6.4","externalReferences":[{"url":"https://github.com/caolan/async.git","type":"distribution"},{"url":"https://caolan.github.io/async/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/node_modules/async/package.json"}]},{"bom-ref":"pkg:npm/async@2.6.4?package-id=5aa21ddd678e2c5a","type":"library","author":"Caolan McMahon","name":"async","version":"2.6.4","description":"Higher-order functions and common patterns for asynchronous code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:caolan:async:2.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/async@2.6.4","externalReferences":[{"url":"https://github.com/caolan/async.git","type":"distribution"},{"url":"https://caolan.github.io/async/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:async:async:2.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/portscanner/node_modules/async/package.json"}]},{"bom-ref":"pkg:npm/async@3.2.6?package-id=6753e2a5837ba461","type":"library","author":"Caolan McMahon","name":"async","version":"3.2.6","description":"Higher-order functions and common patterns for asynchronous code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:caolan:async:3.2.6:*:*:*:*:*:*:*","purl":"pkg:npm/async@3.2.6","externalReferences":[{"url":"https://github.com/caolan/async.git","type":"distribution"},{"url":"https://caolan.github.io/async/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:async:async:3.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/async/package.json"}]},{"bom-ref":"pkg:npm/at-least-node@1.0.0?package-id=dd9e19320bbf0929","type":"library","author":"Ryan Zimmerman <opensrc@ryanzim.com>","name":"at-least-node","version":"1.0.0","description":"Lightweight Node.js version sniffing/comparison","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:at-least-node:at-least-node:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/at-least-node@1.0.0","externalReferences":[{"url":"git+https://github.com/RyanZim/at-least-node.git","type":"distribution"},{"url":"https://github.com/RyanZim/at-least-node#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:at-least-node:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least_node:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least_node:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at-least:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at-least:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at_least:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:RyanZim:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:RyanZim:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at:at-least-node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:at:at_least_node:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/at-least-node/package.json"}]},{"bom-ref":"pkg:npm/available-typed-arrays@1.0.7?package-id=91c13e4c18804052","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"available-typed-arrays","version":"1.0.7","description":"Returns an array of Typed Array names that are available in the current environment","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:available-typed-arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/available-typed-arrays@1.0.7","externalReferences":[{"url":"git+https://github.com/inspect-js/available-typed-arrays.git","type":"distribution"},{"url":"https://github.com/inspect-js/available-typed-arrays#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:available-typed-arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed_arrays:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed_arrays:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available-typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available-typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available_typed:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available:available-typed-arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:available:available_typed_arrays:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/available-typed-arrays/package.json"}]},{"bom-ref":"pkg:npm/babel-walk@3.0.0-canary-5?package-id=716281520579424d","type":"library","author":"Timothy Gu <timothygu99@gmail.com>","name":"babel-walk","version":"3.0.0-canary-5","description":"Lightweight Babel AST traversal","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:babel-walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*","purl":"pkg:npm/babel-walk@3.0.0-canary-5","externalReferences":[{"url":"https://github.com/pugjs/babel-walk.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel-walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel_walk:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel_walk:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:babel:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:babel-walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:babel_walk:3.0.0-canary-5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/babel-walk/package.json"}]},{"bom-ref":"pkg:npm/balanced-match@1.0.2?package-id=956658d078dc7d57","type":"library","author":"Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)","name":"balanced-match","version":"1.0.2","description":"Match balanced character pairs, like \"{\" and \"}\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:balanced-match:balanced-match:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/balanced-match@1.0.2","externalReferences":[{"url":"git://github.com/juliangruber/balanced-match.git","type":"distribution"},{"url":"https://github.com/juliangruber/balanced-match","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced-match:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced_match:balanced-match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced_match:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:balanced-match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juliangruber:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced:balanced-match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:balanced:balanced_match:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/balanced-match/package.json"}]},{"bom-ref":"pkg:deb/debian/base-files@13.8%2Bdeb13u4?arch=arm64&distro=debian-13.4&package-id=f8b3c51eba0a9b91","type":"library","publisher":"Santiago Vila <sanvila@debian.org>","name":"base-files","version":"13.8+deb13u4","licenses":[{"license":{"id":"GPL-2.0-or-later"}},{"license":{"name":"GPL"}},{"license":{"name":"verbatim"}}],"cpe":"cpe:2.3:a:base-files:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*","purl":"pkg:deb/debian/base-files@13.8%2Bdeb13u4?arch=arm64&distro=debian-13.4","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:base-files:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base_files:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base_files:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base:base-files:13.8\\+deb13u4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base:base_files:13.8\\+deb13u4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:9b08b42cbe9b17150d47303e371925824ba20b40210c774af877ce56690b0b8d"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/base-files"},{"name":"syft:location:1:layerID","value":"sha256:9b08b42cbe9b17150d47303e371925824ba20b40210c774af877ce56690b0b8d"},{"name":"syft:location:1:path","value":"/usr/share/doc/base-files/copyright"},{"name":"syft:location:2:layerID","value":"sha256:9b08b42cbe9b17150d47303e371925824ba20b40210c774af877ce56690b0b8d"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/base-files.md5sums"},{"name":"syft:metadata:installedSize","value":"348"}]},{"bom-ref":"pkg:npm/base64-arraybuffer@0.1.4?package-id=7b4063d10599bfae","type":"library","author":"Niklas von Hertzen <niklasvh@gmail.com> (http://hertzen.com)","name":"base64-arraybuffer","version":"0.1.4","description":"Encode/decode base64 data into ArrayBuffers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:base64-arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/base64-arraybuffer@0.1.4","externalReferences":[{"url":"https://github.com/niklasvh/base64-arraybuffer","type":"distribution"},{"url":"https://github.com/niklasvh/base64-arraybuffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_arraybuffer:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_arraybuffer:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:niklasvh:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:niklasvh:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64-arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64_arraybuffer:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64-arraybuffer/package.json"}]},{"bom-ref":"pkg:npm/base64-js@0.0.8?package-id=6f1f1a7796cb63d0","type":"library","author":"T. Jameson Little <t.jameson.little@gmail.com>","name":"base64-js","version":"0.0.8","description":"Base64 encoding/decoding in pure JS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beatgammit:base64-js:0.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/base64-js@0.0.8","externalReferences":[{"url":"git://github.com/beatgammit/base64-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beatgammit:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64-js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64-js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64-js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64_js:0.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json"}]},{"bom-ref":"pkg:npm/base64-js@1.5.1?package-id=c493a9a41b36da0b","type":"library","author":"T. Jameson Little <t.jameson.little@gmail.com>","name":"base64-js","version":"1.5.1","description":"Base64 encoding/decoding in pure JS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beatgammit:base64-js:1.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/base64-js@1.5.1","externalReferences":[{"url":"git://github.com/beatgammit/base64-js.git","type":"distribution"},{"url":"https://github.com/beatgammit/base64-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beatgammit:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64-js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64-js:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64-js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64_js:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64-js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64:base64_js:1.5.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64-js/package.json"}]},{"bom-ref":"pkg:npm/base64id@2.0.0?package-id=d1750eb90689f1a4","type":"library","author":"Kristian Faeldt <faeldt_kristian@cyberagent.co.jp>","name":"base64id","version":"2.0.0","description":"Generates a base64 id","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:base64id:base64id:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/base64id@2.0.0","externalReferences":[{"url":"https://github.com/faeldt/base64id.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:faeldt:base64id:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64id/package.json"}]},{"bom-ref":"pkg:npm/base64url@0.0.6?package-id=2f8a9d6c7656ba10","type":"library","author":"Brian J Brennan","name":"base64url","version":"0.0.6","description":"For encoding to/from base64urls","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:base64url:0.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/base64url@0.0.6","externalReferences":[{"url":"git://github.com/brianloveswords/base64url.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:base64url:base64url:0.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/base64url/package.json"}]},{"bom-ref":"pkg:npm/basic-auth@2.0.1?package-id=0ed4c1f07b04e9ef","type":"library","name":"basic-auth","version":"2.0.1","description":"node.js basic auth parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:basic-auth:basic-auth:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/basic-auth@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic-auth:basic_auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic_auth:basic-auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic_auth:basic_auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic:basic-auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:basic:basic_auth:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/basic-auth/package.json"}]},{"bom-ref":"pkg:npm/batch@0.6.1?package-id=344c43aaf43bb8dc","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>","name":"batch","version":"0.6.1","description":"Simple async batch with concurrency control and progress reporting.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:visionmedia:batch:0.6.1:*:*:*:*:*:*:*","purl":"pkg:npm/batch@0.6.1","externalReferences":[{"url":"https://github.com/visionmedia/batch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:batch:batch:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/batch/package.json"}]},{"bom-ref":"pkg:npm/baz?package-id=99a08ef6ddd74ba7","type":"library","name":"baz","version":"UNKNOWN","cpe":"cpe:2.3:a:baz:baz:*:*:*:*:*:*:*:*","purl":"pkg:npm/baz","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/baz/package.json"}]},{"bom-ref":"pkg:npm/beep-boop@1.2.3?package-id=ac8f35c9bc6d4edc","type":"library","name":"beep-boop","version":"1.2.3","cpe":"cpe:2.3:a:beep-boop:beep-boop:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/beep-boop@1.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep-boop:beep_boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep_boop:beep-boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep_boop:beep_boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep:beep-boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:beep:beep_boop:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/github-from-package/example/package.json"}]},{"bom-ref":"pkg:npm/beercss@4.0.21?package-id=22ede90a702de103","type":"library","author":"Everton and Leonardo","name":"beercss","version":"4.0.21","description":"Build material design interfaces in record time... without stress for devs.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beercss:beercss:4.0.21:*:*:*:*:*:*:*","purl":"pkg:npm/beercss@4.0.21","externalReferences":[{"url":"git+https://github.com/beercss/beercss.git","type":"distribution"},{"url":"https://www.beercss.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/beercss/package.json"}]},{"bom-ref":"pkg:npm/big-integer@1.6.52?package-id=6efaee3d2e9117ff","type":"library","author":"Peter Olson <peter.e.c.olson+npm@gmail.com>","name":"big-integer","version":"1.6.52","description":"An arbitrary length integer library for Javascript","licenses":[{"license":{"id":"Unlicense"}}],"cpe":"cpe:2.3:a:big-integer:big-integer:1.6.52:*:*:*:*:*:*:*","purl":"pkg:npm/big-integer@1.6.52","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:big-integer:big_integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big_integer:big-integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big_integer:big_integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big:big-integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:big:big_integer:1.6.52:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/big-integer/package.json"}]},{"bom-ref":"pkg:npm/binary@0.3.0?package-id=aac28aacec14e6f2","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"binary","version":"0.3.0","description":"Unpack multibyte binary values from buffers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:binary:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/binary@0.3.0","externalReferences":[{"url":"http://github.com/substack/node-binary.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:binary:binary:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/binary/package.json"}]},{"bom-ref":"pkg:npm/bindings@1.5.0?package-id=848e919a5348c76e","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)","name":"bindings","version":"1.5.0","description":"Helper module for loading your native module's .node file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:TooTallNate:bindings:1.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/bindings@1.5.0","externalReferences":[{"url":"git://github.com/TooTallNate/node-bindings.git","type":"distribution"},{"url":"https://github.com/TooTallNate/node-bindings","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bindings:bindings:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bindings/package.json"}]},{"bom-ref":"pkg:npm/bintrees@1.0.2?package-id=db53f4ebaee4e2cf","type":"library","author":"Vadim Graboys <dimva13@gmail.com>","name":"bintrees","version":"1.0.2","description":"Binary Search Trees","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bintrees:bintrees:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/bintrees@1.0.2","externalReferences":[{"url":"git://github.com/vadimg/js_bintrees.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:vadimg:bintrees:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bintrees/package.json"}]},{"bom-ref":"pkg:npm/bl@1.2.3?package-id=1d71c68896a44c86","type":"library","author":"Rod Vagg <rod@vagg.org> (https://github.com/rvagg), Matteo Collina <matteo.collina@gmail.com> (https://github.com/mcollina), Jarett Cruger <jcrugzz@gmail.com> (https://github.com/jcrugzz)","name":"bl","version":"1.2.3","description":"Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:rvagg:bl:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/bl@1.2.3","externalReferences":[{"url":"https://github.com/rvagg/bl.git","type":"distribution"},{"url":"https://github.com/rvagg/bl","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bl:bl:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bl/package.json"}]},{"bom-ref":"pkg:npm/bl@4.1.0?package-id=846a0edd607229fd","type":"library","author":"Rod Vagg <rod@vagg.org> (https://github.com/rvagg), Matteo Collina <matteo.collina@gmail.com> (https://github.com/mcollina), Jarett Cruger <jcrugzz@gmail.com> (https://github.com/jcrugzz)","name":"bl","version":"4.1.0","description":"Buffer List: collect buffers and access with a standard readable Buffer interface, streamable too!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:rvagg:bl:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/bl@4.1.0","externalReferences":[{"url":"https://github.com/rvagg/bl.git","type":"distribution"},{"url":"https://github.com/rvagg/bl","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:bl:bl:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json"}]},{"bom-ref":"pkg:npm/bluebird@3.4.7?package-id=441b568aa058ddd4","type":"library","author":"Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)","name":"bluebird","version":"3.4.7","description":"Full featured Promises/A+ implementation with exceptionally good performance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bluebirdjs:bluebird:3.4.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/bluebird@3.4.7","externalReferences":[{"url":"git://github.com/petkaantonov/bluebird.git","type":"distribution"},{"url":"https://github.com/petkaantonov/bluebird","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json"}]},{"bom-ref":"pkg:npm/bluebird@3.7.2?package-id=45ec017cc93f373c","type":"library","author":"Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)","name":"bluebird","version":"3.7.2","description":"Full featured Promises/A+ implementation with exceptionally good performance","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bluebirdjs:bluebird:3.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/bluebird@3.7.2","externalReferences":[{"url":"git://github.com/petkaantonov/bluebird.git","type":"distribution"},{"url":"https://github.com/petkaantonov/bluebird","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bluebird/package.json"}]},{"bom-ref":"pkg:npm/body-parser@1.20.5?package-id=ddc8c87ed1c65da3","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"body-parser","version":"1.20.5","description":"Node.js body parsing middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:openjsf:body-parser:1.20.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/body-parser@1.20.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/body-parser/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@1.1.14?package-id=0255070021979c9b","type":"library","author":"Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)","name":"brace-expansion","version":"1.1.14","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:brace-expansion:1.1.14:*:*:*:*:node.js:*:*","purl":"pkg:npm/brace-expansion@1.1.14","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/brace-expansion@2.1.0?package-id=93130034832e0228","type":"library","author":"Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)","name":"brace-expansion","version":"2.1.0","description":"Brace expansion as known from sh/bash","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:brace-expansion:2.1.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/brace-expansion@2.1.0","externalReferences":[{"url":"git://github.com/juliangruber/brace-expansion.git","type":"distribution"},{"url":"https://github.com/juliangruber/brace-expansion","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/glob/node_modules/brace-expansion/package.json"}]},{"bom-ref":"pkg:npm/braces@3.0.3?package-id=b57d894966249598","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Elan Shanker (https://github.com/es128), Eugene Sharygin (https://github.com/eush77), hemanth.hm (http://h3manth.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"braces","version":"3.0.3","description":"Bash-like brace expansion, implemented in JavaScript. Safer than other brace expansion libs, with complete support for the Bash 4.3 braces specification, without sacrificing speed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:braces_project:braces:3.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/braces@3.0.3","externalReferences":[{"url":"https://github.com/micromatch/braces","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:braces:3.0.3:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/braces/package.json"}]},{"bom-ref":"pkg:npm/brotli@1.3.3?package-id=470bc485996d4bbe","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"brotli","version":"1.3.3","description":"A port of the Brotli compression algorithm as used in WOFF2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:brotli:1.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/brotli@1.3.3","externalReferences":[{"url":"https://github.com/devongovett/brotli.js.git","type":"distribution"},{"url":"https://github.com/devongovett/brotli.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brotli:brotli:1.3.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/brotli/package.json"}]},{"bom-ref":"pkg:npm/browser_field?package-id=0ec800aec91252a5","type":"library","name":"browser_field","version":"UNKNOWN","cpe":"cpe:2.3:a:browser-field:browser-field:*:*:*:*:*:*:*:*","purl":"pkg:npm/browser_field","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser-field:browser_field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser_field:browser-field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser_field:browser_field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser:browser-field:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browser:browser_field:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json"}]},{"bom-ref":"pkg:npm/browserify-zlib@0.2.0?package-id=b5aa99aae4fb60df","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"browserify-zlib","version":"0.2.0","description":"Full zlib module for the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:browserify-zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/browserify-zlib@0.2.0","externalReferences":[{"url":"git+https://github.com/devongovett/browserify-zlib.git","type":"distribution"},{"url":"https://github.com/devongovett/browserify-zlib","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify-zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify_zlib:browserify-zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify_zlib:browserify_zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:browserify-zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:browserify_zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify:browserify-zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify:browserify_zlib:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/browserify-zlib/package.json"}]},{"bom-ref":"pkg:npm/buffer@5.7.1?package-id=8160d61272f16fc2","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>, James Halliday <mail@substack.net>","name":"buffer","version":"5.7.1","description":"Node.js Buffer API, for the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer:buffer:5.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/buffer@5.7.1","externalReferences":[{"url":"git://github.com/feross/buffer.git","type":"distribution"},{"url":"https://github.com/feross/buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:buffer:5.7.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer/package.json"}]},{"bom-ref":"pkg:npm/buffer@6.0.3?package-id=b34920cb2184e6ad","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>, James Halliday <mail@substack.net>","name":"buffer","version":"6.0.3","description":"Node.js Buffer API, for the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer:buffer:6.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/buffer@6.0.3","externalReferences":[{"url":"git://github.com/feross/buffer.git","type":"distribution"},{"url":"https://github.com/feross/buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:buffer:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json"}]},{"bom-ref":"pkg:npm/buffer-alloc@1.2.0?package-id=0215db4a4aa6cd05","type":"library","name":"buffer-alloc","version":"1.2.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-alloc@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer-alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer_alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_alloc:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-alloc/package.json"}]},{"bom-ref":"pkg:npm/buffer-alloc-unsafe@1.1.0?package-id=72525885a05217f9","type":"library","name":"buffer-alloc-unsafe","version":"1.1.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-alloc-unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-alloc-unsafe@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc-unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc_unsafe:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc_unsafe:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_alloc:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-alloc-unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_alloc_unsafe:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json"}]},{"bom-ref":"pkg:npm/buffer-crc32@0.2.13?package-id=018e707480d9a394","type":"library","author":"Brian J. Brennan <brianloveswords@gmail.com>, Vladimir Kuznetsov","name":"buffer-crc32","version":"0.2.13","description":"A pure javascript CRC32 algorithm that plays nice with binary data","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:buffer-crc32:0.2.13:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-crc32@0.2.13","externalReferences":[{"url":"git://github.com/brianloveswords/buffer-crc32.git","type":"distribution"},{"url":"https://github.com/brianloveswords/buffer-crc32","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:brianloveswords:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_crc32:buffer-crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_crc32:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_crc32:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-crc32/package.json"}]},{"bom-ref":"pkg:npm/buffer-fill@1.0.0?package-id=b5b4b05d23ef0590","type":"library","name":"buffer-fill","version":"1.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-fill:buffer-fill:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-fill@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_fill:buffer-fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_fill:buffer_fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_fill:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-fill/package.json"}]},{"bom-ref":"pkg:npm/buffer-from@1.1.2?package-id=d2869a97005ddd30","type":"library","name":"buffer-from","version":"1.1.2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-from:buffer-from:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-from@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-from:buffer_from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_from:buffer-from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_from:buffer_from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_from:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-from/package.json"}]},{"bom-ref":"pkg:npm/buffer-indexof-polyfill@1.0.2?package-id=08bc6bd9a895200f","type":"library","author":"https://github.com/sarosia","name":"buffer-indexof-polyfill","version":"1.0.2","description":"This is a polyfill for Buffer#indexOf introduced in NodeJS 4.0.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:buffer-indexof-polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/buffer-indexof-polyfill@1.0.2","externalReferences":[{"url":"git+https://github.com/sarosia/buffer-indexof-polyfill.git","type":"distribution"},{"url":"https://github.com/sarosia/buffer-indexof-polyfill#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-indexof-polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof_polyfill:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof_polyfill:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer-indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer_indexof:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sarosia:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sarosia:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer-indexof-polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffer:buffer_indexof_polyfill:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json"}]},{"bom-ref":"pkg:npm/buffers@0.1.1?package-id=fd60bbd17e6803d8","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"buffers","version":"0.1.1","description":"Treat a collection of Buffers as a single contiguous partially mutable Buffer.","cpe":"cpe:2.3:a:substack:buffers:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/buffers@0.1.1","externalReferences":[{"url":"http://github.com/substack/node-buffers.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:buffers:buffers:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/buffers/package.json"}]},{"bom-ref":"pkg:npm/busboy@1.6.0?package-id=72b84630ff8aade7","type":"library","author":"Brian White <mscdex@mscdex.net>","name":"busboy","version":"1.6.0","description":"A streaming parser for HTML form data for node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:busboy:busboy:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/busboy@1.6.0","externalReferences":[{"url":"http://github.com/mscdex/busboy.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mscdex:busboy:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/busboy/package.json"}]},{"bom-ref":"pkg:npm/bytes@3.1.2?package-id=1d0cce2090c4dc09","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Jed Watson <jed.watson@me.com>, Théo FIDRY <theo.fidry@gmail.com>","name":"bytes","version":"3.1.2","description":"Utility to parse a string bytes to bytes and vice-versa","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:bytes:bytes:3.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/bytes@3.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/bytes/package.json"}]},{"bom-ref":"pkg:npm/cacache@15.3.0?package-id=f5c0681a2e946e2d","type":"library","name":"cacache","version":"15.3.0","description":"Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:cacache:cacache:15.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/cacache@15.3.0","externalReferences":[{"url":"https://github.com/npm/cacache","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:cacache:15.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json"}]},{"bom-ref":"pkg:npm/cacache@19.0.1?package-id=ace0af3ce948f36b","type":"library","author":"GitHub Inc.","name":"cacache","version":"19.0.1","description":"Fast, fault-tolerant, cross-platform, disk-based, data-agnostic, content-addressable cache.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:cacache:cacache:19.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/cacache@19.0.1","externalReferences":[{"url":"git+https://github.com/npm/cacache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacache/package.json"}]},{"bom-ref":"pkg:npm/cacheable-request@2.1.4?package-id=346e1627c1f72870","type":"library","author":"Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)","name":"cacheable-request","version":"2.1.4","description":"Wrap native HTTP requests with RFC compliant cache support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cacheable-request:cacheable-request:2.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/cacheable-request@2.1.4","externalReferences":[{"url":"git+https://github.com/lukechilds/cacheable-request.git","type":"distribution"},{"url":"https://github.com/lukechilds/cacheable-request","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable-request:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable_request:cacheable-request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable_request:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:cacheable-request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable:cacheable-request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cacheable:cacheable_request:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/package.json"}]},{"bom-ref":"pkg:npm/call-bind@1.0.9?package-id=dbc99e7ef70e6653","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"call-bind","version":"1.0.9","description":"Robustly `.call.bind()` a function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:call-bind:call-bind:1.0.9:*:*:*:*:*:*:*","purl":"pkg:npm/call-bind@1.0.9","externalReferences":[{"url":"git+https://github.com/ljharb/call-bind.git","type":"distribution"},{"url":"https://github.com/ljharb/call-bind#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind:call_bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call-bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call_bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call-bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call_bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call-bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call_bind:1.0.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/call-bind/package.json"}]},{"bom-ref":"pkg:npm/call-bind-apply-helpers@1.0.2?package-id=0d18b02f5378691f","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"call-bind-apply-helpers","version":"1.0.2","description":"Helper functions around Function call/apply/bind, for use in `call-bind`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:call-bind-apply-helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/call-bind-apply-helpers@1.0.2","externalReferences":[{"url":"git+https://github.com/ljharb/call-bind-apply-helpers.git","type":"distribution"},{"url":"https://github.com/ljharb/call-bind-apply-helpers#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind-apply-helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply_helpers:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply_helpers:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind-apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind-apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind_apply:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bind:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call-bind-apply-helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call_bind_apply_helpers:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/call-bind-apply-helpers/package.json"}]},{"bom-ref":"pkg:npm/call-bound@1.0.4?package-id=44af6e189fe32d87","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"call-bound","version":"1.0.4","description":"Robust call-bound JavaScript intrinsics, using `call-bind` and `get-intrinsic`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:call-bound:call-bound:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/call-bound@1.0.4","externalReferences":[{"url":"git+https://github.com/ljharb/call-bound.git","type":"distribution"},{"url":"https://github.com/ljharb/call-bound#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:call-bound:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bound:call-bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call_bound:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call-bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call-bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:call:call_bound:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/call-bound/package.json"}]},{"bom-ref":"pkg:npm/camelcase@5.3.1?package-id=92e4f8e8e365d6ef","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"camelcase","version":"5.3.1","description":"Convert a dash/dot/underscore/space separated string to camelCase or PascalCase: `foo-bar` → `fooBar`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:camelcase:camelcase:5.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/camelcase@5.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/camelcase/package.json"}]},{"bom-ref":"pkg:npm/chainsaw@0.1.0?package-id=6e4c3d3622249d54","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"chainsaw","version":"0.1.0","description":"Build chainable fluent interfaces the easy way... with a freakin' chainsaw!","licenses":[{"license":{"name":"MIT/X11"}}],"cpe":"cpe:2.3:a:chainsaw:chainsaw:0.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/chainsaw@0.1.0","externalReferences":[{"url":"http://github.com/substack/node-chainsaw.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:chainsaw:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chainsaw/package.json"}]},{"bom-ref":"pkg:npm/chalk@1.1.3?package-id=af9826c69b6847f8","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)","name":"chalk","version":"1.1.3","description":"Terminal string styling done right. Much color.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chalk:chalk:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/chalk@1.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json"}]},{"bom-ref":"pkg:npm/chalk@2.4.2?package-id=015bdd0e54562d25","type":"library","name":"chalk","version":"2.4.2","description":"Terminal string styling done right","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chalk:chalk:2.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/chalk@2.4.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chalk/package.json"}]},{"bom-ref":"pkg:npm/chalk@4.1.2?package-id=7fe24d7225fc8b9a","type":"library","name":"chalk","version":"4.1.2","description":"Terminal string styling done right","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:chalk:chalk:4.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/chalk@4.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json"}]},{"bom-ref":"pkg:npm/character-parser@2.2.0?package-id=34bd9ccc72e70b6f","type":"library","author":"ForbesLindesay","name":"character-parser","version":"2.2.0","description":"Parse JavaScript one character at a time to look for snippets in Templates.  This is not a validator, it's just designed to allow you to have sections of JavaScript delimited by brackets robustly.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:character-parser:character-parser:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/character-parser@2.2.0","externalReferences":[{"url":"https://github.com/ForbesLindesay/character-parser.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:character-parser:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character_parser:character-parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character_parser:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ForbesLindesay:character-parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ForbesLindesay:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character:character-parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:character:character_parser:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/character-parser/package.json"}]},{"bom-ref":"pkg:npm/check-dependencies@2.0.0?package-id=3b4717bda67c27ad","type":"library","author":"Michał Gołębiowski-Owczarek <m.goleb@gmail.com>","name":"check-dependencies","version":"2.0.0","description":"Checks if currently installed npm dependencies are installed in the exact same versions that are specified in package.json","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:check-dependencies:check-dependencies:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/check-dependencies@2.0.0","externalReferences":[{"url":"https://github.com/mgol/check-dependencies.git","type":"distribution"},{"url":"https://github.com/mgol/check-dependencies","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-dependencies:check_dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_dependencies:check-dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_dependencies:check_dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check-dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check_dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mgol:check-dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mgol:check_dependencies:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/check-dependencies/package.json"}]},{"bom-ref":"pkg:npm/check-types@6.0.0?package-id=85b9eff83ffcd831","type":"library","author":"Phil Booth <pmbooth@gmail.com> (https://github.com/philbooth)","name":"check-types","version":"6.0.0","description":"A little library for asserting types and values.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:check-types:check-types:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/check-types@6.0.0","externalReferences":[{"url":"https://github.com/philbooth/check-types.js.git","type":"distribution"},{"url":"https://github.com/philbooth/check-types.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:check-types:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_types:check-types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check_types:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:philbooth:check-types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:philbooth:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check-types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:check:check_types:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/check-types/package.json"}]},{"bom-ref":"pkg:npm/chownr@1.1.4?package-id=7ebcfb2902378122","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"chownr","version":"1.1.4","description":"like `chown -R`","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@1.1.4","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/chownr@1.1.4?package-id=671f64716b19d5fb","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"chownr","version":"1.1.4","description":"like `chown -R`","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:chownr:chownr:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@1.1.4","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/chownr@2.0.0?package-id=3189617deb2bc884","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"chownr","version":"2.0.0","description":"like `chown -R`","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:chownr:chownr:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@2.0.0","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/chownr@3.0.0?package-id=fffff6468e7930c0","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"chownr","version":"3.0.0","description":"like `chown -R`","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:chownr:chownr:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/chownr@3.0.0","externalReferences":[{"url":"git://github.com/isaacs/chownr.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:chownr:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chownr/package.json"}]},{"bom-ref":"pkg:npm/clarinet@0.12.6?package-id=6cef1d3c36e6024e","type":"library","author":"Nuno Job <nunojobpinto@gmail.com> (http://nunojob.com/), Jann Horn (https://github.com/thejh), Justin Makeig <jmpublic+github@makeig.com> (http://www.audiblepop.com), Roly Fentanes (http://about.me/roly), John Lancaster (http://jlank.com)","name":"clarinet","version":"0.12.6","description":"SAX based evented streaming JSON parser in JavaScript (browser and node)","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:clarinet:clarinet:0.12.6:*:*:*:*:*:*:*","purl":"pkg:npm/clarinet@0.12.6","externalReferences":[{"url":"http://github.com/dscape/clarinet.git","type":"distribution"},{"url":"https://github.com/dscape/clarinet","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dscape:clarinet:0.12.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clarinet/package.json"}]},{"bom-ref":"pkg:npm/clean-stack@2.2.0?package-id=08eaf1d1a1378cc5","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"clean-stack","version":"2.2.0","description":"Clean up error stack traces","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clean-stack:clean-stack:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/clean-stack@2.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean-stack:clean_stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean_stack:clean-stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean_stack:clean_stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean:clean-stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clean:clean_stack:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clean-stack/package.json"}]},{"bom-ref":"pkg:npm/cliui@6.0.0?package-id=6fb115e3b5d5d3f2","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"cliui","version":"6.0.0","description":"easily create complex multi-column command-line-interfaces","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:cliui:cliui:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/cliui@6.0.0","externalReferences":[{"url":"http://github.com/yargs/cliui.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:cliui:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/cliui/package.json"}]},{"bom-ref":"pkg:npm/clone@2.1.2?package-id=080e255664d33bc7","type":"library","author":"Paul Vorbach <paul@vorba.ch> (http://paul.vorba.ch/), Blake Miner <miner.blake@gmail.com> (http://www.blakeminer.com/), Tian You <axqd001@gmail.com> (http://blog.axqd.net/), George Stagas <gstagas@gmail.com> (http://stagas.com/), Tobiasz Cudnik <tobiasz.cudnik@gmail.com> (https://github.com/TobiaszCudnik), Pavel Lang <langpavel@phpskelet.org> (https://github.com/langpavel), Dan MacTough (http://yabfog.com/), w1nk (https://github.com/w1nk), Hugh Kennedy (http://twitter.com/hughskennedy), Dustin Diaz (http://dustindiaz.com), Ilya Shaisultanov (https://github.com/diversario), Nathan MacInnes <nathan@macinn.es> (http://macinn.es/), Benjamin E. Coe <ben@npmjs.com> (https://twitter.com/benjamincoe), Nathan Zadoks (https://github.com/nathan7), Róbert Oroszi <robert+gh@oroszi.net> (https://github.com/oroce), Aurélio A. Heckert (http://softwarelivre.org/aurium), Guy Ellis (http://www.guyellisrocks.com/), fscherwi (https://fscherwi.github.io), rictic (https://github.com/rictic), Martin Jurča (https://github.com/jurca), Misery Lee <miserylee@foxmail.com> (https://github.com/miserylee), Clemens Wolff (https://github.com/c-w)","name":"clone","version":"2.1.2","description":"deep cloning of objects and arrays","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clone:clone:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/clone@2.1.2","externalReferences":[{"url":"git://github.com/pvorb/node-clone.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pvorb:clone:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clone/package.json"}]},{"bom-ref":"pkg:npm/clone-response@1.0.2?package-id=1ca687973f79cd5a","type":"library","author":"Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)","name":"clone-response","version":"1.0.2","description":"Clone a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:clone-response:clone-response:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/clone-response@1.0.2","externalReferences":[{"url":"git+https://github.com/lukechilds/clone-response.git","type":"distribution"},{"url":"https://github.com/lukechilds/clone-response","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone-response:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone_response:clone-response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone_response:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:clone-response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone:clone-response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:clone:clone_response:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/clone-response/package.json"}]},{"bom-ref":"pkg:npm/code-point-at@1.1.0?package-id=15db8f5283662b54","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"code-point-at","version":"1.1.0","description":"ES2015 `String#codePointAt()` ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:code-point-at:code-point-at:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/code-point-at@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:code-point-at:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point_at:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point_at:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code-point:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code-point:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code_point:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code:code-point-at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:code:code_point_at:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/code-point-at/package.json"}]},{"bom-ref":"pkg:npm/color@5.0.3?package-id=3402b3c6598fe1f0","type":"library","author":"Josh Junon <josh@junon.me>, Heather Arthur <fayearthur@gmail.com>, Maxime Thirouin","name":"color","version":"5.0.3","description":"Color conversion and manipulation with CSS string support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color:color:5.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/color@5.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color/package.json"}]},{"bom-ref":"pkg:npm/color-convert@1.9.3?package-id=832fbb197a382df6","type":"library","author":"Heather Arthur <fayearthur@gmail.com>","name":"color-convert","version":"1.9.3","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:1.9.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@1.9.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:1.9.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@2.0.1?package-id=ad73ceb607fdd321","type":"library","author":"Heather Arthur <fayearthur@gmail.com>","name":"color-convert","version":"2.0.1","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@2.0.1?package-id=c216a258a2dd7fdf","type":"library","author":"Heather Arthur <fayearthur@gmail.com>","name":"color-convert","version":"2.0.1","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@2.0.1?package-id=d7906a8074d4b4f9","type":"library","author":"Heather Arthur <fayearthur@gmail.com>","name":"color-convert","version":"2.0.1","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-convert@3.1.3?package-id=77239f07f827fd54","type":"library","author":"Josh Junon <josh@junon.me>, Heather Arthur <fayearthur@gmail.com>","name":"color-convert","version":"3.1.3","description":"Plain color conversion functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-convert:color-convert:3.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-convert@3.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-convert:color_convert:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color-convert:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_convert:color_convert:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-convert:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_convert:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color/node_modules/color-convert/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.3?package-id=92662d8a3adbe0c9","type":"library","author":"DY <dfcreative@gmail.com>","name":"color-name","version":"1.1.3","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.3","externalReferences":[{"url":"https://github.com/dfcreative/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dfcreative:color-name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dfcreative:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.4?package-id=a184510682ce4734","type":"library","author":"DY <dfcreative@gmail.com>","name":"color-name","version":"1.1.4","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.4?package-id=a80b99ad61e48555","type":"library","author":"DY <dfcreative@gmail.com>","name":"color-name","version":"1.1.4","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@1.1.4?package-id=01c750f52978cfc6","type":"library","author":"DY <dfcreative@gmail.com>","name":"color-name","version":"1.1.4","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@1.1.4","externalReferences":[{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@2.1.0?package-id=c912833a0dc0f66b","type":"library","author":"Dmitry Iv <dfcreative@gmail.com>","name":"color-name","version":"2.1.0","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@2.1.0","externalReferences":[{"url":"http://github.com/colorjs/color-name.git","type":"distribution"},{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-string/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-name@2.1.0?package-id=ccb5c4e0781c9f6b","type":"library","author":"Dmitry Iv <dfcreative@gmail.com>","name":"color-name","version":"2.1.0","description":"A list of color names and its values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-name:color-name:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/color-name@2.1.0","externalReferences":[{"url":"http://github.com/colorjs/color-name.git","type":"distribution"},{"url":"https://github.com/colorjs/color-name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-name:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color-name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_name:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color-name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:colorjs:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_name:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color/node_modules/color-name/package.json"}]},{"bom-ref":"pkg:npm/color-string@2.1.4?package-id=fd7a5e418139965b","type":"library","author":"Josh Junon (https://github.com/qix-), Maxime Thirouin, Dyma Ywanov <dfcreative@gmail.com>, Heather Arthur <fayearthur@gmail.com>, LitoMore (https://github.com/LitoMore)","name":"color-string","version":"2.1.4","description":"Parser and generator for CSS color strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:color-string_project:color-string:2.1.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/color-string@2.1.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-string/package.json"}]},{"bom-ref":"pkg:npm/color-support@1.1.3?package-id=a1e232528ce637f4","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"color-support","version":"1.1.3","description":"A module which will endeavor to guess your terminal's level of color support.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:color-support:color-support:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/color-support@1.1.3","externalReferences":[{"url":"git+https://github.com/isaacs/color-support.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:color-support:color_support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_support:color-support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color_support:color_support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color-support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:color:color_support:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/color-support/package.json"}]},{"bom-ref":"pkg:npm/colors@1.1.2?package-id=774e316934f12a96","type":"library","author":"Marak Squires","name":"colors","version":"1.1.2","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:colors:colors:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/colors@1.1.2","externalReferences":[{"url":"http://github.com/Marak/colors.js.git","type":"distribution"},{"url":"https://github.com/Marak/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Marak:colors:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json"}]},{"bom-ref":"pkg:npm/colors@1.4.0?package-id=ba9f99e8572f2682","type":"library","author":"Marak Squires, DABH (https://github.com/DABH)","name":"colors","version":"1.4.0","description":"get colors in your node.js console","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:colors:colors:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/colors@1.4.0","externalReferences":[{"url":"http://github.com/Marak/colors.js.git","type":"distribution"},{"url":"https://github.com/Marak/colors.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:Marak:colors:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/colors/package.json"}]},{"bom-ref":"pkg:npm/commander@2.20.3?package-id=23da7748c749bc68","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>","name":"commander","version":"2.20.3","description":"the complete solution for node.js command-line programs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*","purl":"pkg:npm/commander@2.20.3","externalReferences":[{"url":"https://github.com/tj/commander.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json"}]},{"bom-ref":"pkg:npm/commander@2.20.3?package-id=3facda85b5f59f2a","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>","name":"commander","version":"2.20.3","description":"the complete solution for node.js command-line programs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:commander:commander:2.20.3:*:*:*:*:*:*:*","purl":"pkg:npm/commander@2.20.3","externalReferences":[{"url":"https://github.com/tj/commander.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tj:commander:2.20.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json"}]},{"bom-ref":"pkg:npm/component-emitter@1.3.1?package-id=ebc8491ac18b63ae","type":"library","name":"component-emitter","version":"1.3.1","description":"Event emitter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:component-emitter:component-emitter:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/component-emitter@1.3.1","externalReferences":[{"url":"https://github.com/sindresorhus/component-emitter.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:component-emitter:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_emitter:component-emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_emitter:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sindresorhus:component-emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sindresorhus:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component-emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component_emitter:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/component-emitter/package.json"}]},{"bom-ref":"pkg:npm/component-type@1.2.1?package-id=e91a1227114ad372","type":"library","name":"component-type","version":"1.2.1","description":"Cross-browser type assertions (less broken typeof)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:component-type:component-type:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/component-type@1.2.1","externalReferences":[{"url":"https://github.com/component/type.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:component-type:component_type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_type:component-type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component_type:component_type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component-type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:component:component_type:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/component-type/package.json"}]},{"bom-ref":"pkg:npm/compress-commons@1.2.2?package-id=798bc97add5e6f68","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"compress-commons","version":"1.2.2","description":"a library that defines a common interface for working with archive formats within node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:compress-commons:compress-commons:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/compress-commons@1.2.2","externalReferences":[{"url":"https://github.com/archiverjs/node-compress-commons.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-compress-commons","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress-commons:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress_commons:compress-commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress_commons:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:compress-commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress:compress-commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:compress:compress_commons:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compress-commons/package.json"}]},{"bom-ref":"pkg:npm/compressible@2.0.18?package-id=d33659b98b525c44","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su)","name":"compressible","version":"2.0.18","description":"Compressible Content-Type / mime checking","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:compressible:compressible:2.0.18:*:*:*:*:*:*:*","purl":"pkg:npm/compressible@2.0.18","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compressible/package.json"}]},{"bom-ref":"pkg:npm/compression@1.8.1?package-id=828f0284d303f177","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"compression","version":"1.8.1","description":"Node.js compression middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:compression:compression:1.8.1:*:*:*:*:*:*:*","purl":"pkg:npm/compression@1.8.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/compression/package.json"}]},{"bom-ref":"pkg:npm/concat-map@0.0.1?package-id=e899cd35e0ecfcf6","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"concat-map","version":"0.0.1","description":"concatenative mapdashery","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:concat-map:concat-map:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/concat-map@0.0.1","externalReferences":[{"url":"git://github.com/substack/node-concat-map.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat-map:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_map:concat-map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_map:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:concat-map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat-map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat_map:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/concat-map/package.json"}]},{"bom-ref":"pkg:npm/concat-stream@1.6.2?package-id=3cf686e52af98b9c","type":"library","author":"Max Ogden <max@maxogden.com>","name":"concat-stream","version":"1.6.2","description":"writable stream that concatenates strings or binary data and calls a callback with the result","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:concat-stream:concat-stream:1.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/concat-stream@1.6.2","externalReferences":[{"url":"http://github.com/maxogden/concat-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat-stream:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_stream:concat-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat_stream:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:concat-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:concat:concat_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/concat-stream/package.json"}]},{"bom-ref":"pkg:npm/config@3.3.12?package-id=f5d30e88e089520d","type":"library","author":"Loren West <open_source@lorenwest.com>","name":"config","version":"3.3.12","description":"Configuration control for production node deployments","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-config:config:3.3.12:*:*:*:*:*:*:*","purl":"pkg:npm/config@3.3.12","externalReferences":[{"url":"http://github.com/node-config/node-config.git","type":"distribution"},{"url":"http://github.com/node-config/node-config.git","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:config:config:3.3.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/config/package.json"}]},{"bom-ref":"pkg:npm/console-control-strings@1.1.0?package-id=62af6322c8da5d46","type":"library","author":"Rebecca Turner <me@re-becca.org> (http://re-becca.org/)","name":"console-control-strings","version":"1.1.0","description":"A library of cross-platform tested terminal/console command strings for doing things like color and cursor positioning.  This is a subset of both ansi and vt100.  All control codes included work on both Windows & Unix-like OSes, except where noted.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:console-control-strings:console-control-strings:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/console-control-strings@1.1.0","externalReferences":[{"url":"https://github.com/iarna/console-control-strings","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:console-control-strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control_strings:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control_strings:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console-control:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console-control:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console_control:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:console:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:console-control-strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:console_control_strings:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/console-control-strings/package.json"}]},{"bom-ref":"pkg:npm/constantinople@4.0.1?package-id=64ecabe801d13657","type":"library","author":"ForbesLindesay","name":"constantinople","version":"4.0.1","description":"Determine whether a JavaScript expression evaluates to a constant","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ForbesLindesay:constantinople:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/constantinople@4.0.1","externalReferences":[{"url":"https://github.com/ForbesLindesay/constantinople.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:constantinople:constantinople:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/constantinople/package.json"}]},{"bom-ref":"pkg:npm/content-disposition@0.5.4?package-id=6d99ffbaf9a3dbf2","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"content-disposition","version":"0.5.4","description":"Create and parse Content-Disposition header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:content-disposition:content-disposition:0.5.4:*:*:*:*:*:*:*","purl":"pkg:npm/content-disposition@0.5.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:content-disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_disposition:content-disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_disposition:content_disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content-disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content_disposition:0.5.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/content-disposition/package.json"}]},{"bom-ref":"pkg:npm/content-type@1.0.5?package-id=1e680466175b93f0","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"content-type","version":"1.0.5","description":"Create and parse HTTP Content-Type header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:content-type:content-type:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/content-type@1.0.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:content-type:content_type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_type:content-type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content_type:content_type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content-type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:content:content_type:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/content-type/package.json"}]},{"bom-ref":"pkg:npm/cookie@0.4.2?package-id=299182936c2fe78a","type":"library","author":"Roman Shtylman <shtylman@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>","name":"cookie","version":"0.4.2","description":"HTTP server cookie parsing and serialization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie:cookie:0.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/cookie@0.4.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json"}]},{"bom-ref":"pkg:npm/cookie@0.7.2?package-id=f30613fbb68ad643","type":"library","author":"Roman Shtylman <shtylman@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>","name":"cookie","version":"0.7.2","description":"HTTP server cookie parsing and serialization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie:cookie:0.7.2:*:*:*:*:*:*:*","purl":"pkg:npm/cookie@0.7.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookie/package.json"}]},{"bom-ref":"pkg:npm/cookie-parser@1.4.7?package-id=52b0adc8ff09f017","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>","name":"cookie-parser","version":"1.4.7","description":"Parse HTTP request cookies","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie-parser:cookie-parser:1.4.7:*:*:*:*:*:*:*","purl":"pkg:npm/cookie-parser@1.4.7","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie-parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie_parser:cookie-parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie_parser:cookie_parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie:cookie-parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cookie:cookie_parser:1.4.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookie-parser/package.json"}]},{"bom-ref":"pkg:npm/cookie-signature@1.0.6?package-id=f7961879936cc1c0","type":"library","author":"TJ Holowaychuk <tj@learnboost.com>","name":"cookie-signature","version":"1.0.6","description":"Sign and unsign cookies","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookie-signature_project:cookie-signature:1.0.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/cookie-signature@1.0.6","externalReferences":[{"url":"https://github.com/visionmedia/node-cookie-signature.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookie-signature/package.json"}]},{"bom-ref":"pkg:npm/cookieconsent@3.1.1?package-id=bb40a8bd1a8c4f47","type":"library","author":"Osano, Inc., a Public Benefit Corporation","name":"cookieconsent","version":"3.1.1","description":"Osano cookie consent tool.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cookieconsent:cookieconsent:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/cookieconsent@3.1.1","externalReferences":[{"url":"https://github.com/osano/cookieconsent.git","type":"distribution"},{"url":"http://cookieconsent.osano.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:osano:cookieconsent:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cookieconsent/package.json"}]},{"bom-ref":"pkg:npm/core-util-is@1.0.2?package-id=36ced86f8d381680","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"core-util-is","version":"1.0.2","description":"The `util.is*` functions introduced in Node v0.12.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:core-util-is:core-util-is:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/core-util-is@1.0.2","externalReferences":[{"url":"git://github.com/isaacs/core-util-is","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:core-util-is:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util_is:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util_is:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core-util:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core-util:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core_util:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core-util-is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:core:core_util_is:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/core-util-is/package.json"}]},{"bom-ref":"pkg:npm/cors@2.8.6?package-id=28cd483ddf972fcf","type":"library","author":"Troy Goode <troygoode@gmail.com> (https://github.com/troygoode/)","name":"cors","version":"2.8.6","description":"Node.js CORS middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cors:cors:2.8.6:*:*:*:*:*:*:*","purl":"pkg:npm/cors@2.8.6","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cors/package.json"}]},{"bom-ref":"pkg:npm/crc@3.8.0?package-id=5e060917a7b152aa","type":"library","author":"Alex Gorbatchev (https://github.com/alexgorbatchev)","name":"crc","version":"3.8.0","description":"Module for calculating Cyclic Redundancy Check (CRC) for Node.js and the Browser.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:alexgorbatchev:crc:3.8.0:*:*:*:*:*:*:*","purl":"pkg:npm/crc@3.8.0","externalReferences":[{"url":"git://github.com/alexgorbatchev/node-crc.git","type":"distribution"},{"url":"https://github.com/alexgorbatchev/node-crc","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc:crc:3.8.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crc/package.json"}]},{"bom-ref":"pkg:npm/crc32-stream@2.0.0?package-id=828196a2c6a9e027","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"crc32-stream","version":"2.0.0","description":"a streaming CRC32 checksumer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:crc32-stream:crc32-stream:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/crc32-stream@2.0.0","externalReferences":[{"url":"https://github.com/archiverjs/node-crc32-stream.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-crc32-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32-stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32_stream:crc32-stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32_stream:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:crc32-stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32:crc32-stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crc32:crc32_stream:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crc32-stream/package.json"}]},{"bom-ref":"pkg:npm/cross-spawn@7.0.6?package-id=1b99c2dc3022043f","type":"library","author":"André Cruz <andre@moxy.studio>","name":"cross-spawn","version":"7.0.6","description":"Cross platform child_process#spawn and child_process#spawnSync","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cross-spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/cross-spawn@7.0.6","externalReferences":[{"url":"https://github.com/moxystudio/node-cross-spawn","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross-spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_spawn:cross-spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross_spawn:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moxystudio:cross-spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moxystudio:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross:cross-spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cross:cross_spawn:7.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cross-spawn/package.json"}]},{"bom-ref":"pkg:npm/crypto-js@3.3.0?package-id=c00a8b8b043aae72","type":"library","author":"Evan Vosberg (http://github.com/evanvosberg)","name":"crypto-js","version":"3.3.0","description":"JavaScript library of crypto standards.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:crypto-js:crypto-js:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/crypto-js@3.3.0","externalReferences":[{"url":"http://github.com/brix/crypto-js.git","type":"distribution"},{"url":"http://github.com/brix/crypto-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto-js:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto_js:crypto-js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto_js:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto:crypto-js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:crypto:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brix:crypto-js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brix:crypto_js:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/crypto-js/package.json"}]},{"bom-ref":"pkg:npm/dateformat@4.6.3?package-id=a64626d34d414995","type":"library","author":"Steven Levithan, Steven Levithan, Felix Geisendörfer <felix@debuggable.com>, Christoph Tavan <dev@tavan.de>, Jon Schlinkert (https://github.com/jonschlinkert), Felix Geisendörfer <felix@debuggable.com>","name":"dateformat","version":"4.6.3","description":"A node.js package for Steven Levithan's excellent dateFormat() function.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dateformat:dateformat:4.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/dateformat@4.6.3","externalReferences":[{"url":"https://github.com/felixge/node-dateformat.git","type":"distribution"},{"url":"https://github.com/felixge/node-dateformat","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:felixge:dateformat:4.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dateformat/package.json"}]},{"bom-ref":"pkg:npm/debug@2.6.9?package-id=10669af3063683d1","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"2.6.9","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:2.6.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@2.6.9","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@3.2.7?package-id=264ab504b40249b9","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"3.2.7","description":"small debugging utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:3.2.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@3.2.7","externalReferences":[{"url":"git://github.com/visionmedia/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/needle/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.3.7?package-id=22ca8deef5f297f6","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.3.7","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.3.7","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.3.7?package-id=e7f20fd9a328a043","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.3.7","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.3.7","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io-parser/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.3.7?package-id=6d203381ab9d6e72","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.3.7","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.3.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.3.7","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.4.3?package-id=96a05aabc0ed29ae","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.4.3","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.4.3","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-proxy-agent/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.4.3?package-id=5f2bc8a7a1df0ac9","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.4.3","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.4.3","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/https-proxy-agent/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.4.3?package-id=147dc5d482c47542","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.4.3","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.4.3","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sequelize/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.4.3?package-id=e66299331a6f8bdf","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.4.3","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.4.3","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks-proxy-agent/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/debug@4.4.3?package-id=fa51368f69175110","type":"library","author":"Josh Junon (https://github.com/qix-), TJ Holowaychuk <tj@vision-media.ca>, Nathan Rajlich <nathan@tootallnate.net> (http://n8.io), Andrew Rhyne <rhyneandrew@gmail.com>","name":"debug","version":"4.4.3","description":"Lightweight debugging utility for Node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:debug_project:debug:4.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/debug@4.4.3","externalReferences":[{"url":"git://github.com/debug-js/debug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/debug/package.json"}]},{"bom-ref":"pkg:npm/decamelize@1.2.0?package-id=0373f8c69a364fc0","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"decamelize","version":"1.2.0","description":"Convert a camelized string into a lowercased one with a custom separator: unicornRainbow → unicorn_rainbow","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decamelize:decamelize:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/decamelize@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decamelize/package.json"}]},{"bom-ref":"pkg:npm/decode-uri-component@0.2.2?package-id=74df95998cf0457f","type":"library","author":"Sam Verschueren <sam.verschueren@gmail.com> (github.com/SamVerschueren)","name":"decode-uri-component","version":"0.2.2","description":"A better decodeURIComponent","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decode-uri-component_project:decode-uri-component:0.2.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/decode-uri-component@0.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decode-uri-component/package.json"}]},{"bom-ref":"pkg:npm/decompress@4.2.1?package-id=6b277cfffb36ff6b","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)","name":"decompress","version":"4.2.1","description":"Extracting archives made easy","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress_project:decompress:4.2.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/decompress@4.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@3.3.0?package-id=677d9609cb5a01bc","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)","name":"decompress-response","version":"3.3.0","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@3.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@4.2.1?package-id=a1d858a92cd4e324","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"decompress-response","version":"4.2.1","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:4.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@4.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@6.0.0?package-id=4181e152e271bc83","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"decompress-response","version":"6.0.0","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@6.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-response@6.0.0?package-id=ab3ad7acc2109685","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"decompress-response","version":"6.0.0","description":"Decompress a HTTP response if needed","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-response:decompress-response:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-response@6.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_response:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_response:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json"}]},{"bom-ref":"pkg:npm/decompress-tar@4.1.1?package-id=1935244d7cb90f17","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"decompress-tar","version":"4.1.1","description":"decompress tar plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-tar:decompress-tar:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-tar@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-tar:decompress_tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tar:decompress-tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tar:decompress_tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_tar:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tar/package.json"}]},{"bom-ref":"pkg:npm/decompress-tarbz2@4.1.1?package-id=ebabda097779037b","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)","name":"decompress-tarbz2","version":"4.1.1","description":"decompress tar.bz2 plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-tarbz2@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tarbz2:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_tarbz2:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_tarbz2:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tarbz2/package.json"}]},{"bom-ref":"pkg:npm/decompress-targz@4.1.1?package-id=9dc81698c9e5e345","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"decompress-targz","version":"4.1.1","description":"decompress tar.gz plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-targz:decompress-targz:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-targz@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-targz:decompress_targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_targz:decompress-targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_targz:decompress_targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_targz:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-targz/package.json"}]},{"bom-ref":"pkg:npm/decompress-unzip@4.0.1?package-id=8979cd9c25111673","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"decompress-unzip","version":"4.0.1","description":"decompress zip plugin","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:decompress-unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/decompress-unzip@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress-unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_unzip:decompress-unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress_unzip:decompress_unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress-unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:decompress:decompress_unzip:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/package.json"}]},{"bom-ref":"pkg:npm/deep-equal@2.2.3?package-id=ddff5e641b501fb1","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net), James Halliday <mail@substack.net> (https://substack.net), Jordan Harband <ljharb@gmail.com>","name":"deep-equal","version":"2.2.3","description":"node's assert.deepEqual algorithm","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:deep-equal:deep-equal:2.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/deep-equal@2.2.3","externalReferences":[{"url":"http://github.com/inspect-js/node-deep-equal.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep-equal:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep_equal:deep-equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep_equal:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:deep-equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep:deep-equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:deep:deep_equal:2.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/deep-equal/package.json"}]},{"bom-ref":"pkg:npm/deep-extend@0.6.0?package-id=8b13bde9c77e7706","type":"library","author":"Viacheslav Lotsmanov <lotsmanov89@gmail.com>, Romain Prieto (https://github.com/rprieto), Max Maximov (https://github.com/maxmaximov), Marshall Bowers (https://github.com/maxdeviant), Misha Wakerman (https://github.com/mwakerman)","name":"deep-extend","version":"0.6.0","description":"Recursive object extending","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:deep_extend_project:deep_extend:0.6.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/deep-extend@0.6.0","externalReferences":[{"url":"git://github.com/unclechu/node-deep-extend.git","type":"distribution"},{"url":"https://github.com/unclechu/node-deep-extend","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/deep-extend/package.json"}]},{"bom-ref":"pkg:npm/define-data-property@1.1.4?package-id=1cebccf42426559d","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"define-data-property","version":"1.1.4","description":"Define a data property on an object. Will fall back to assignment in an engine without descriptors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-data-property:define-data-property:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/define-data-property@1.1.4","externalReferences":[{"url":"git+https://github.com/ljharb/define-data-property.git","type":"distribution"},{"url":"https://github.com/ljharb/define-data-property#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-data-property:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data_property:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data_property:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-data:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-data:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_data:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define-data-property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define_data_property:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/define-data-property/package.json"}]},{"bom-ref":"pkg:npm/define-properties@1.2.1?package-id=c3e457ef9955cb09","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"define-properties","version":"1.2.1","description":"Define multiple non-enumerable properties at once. Uses `Object.defineProperty` when available; falls back to standard assignment in older engines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:define-properties:define-properties:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/define-properties@1.2.1","externalReferences":[{"url":"git://github.com/ljharb/define-properties.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:define-properties:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_properties:define-properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define_properties:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define-properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:define:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define-properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:define_properties:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/define-properties/package.json"}]},{"bom-ref":"pkg:npm/delegates@1.0.0?package-id=36ba8b211a3558dd","type":"library","name":"delegates","version":"1.0.0","description":"delegate methods and accessors to another property","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:delegates:delegates:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/delegates@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/delegates/package.json"}]},{"bom-ref":"pkg:npm/depd@1.1.2?package-id=d03c5ad5ccf7e9e9","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"depd","version":"1.1.2","description":"Deprecate all the things","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:depd:depd:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/depd@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/depd/package.json"}]},{"bom-ref":"pkg:npm/depd@2.0.0?package-id=bdc1789d5398f38c","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"depd","version":"2.0.0","description":"Deprecate all the things","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:depd:depd:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/depd@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/depd/package.json"}]},{"bom-ref":"pkg:npm/destroy@1.2.0?package-id=a84307f7c46d36c4","type":"library","author":"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>","name":"destroy","version":"1.2.0","description":"destroy a stream if possible","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:destroy:destroy:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/destroy@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/destroy/package.json"}]},{"bom-ref":"pkg:npm/detect-file@1.0.0?package-id=7900e478eb751255","type":"library","author":"Brian Woodward (https://github.com/doowb)","name":"detect-file","version":"1.0.0","description":"Detects if a file exists and returns the resolved filepath.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:detect-file:detect-file:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/detect-file@1.0.0","externalReferences":[{"url":"https://github.com/doowb/detect-file","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-file:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_file:detect-file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_file:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:detect-file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:detect_file:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/detect-file/package.json"}]},{"bom-ref":"pkg:npm/detect-libc@1.0.3?package-id=f7f8634dce77a9d4","type":"library","author":"Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>","name":"detect-libc","version":"1.0.3","description":"Node.js module to detect the C standard library (libc) implementation family and version","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:detect-libc:detect-libc:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/detect-libc@1.0.3","externalReferences":[{"url":"git://github.com/lovell/detect-libc","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-libc:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect-libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect-libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect_libc:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/detect-libc/package.json"}]},{"bom-ref":"pkg:npm/detect-libc@2.1.2?package-id=2c10f1616cf4c3dd","type":"library","author":"Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>, Vinícius Lourenço <vinyygamerlol@gmail.com>","name":"detect-libc","version":"2.1.2","description":"Node.js module to detect the C standard library (libc) implementation family and version","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/detect-libc@2.1.2","externalReferences":[{"url":"git://github.com/lovell/detect-libc.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json"}]},{"bom-ref":"pkg:npm/detect-libc@2.1.2?package-id=6d778b0d97d5f5f2","type":"library","author":"Lovell Fuller <npm@lovell.info>, Niklas Salmoukas <niklas@salmoukas.com>, Vinícius Lourenço <vinyygamerlol@gmail.com>","name":"detect-libc","version":"2.1.2","description":"Node.js module to detect the C standard library (libc) implementation family and version","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:detect-libc:detect-libc:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/detect-libc@2.1.2","externalReferences":[{"url":"git://github.com/lovell/detect-libc.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect-libc:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect-libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect_libc:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect-libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:detect:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect-libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lovell:detect_libc:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json"}]},{"bom-ref":"pkg:npm/dfa@1.2.0?package-id=bf5c1ed7af4e574c","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"dfa","version":"1.2.0","description":"A state machine compiler","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:dfa:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/dfa@1.2.0","externalReferences":[{"url":"git+ssh://git@github.com/devongovett/dfa.git","type":"distribution"},{"url":"https://github.com/devongovett/dfa#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dfa:dfa:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dfa/package.json"}]},{"bom-ref":"pkg:npm/doctypes@1.1.0?package-id=3f4ef5f1be454910","type":"library","author":"ForbesLindesay","name":"doctypes","version":"1.1.0","description":"Shorthands for commonly used doctypes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:doctypes:doctypes:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/doctypes@1.1.0","externalReferences":[{"url":"https://github.com/pugjs/doctypes.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:doctypes:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/doctypes/package.json"}]},{"bom-ref":"pkg:npm/domelementtype@1.3.1?package-id=0d6ad87159c99050","type":"library","author":"Felix Boehm <me@feedic.com>","name":"domelementtype","version":"1.3.1","description":"all the types of nodes in htmlparser2's dom","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:domelementtype:domelementtype:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/domelementtype@1.3.1","externalReferences":[{"url":"git://github.com/fb55/domelementtype.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fb55:domelementtype:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json"}]},{"bom-ref":"pkg:npm/domhandler@2.1.0?package-id=a2a50cc71f9f1510","type":"library","author":"Felix Boehm <me@feedic.com>","name":"domhandler","version":"2.1.0","description":"handler for htmlparser2 that turns pages into a dom","licenses":[{"license":{"name":"sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164"}}],"cpe":"cpe:2.3:a:domhandler:domhandler:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/domhandler@2.1.0","externalReferences":[{"url":"git://github.com/fb55/domhandler.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fb55:domhandler:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json"}]},{"bom-ref":"pkg:npm/domutils@1.1.6?package-id=66e2979442791477","type":"library","author":"Felix Boehm <me@feedic.com>","name":"domutils","version":"1.1.6","description":"utilities for working with htmlparser2's dom","licenses":[{"license":{"name":"sha256:cb992345949ccd6e8394b2cd6c465f7b897c864f845937dbf64e8997f389e164"}}],"cpe":"cpe:2.3:a:domutils:domutils:1.1.6:*:*:*:*:*:*:*","purl":"pkg:npm/domutils@1.1.6","externalReferences":[{"url":"git://github.com/FB55/domutils.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:FB55:domutils:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json"}]},{"bom-ref":"pkg:npm/dottie@2.0.7?package-id=4d0527c1ef4f6b69","type":"library","author":"Mick Hansen <maker@mhansen.io>","name":"dottie","version":"2.0.7","description":"Fast and safe nested object access and manipulation in JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dottie_project:dottie:2.0.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/dottie@2.0.7","externalReferences":[{"url":"git://github.com/mickhansen/dottie.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dottie/package.json"}]},{"bom-ref":"pkg:npm/double-ended-queue@0.9.7?package-id=5725c7f9e5544384","type":"library","author":"Petka Antonov <petka_antonov@hotmail.com> (http://github.com/petkaantonov/)","name":"double-ended-queue","version":"0.9.7","description":"Extremely fast double-ended queue implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:double-ended-queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*","purl":"pkg:npm/double-ended-queue@0.9.7","externalReferences":[{"url":"git://github.com/petkaantonov/deque.git","type":"distribution"},{"url":"https://github.com/petkaantonov/deque","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:double-ended-queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended_queue:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended_queue:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double-ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double-ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double_ended:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:petkaantonov:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:petkaantonov:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double:double-ended-queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:double:double_ended_queue:0.9.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/double-ended-queue/package.json"}]},{"bom-ref":"pkg:npm/download@8.0.0?package-id=303671788db63ed8","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)","name":"download","version":"8.0.0","description":"Download and extract files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:download:download:8.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/download@8.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/download/package.json"}]},{"bom-ref":"pkg:npm/dunder-proto@1.0.1?package-id=c93aa5bde2f41455","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"dunder-proto","version":"1.0.1","description":"If available, the `Object.prototype.__proto__` accessor and mutator, call-bound","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dunder-proto:dunder-proto:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/dunder-proto@1.0.1","externalReferences":[{"url":"git+https://github.com/es-shims/dunder-proto.git","type":"distribution"},{"url":"https://github.com/es-shims/dunder-proto#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder-proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder_proto:dunder-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder_proto:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:dunder-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder:dunder-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:dunder:dunder_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/dunder-proto/package.json"}]},{"bom-ref":"pkg:npm/duplexer2@0.1.4?package-id=937130df2f15286c","type":"library","author":"Conrad Pankoff <deoxxa@fknsrs.biz> (http://www.fknsrs.biz/)","name":"duplexer2","version":"0.1.4","description":"Like duplexer but using streams3","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:duplexer2:duplexer2:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/duplexer2@0.1.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/duplexer2/package.json"}]},{"bom-ref":"pkg:npm/duplexer3@0.1.5?package-id=48435aec46970511","type":"library","name":"duplexer3","version":"0.1.5","description":"Like duplexer but using streams3","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:duplexer3:duplexer3:0.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/duplexer3@0.1.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/duplexer3/package.json"}]},{"bom-ref":"pkg:npm/eastasianwidth@0.2.0?package-id=ea06a962daee959b","type":"library","author":"Masaki Komagata","name":"eastasianwidth","version":"0.2.0","description":"Get East Asian Width from a character.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eastasianwidth:eastasianwidth:0.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/eastasianwidth@0.2.0","externalReferences":[{"url":"git://github.com/komagata/eastasianwidth.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:komagata:eastasianwidth:0.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/eastasianwidth/package.json"}]},{"bom-ref":"pkg:npm/ee-first@1.1.1?package-id=5a203220d6135893","type":"library","author":"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>","name":"ee-first","version":"1.1.1","description":"return the first event in a set of ee/event pairs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ee-first:ee-first:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/ee-first@1.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee-first:ee_first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee_first:ee-first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee_first:ee_first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee:ee-first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ee:ee_first:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ee-first/package.json"}]},{"bom-ref":"pkg:npm/eivindfjeldstad-dot@0.0.1?package-id=11589b7a5b7cc74d","type":"library","name":"eivindfjeldstad-dot","version":"0.0.1","description":"Get and set object properties with dot notation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/eivindfjeldstad-dot@0.0.1","externalReferences":[{"url":"https://github.com/eivindfjeldstad/dot.git","type":"distribution"},{"url":"https://github.com/eivindfjeldstad/dot","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad-dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad_dot:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad:eivindfjeldstad-dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eivindfjeldstad:eivindfjeldstad_dot:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/eivindfjeldstad-dot/package.json"}]},{"bom-ref":"pkg:npm/emoji-regex@8.0.0?package-id=1acb6377c4d1be44","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"emoji-regex","version":"8.0.0","description":"A regular expression to match all Emoji-only symbols as per the Unicode Standard.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:emoji-regex:8.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/emoji-regex@8.0.0","externalReferences":[{"url":"https://github.com/mathiasbynens/emoji-regex.git","type":"distribution"},{"url":"https://mths.be/emoji-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji-regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji-regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji_regex:8.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/emoji-regex/package.json"}]},{"bom-ref":"pkg:npm/emoji-regex@9.2.2?package-id=01b12619eb310009","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"emoji-regex","version":"9.2.2","description":"A regular expression to match all Emoji-only symbols as per the Unicode Standard.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/emoji-regex@9.2.2","externalReferences":[{"url":"https://github.com/mathiasbynens/emoji-regex.git","type":"distribution"},{"url":"https://mths.be/emoji-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json"}]},{"bom-ref":"pkg:npm/emoji-regex@9.2.2?package-id=28604ba4f35e223d","type":"library","author":"Mathias Bynens (https://mathiasbynens.be/)","name":"emoji-regex","version":"9.2.2","description":"A regular expression to match all Emoji-only symbols as per the Unicode Standard.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:emoji-regex:9.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/emoji-regex@9.2.2","externalReferences":[{"url":"https://github.com/mathiasbynens/emoji-regex.git","type":"distribution"},{"url":"https://mths.be/emoji-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mathiasbynens:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji-regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji_regex:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji-regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:emoji:emoji_regex:9.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json"}]},{"bom-ref":"pkg:npm/enabled@2.0.0?package-id=4d6bcacb368fa08d","type":"library","author":"Arnout Kazemier","name":"enabled","version":"2.0.0","description":"Check if a certain debug flag is enabled.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:enabled:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/enabled@2.0.0","externalReferences":[{"url":"git://github.com/3rd-Eden/enabled.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:enabled:enabled:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/enabled/package.json"}]},{"bom-ref":"pkg:npm/encodeurl@2.0.0?package-id=b55917a42e374d3b","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"encodeurl","version":"2.0.0","description":"Encode a URL to a percent-encoded form, excluding already-encoded sequences","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:encodeurl:encodeurl:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/encodeurl@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/encodeurl/package.json"}]},{"bom-ref":"pkg:npm/encoding@0.1.13?package-id=6edb52dab3ea3e2a","type":"library","author":"Andris Reinman","name":"encoding","version":"0.1.13","description":"Convert encodings, uses iconv-lite","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:encoding:encoding:0.1.13:*:*:*:*:*:*:*","purl":"pkg:npm/encoding@0.1.13","externalReferences":[{"url":"https://github.com/andris9/encoding.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:andris9:encoding:0.1.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/encoding/package.json"}]},{"bom-ref":"pkg:npm/end-of-stream@1.4.5?package-id=b935e39bff7e678c","type":"library","author":"Mathias Buus <mathiasbuus@gmail.com>","name":"end-of-stream","version":"1.4.5","description":"Call a callback when a readable/writable/duplex stream has completed or failed.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:end-of-stream:end-of-stream:1.4.5:*:*:*:*:*:*:*","purl":"pkg:npm/end-of-stream@1.4.5","externalReferences":[{"url":"git://github.com/mafintosh/end-of-stream.git","type":"distribution"},{"url":"https://github.com/mafintosh/end-of-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:end-of-stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of_stream:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of_stream:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end-of:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end-of:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end_of:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end:end-of-stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:end:end_of_stream:1.4.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/end-of-stream/package.json"}]},{"bom-ref":"pkg:npm/engine.io@4.1.2?package-id=8c4af4f22e5de7e4","type":"library","author":"Guillermo Rauch <guillermo@learnboost.com>, Eugen Dueck, Afshin Mehrabani, Christoph Dorn, Mark Mokryn <mokesmokes@gmail.com>","name":"engine.io","version":"4.1.2","description":"The realtime engine behind Socket.IO. Provides the foundation of a bidirectional connection between client and server","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket:engine.io:4.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/engine.io@4.1.2","externalReferences":[{"url":"https://github.com/socketio/engine.io","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/package.json"}]},{"bom-ref":"pkg:npm/engine.io-parser@4.0.3?package-id=1c0c027153be229a","type":"library","name":"engine.io-parser","version":"4.0.3","description":"Parser for the client for the realtime Engine","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:engine.io-parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/engine.io-parser@4.0.3","externalReferences":[{"url":"https://github.com/socketio/engine.io-parser","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io-parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io_parser:engine.io-parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io_parser:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io:engine.io-parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:engine.io:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:engine.io-parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:engine.io_parser:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io-parser/package.json"}]},{"bom-ref":"pkg:npm/env-paths@2.2.1?package-id=8a04a7a9aa4f21f3","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"env-paths","version":"2.2.1","description":"Get paths for storing things like data, config, cache, etc","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:env-paths:env-paths:2.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/env-paths@2.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:env-paths:env_paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env_paths:env-paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env_paths:env_paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env:env-paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:env:env_paths:2.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/env-paths/package.json"}]},{"bom-ref":"pkg:npm/err-code@2.0.3?package-id=eb67f19cafbd6c3f","type":"library","author":"IndigoUnited <hello@indigounited.com> (http://indigounited.com)","name":"err-code","version":"2.0.3","description":"Create an error with a code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:IndigoUnited:err-code:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/err-code@2.0.3","externalReferences":[{"url":"git://github.com/IndigoUnited/js-err-code.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err-code:err-code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err-code:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err_code:err-code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err_code:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err:err-code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:err:err_code:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/err-code/package.json"}]},{"bom-ref":"pkg:npm/errorhandler@1.5.2?package-id=8ed65ca95e3bdfd3","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"errorhandler","version":"1.5.2","description":"Development-only error handler middleware","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:errorhandler:errorhandler:1.5.2:*:*:*:*:*:*:*","purl":"pkg:npm/errorhandler@1.5.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/errorhandler/package.json"}]},{"bom-ref":"pkg:npm/es-define-property@1.0.1?package-id=cbcde0a9a6111387","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"es-define-property","version":"1.0.1","description":"`Object.defineProperty`, but not IE 8's broken one.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-define-property:es-define-property:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/es-define-property@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/es-define-property.git","type":"distribution"},{"url":"https://github.com/ljharb/es-define-property#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-define-property:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define_property:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define_property:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-define:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-define:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_define:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-define-property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_define_property:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-define-property/package.json"}]},{"bom-ref":"pkg:npm/es-errors@1.3.0?package-id=b80402f3b1ddfc9d","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"es-errors","version":"1.3.0","description":"A simple cache for a few of the JS Error constructors.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-errors:es-errors:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/es-errors@1.3.0","externalReferences":[{"url":"git+https://github.com/ljharb/es-errors.git","type":"distribution"},{"url":"https://github.com/ljharb/es-errors#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-errors:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_errors:es-errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_errors:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_errors:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-errors/package.json"}]},{"bom-ref":"pkg:npm/es-get-iterator@1.1.3?package-id=916d823925222e15","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"es-get-iterator","version":"1.1.3","description":"Get an iterator for any JS language value. Works robustly across all environments, all versions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-get-iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/es-get-iterator@1.1.3","externalReferences":[{"url":"git+https://github.com/ljharb/es-get-iterator.git","type":"distribution"},{"url":"https://github.com/ljharb/es-get-iterator#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-get-iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get_iterator:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get_iterator:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_get:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-get-iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_get_iterator:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-get-iterator/package.json"}]},{"bom-ref":"pkg:npm/es-object-atoms@1.1.1?package-id=2d8cc620cca5c55e","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"es-object-atoms","version":"1.1.1","description":"ES Object-related atoms: Object, ToObject, RequireObjectCoercible","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:es-object-atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/es-object-atoms@1.1.1","externalReferences":[{"url":"git+https://github.com/ljharb/es-object-atoms.git","type":"distribution"},{"url":"https://github.com/ljharb/es-object-atoms#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-object-atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object_atoms:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object_atoms:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es_object:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es-object-atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es:es_object_atoms:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/es-object-atoms/package.json"}]},{"bom-ref":"pkg:npm/escape-html@1.0.3?package-id=9f83c2eadc36cf52","type":"library","name":"escape-html","version":"1.0.3","description":"Escape string for use in HTML","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:escape-html:escape-html:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/escape-html@1.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-html:escape_html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_html:escape-html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_html:escape_html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape-html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape_html:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/escape-html/package.json"}]},{"bom-ref":"pkg:npm/escape-string-regexp@1.0.5?package-id=6ec01e61f077601f","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Boy Nicolai Appelman <joshua@jbna.nl> (jbna.nl)","name":"escape-string-regexp","version":"1.0.5","description":"Escape RegExp special characters","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:escape-string-regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/escape-string-regexp@1.0.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-string-regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string_regexp:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string_regexp:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape-string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape_string:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape-string-regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:escape:escape_string_regexp:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/escape-string-regexp/package.json"}]},{"bom-ref":"pkg:npm/esprima@1.0.4?package-id=6ca86a7d5c3b7019","type":"library","author":"Ariya Hidayat <ariya.hidayat@gmail.com>","name":"esprima","version":"1.0.4","description":"ECMAScript parsing infrastructure for multipurpose analysis","licenses":[{"license":{"name":"BSD"}}],"cpe":"cpe:2.3:a:esprima:esprima:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/esprima@1.0.4","externalReferences":[{"url":"http://github.com/ariya/esprima.git","type":"distribution"},{"url":"http://esprima.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ariya:esprima:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/notevil/node_modules/esprima/package.json"}]},{"bom-ref":"pkg:npm/esprima@4.0.1?package-id=d77e18bbba704dde","type":"library","author":"Ariya Hidayat <ariya.hidayat@gmail.com>, Ariya Hidayat <ariya.hidayat@gmail.com>","name":"esprima","version":"4.0.1","description":"ECMAScript parsing infrastructure for multipurpose analysis","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:esprima:esprima:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/esprima@4.0.1","externalReferences":[{"url":"https://github.com/jquery/esprima.git","type":"distribution"},{"url":"http://esprima.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jquery:esprima:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/esprima/package.json"}]},{"bom-ref":"pkg:npm/etag@1.8.1?package-id=5bf7a215d5351e40","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, David Björklund <david.bjorklund@gmail.com>","name":"etag","version":"1.8.1","description":"Create simple HTTP ETags","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:etag:etag:1.8.1:*:*:*:*:*:*:*","purl":"pkg:npm/etag@1.8.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/etag/package.json"}]},{"bom-ref":"pkg:npm/ethers@6.16.0?package-id=086cdac5ff7442ec","type":"library","author":"Richard Moore <me@ricmoo.com>","name":"ethers","version":"6.16.0","description":"A complete and compact Ethereum library, for dapps, wallets and any other tools.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ethers-io:ethers:6.16.0:*:*:*:*:*:*:*","purl":"pkg:npm/ethers@6.16.0","externalReferences":[{"url":"git://github.com/ethers-io/ethers.js.git","type":"distribution"},{"url":"https://ethers.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ethers:ethers:6.16.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethers/package.json"}]},{"bom-ref":"pkg:npm/event-target-shim@5.0.1?package-id=38d2981e57e00f35","type":"library","author":"Toru Nagashima","name":"event-target-shim","version":"5.0.1","description":"An implementation of WHATWG EventTarget interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:event-target-shim:event-target-shim:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/event-target-shim@5.0.1","externalReferences":[{"url":"https://github.com/mysticatea/event-target-shim.git","type":"distribution"},{"url":"https://github.com/mysticatea/event-target-shim","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:event-target-shim:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target_shim:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target_shim:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event-target:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event-target:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event_target:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mysticatea:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event:event-target-shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:event:event_target_shim:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/event-target-shim/package.json"}]},{"bom-ref":"pkg:npm/eventemitter2@0.4.14?package-id=f97beb76cff278cb","type":"library","author":"Eric Elliott, , , , ","name":"eventemitter2","version":"0.4.14","description":"A Node.js event emitter implementation with namespaces, wildcards, TTL and browser support.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eventemitter2:eventemitter2:0.4.14:*:*:*:*:*:*:*","purl":"pkg:npm/eventemitter2@0.4.14","externalReferences":[{"url":"git://github.com/hij1nx/EventEmitter2.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hij1nx:eventemitter2:0.4.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json"}]},{"bom-ref":"pkg:npm/eventemitter3@1.1.1?package-id=26888713cea7d58a","type":"library","author":"Arnout Kazemier","name":"eventemitter3","version":"1.1.1","description":"EventEmitter3 focuses on performance while maintaining a Node.js AND browser compatible interface.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eventemitter3:eventemitter3:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/eventemitter3@1.1.1","externalReferences":[{"url":"git://github.com/primus/eventemitter3.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:primus:eventemitter3:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/eventemitter3/package.json"}]},{"bom-ref":"pkg:npm/events@3.3.0?package-id=a91d0202fa8ea285","type":"library","author":"Irakli Gozalishvili <rfobic@gmail.com> (http://jeditoolkit.com)","name":"events","version":"3.3.0","description":"Node's event emitter for all engines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Gozala:events:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/events@3.3.0","externalReferences":[{"url":"git://github.com/Gozala/events.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:events:events:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/events/package.json"}]},{"bom-ref":"pkg:npm/eventsource-parser@3.0.8?package-id=eb00f4505da970a6","type":"library","author":"Espen Hovlandsdal <espen@hovlandsdal.com>","name":"eventsource-parser","version":"3.0.8","description":"Streaming, source-agnostic EventSource/Server-Sent Events parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eventsource-parser:eventsource-parser:3.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/eventsource-parser@3.0.8","externalReferences":[{"url":"git+ssh://git@github.com/rexxars/eventsource-parser.git","type":"distribution"},{"url":"https://github.com/rexxars/eventsource-parser#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:eventsource-parser:eventsource_parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eventsource_parser:eventsource-parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eventsource_parser:eventsource_parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eventsource:eventsource-parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eventsource:eventsource_parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rexxars:eventsource-parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rexxars:eventsource_parser:3.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/eventsource-parser/package.json"}]},{"bom-ref":"pkg:npm/exit@0.1.2?package-id=8803d0f682f78ae8","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"exit","version":"0.1.2","description":"A replacement for process.exit that ensures stdio are fully drained before exiting.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cowboy:exit:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/exit@0.1.2","externalReferences":[{"url":"git://github.com/cowboy/node-exit.git","type":"distribution"},{"url":"https://github.com/cowboy/node-exit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit:exit:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/exit/package.json"}]},{"bom-ref":"pkg:npm/exit-x@0.2.2?package-id=d351e530d5e62171","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"exit-x","version":"0.2.2","description":"A replacement for process.exit that ensures stdio are fully drained before exiting.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:gruntjs:exit-x:0.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/exit-x@0.2.2","externalReferences":[{"url":"git://github.com/gruntjs/node-exit-x.git","type":"distribution"},{"url":"https://github.com/gruntjs/node-exit-x","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:exit_x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit-x:exit-x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit-x:exit_x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit_x:exit-x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit_x:exit_x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit:exit-x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exit:exit_x:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/exit-x/package.json"}]},{"bom-ref":"pkg:npm/expand-template@2.0.3?package-id=1308274036073bda","type":"library","author":"LM <ralphtheninja@riseup.net>","name":"expand-template","version":"2.0.3","description":"Expand placeholders in a template string","licenses":[{"expression":"MIT OR WTFPL"}],"cpe":"cpe:2.3:a:expand-template:expand-template:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/expand-template@2.0.3","externalReferences":[{"url":"https://github.com/ralphtheninja/expand-template.git","type":"distribution"},{"url":"https://github.com/ralphtheninja/expand-template","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-template:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_template:expand-template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_template:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ralphtheninja:expand-template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ralphtheninja:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand-template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand_template:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-template/package.json"}]},{"bom-ref":"pkg:npm/expand-tilde@2.0.2?package-id=bbefedd1ec4b8ed7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"expand-tilde","version":"2.0.2","description":"Bash-like tilde expansion for node.js. Expands a leading tilde in a file path to the user home directory, or `~+` to the cwd.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:expand-tilde:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/expand-tilde@2.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/expand-tilde","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand-tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_tilde:expand-tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand_tilde:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand-tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:expand:expand_tilde:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/expand-tilde/package.json"}]},{"bom-ref":"pkg:npm/exponential-backoff@3.1.3?package-id=88fb48899d371526","type":"library","author":"Sami Sayegh","name":"exponential-backoff","version":"3.1.3","description":"A utility that allows retrying a function with an exponential delay between attempts.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:exponential-backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/exponential-backoff@3.1.3","externalReferences":[{"url":"git+https://github.com/coveooss/exponential-backoff.git","type":"distribution"},{"url":"https://github.com/coveooss/exponential-backoff#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential-backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential_backoff:exponential-backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential_backoff:exponential_backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential:exponential-backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exponential:exponential_backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:coveooss:exponential-backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:coveooss:exponential_backoff:3.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/exponential-backoff/package.json"}]},{"bom-ref":"pkg:npm/express@4.22.2?package-id=99208581103e7228","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>, Aaron Heckmann <aaron.heckmann+github@gmail.com>, Ciaran Jessup <ciaranj@gmail.com>, Douglas Christopher Wilson <doug@somethingdoug.com>, Guillermo Rauch <rauchg@gmail.com>, Jonathan Ong <me@jongleberry.com>, Roman Shtylman <shtylman+expressjs@gmail.com>, Young Jae Sim <hanul@hanul.me>","name":"express","version":"4.22.2","description":"Fast, unopinionated, minimalist web framework","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:openjsf:express:4.22.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/express@4.22.2","externalReferences":[{"url":"http://expressjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express/package.json"}]},{"bom-ref":"pkg:npm/express-ipfilter@1.4.0?package-id=7bce23118d035582","type":"library","author":"jetersen","name":"express-ipfilter","version":"1.4.0","description":"A light-weight IP address based filtering system","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:express-ipfilter:express-ipfilter:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/express-ipfilter@1.4.0","externalReferences":[{"url":"https://github.com/jetersen/express-ipfilter","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-ipfilter:express_ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_ipfilter:express-ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_ipfilter:express_ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jetersen:express-ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jetersen:express_ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_ipfilter:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-ipfilter/package.json"}]},{"bom-ref":"pkg:npm/express-jwt@0.1.3?package-id=b057e452c5702954","type":"library","author":"Matias Woloski <matias@auth0.com> (https://www.auth0.com/)","name":"express-jwt","version":"0.1.3","description":"JWT authentication middleware.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:auth0:express-jwt:0.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/express-jwt@0.1.3","externalReferences":[{"url":"git://github.com/auth0/express-jwt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-jwt/package.json"}]},{"bom-ref":"pkg:npm/express-rate-limit@7.5.1?package-id=7b3c60ae93ab123f","type":"library","author":"Nathan Friedly (http://nfriedly.com/)","name":"express-rate-limit","version":"7.5.1","description":"Basic IP rate-limiting middleware for Express. Use to limit repeated requests to public APIs and/or endpoints such as password reset.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:express-rate-limit:express-rate-limit:7.5.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/express-rate-limit@7.5.1","externalReferences":[{"url":"git+https://github.com/express-rate-limit/express-rate-limit.git","type":"distribution"},{"url":"https://github.com/express-rate-limit/express-rate-limit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-rate-limit/package.json"}]},{"bom-ref":"pkg:npm/express-robots-txt@0.5.0?package-id=fc0608b65fd469f7","type":"library","author":"modosc (http://github.com/modosc), ashaffer (http://github.com/ashaffer), ","name":"express-robots-txt","version":"0.5.0","description":"Express middleware to serve and generate robots.txt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:express-robots-txt:express-robots-txt:0.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/express-robots-txt@0.5.0","externalReferences":[{"url":"https://github.com/modosc/express-robots-txt","type":"distribution"},{"url":"https://github.com/modosc/express-robots-txt","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-robots-txt:express_robots_txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots_txt:express-robots-txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots_txt:express_robots_txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-robots:express-robots-txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-robots:express_robots_txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots:express-robots-txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_robots:express_robots_txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-robots-txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_robots_txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modosc:express-robots-txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:modosc:express_robots_txt:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-robots-txt/package.json"}]},{"bom-ref":"pkg:npm/express-security.txt@2.0.0?package-id=a5e9507bd21efb6e","type":"library","name":"express-security.txt","version":"2.0.0","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:express-security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/express-security.txt@2.0.0","externalReferences":[{"url":"git+https://github.com/gergelyke/express-security.txt.git","type":"distribution"},{"url":"https://github.com/gergelyke/express-security.txt#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:express-security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_security.txt:express-security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express_security.txt:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gergelyke:express-security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gergelyke:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express-security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:express:express_security.txt:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-security.txt/package.json"}]},{"bom-ref":"pkg:npm/ext-list@2.2.2?package-id=42eb35c00aa55cff","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"ext-list","version":"2.2.2","description":"List of known file extensions and their MIME types","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ext-list:ext-list:2.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/ext-list@2.2.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext-list:ext_list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_list:ext-list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_list:ext_list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext-list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext_list:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ext-list/package.json"}]},{"bom-ref":"pkg:npm/ext-name@5.0.0?package-id=738d43aeb5b7acf8","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"ext-name","version":"5.0.0","description":"Get the file extension and MIME type from a file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ext-name:ext-name:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/ext-name@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext-name:ext_name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_name:ext-name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext_name:ext_name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext-name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ext:ext_name:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ext-name/package.json"}]},{"bom-ref":"pkg:npm/extend@3.0.2?package-id=68ec8b67c7986d90","type":"library","author":"Stefan Thomas <justmoon@members.fsf.org> (http://www.justmoon.net), Jordan Harband (https://github.com/ljharb)","name":"extend","version":"3.0.2","description":"Port of jQuery.extend for node.js and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:extend_project:extend:3.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/extend@3.0.2","externalReferences":[{"url":"https://github.com/justmoon/node-extend.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/extend/package.json"}]},{"bom-ref":"pkg:npm/false_main?package-id=3d00c14a77d4b177","type":"library","name":"false_main","version":"UNKNOWN","cpe":"cpe:2.3:a:false-main:false-main:*:*:*:*:*:*:*:*","purl":"pkg:npm/false_main","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:false-main:false_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false_main:false-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false_main:false_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false:false-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:false:false_main:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/false_main/package.json"}]},{"bom-ref":"pkg:npm/fast.js@0.1.1?package-id=097fffa0302024b5","type":"library","author":"Charles Pick <charles@codemix.com>","name":"fast.js","version":"0.1.1","description":"Faster user-land reimplementations of native functions with extra helpers.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:codemix:fast.js:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/fast.js@0.1.1","externalReferences":[{"url":"http://github.com/codemix/fast.js","type":"distribution"},{"url":"https://github.com/codemix/fast.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fast.js:fast.js:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fast.js/package.json"}]},{"bom-ref":"pkg:npm/fd-slicer@1.1.0?package-id=b27ace599789b7aa","type":"library","author":"Andrew Kelley <superjoe30@gmail.com>","name":"fd-slicer","version":"1.1.0","description":"safely create multiple ReadStream or WriteStream objects from the same file descriptor","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fd-slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fd-slicer@1.1.0","externalReferences":[{"url":"git://github.com/andrewrk/node-fd-slicer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd-slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd_slicer:fd-slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd_slicer:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:andrewrk:fd-slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:andrewrk:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd:fd-slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fd:fd_slicer:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fd-slicer/package.json"}]},{"bom-ref":"pkg:npm/fdir@6.5.0?package-id=153d959dba8cb29c","type":"library","author":"thecodrr <thecodrr@protonmail.com>","name":"fdir","version":"6.5.0","description":"The fastest directory crawler & globbing alternative to glob, fast-glob, & tiny-glob. Crawls 1m files in < 1s","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:thecodrr:fdir:6.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/fdir@6.5.0","externalReferences":[{"url":"git+https://github.com/thecodrr/fdir.git","type":"distribution"},{"url":"https://github.com/thecodrr/fdir#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fdir:fdir:6.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json"}]},{"bom-ref":"pkg:npm/feature-policy@0.6.0?package-id=d157c8b5d6cc7dce","type":"library","author":"Evan Hahn <me@evanhahn.com> (https://evanhahn.com)","name":"feature-policy","version":"0.6.0","description":"Middleware to set the Feature-Policy HTTP header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:feature-policy:feature-policy:0.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/feature-policy@0.6.0","externalReferences":[{"url":"git://github.com/helmetjs/feature-policy.git","type":"distribution"},{"url":"https://github.com/helmetjs/feature-policy","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature-policy:feature_policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature_policy:feature-policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature_policy:feature_policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:helmetjs:feature-policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:helmetjs:feature_policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature:feature-policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feature:feature_policy:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/feature-policy/package.json"}]},{"bom-ref":"pkg:npm/fecha@4.2.3?package-id=4c7f9896237220f1","type":"library","author":"Taylor Hakes","name":"fecha","version":"4.2.3","description":"Date formatting and parsing","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:taylorhakes:fecha:4.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/fecha@4.2.3","externalReferences":[{"url":"https://taylorhakes@github.com/taylorhakes/fecha.git","type":"distribution"},{"url":"https://github.com/taylorhakes/fecha","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fecha:fecha:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fecha/package.json"}]},{"bom-ref":"pkg:npm/file-stream-rotator@1.0.0?package-id=15f34f70f0b92af7","type":"library","author":"Roger Castells","name":"file-stream-rotator","version":"1.0.0","description":"Automated stream rotation useful for log files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-stream-rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/file-stream-rotator@1.0.0","externalReferences":[{"url":"git://github.com/rogerc/file-stream-rotator.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-stream-rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream_rotator:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream_rotator:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_stream:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogerc:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rogerc:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file-stream-rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file_stream_rotator:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-stream-rotator/package.json"}]},{"bom-ref":"pkg:npm/file-type@11.1.0?package-id=67d7e8ff46ed8cb6","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"file-type","version":"11.1.0","description":"Detect the file type of a Buffer/Uint8Array/ArrayBuffer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:11.1.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@11.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/download/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@16.5.4?package-id=e880d91c1999c011","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"file-type","version":"16.5.4","description":"Detect the file type of a Buffer/Uint8Array/ArrayBuffer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:16.5.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@16.5.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@3.9.0?package-id=2fb960c1da2a5460","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"file-type","version":"3.9.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:3.9.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@3.9.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@4.4.0?package-id=e058a6a6b902e7b6","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"file-type","version":"4.4.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:4.4.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@4.4.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archive-type/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@5.2.0?package-id=fe078f258a41aa0a","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"file-type","version":"5.2.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:5.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@5.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@5.2.0?package-id=fe9dadf27623df81","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"file-type","version":"5.2.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:5.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@5.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-type@6.2.0?package-id=ac71d0dd845ff856","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"file-type","version":"6.2.0","description":"Detect the file type of a Buffer/Uint8Array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sindresorhus:file-type:6.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/file-type@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json"}]},{"bom-ref":"pkg:npm/file-uri-to-path@1.0.0?package-id=8e20623301b2c459","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"file-uri-to-path","version":"1.0.0","description":"Convert a file: URI to a file path","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:file-uri-to-path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/file-uri-to-path@1.0.0","externalReferences":[{"url":"git://github.com/TooTallNate/file-uri-to-path.git","type":"distribution"},{"url":"https://github.com/TooTallNate/file-uri-to-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri-to-path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to_path:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to_path:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri-to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri-to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri_to:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file-uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file_uri:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file-uri-to-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:file:file_uri_to_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/file-uri-to-path/package.json"}]},{"bom-ref":"pkg:npm/filename-reserved-regex@2.0.0?package-id=9f4d2bdf1bb829e5","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"filename-reserved-regex","version":"2.0.0","description":"Regular expression for matching reserved filename characters","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:filename-reserved-regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/filename-reserved-regex@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename-reserved-regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved_regex:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved_regex:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename-reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename-reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename_reserved:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename:filename-reserved-regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:filename:filename_reserved_regex:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filename-reserved-regex/package.json"}]},{"bom-ref":"pkg:npm/filenamify@3.0.0?package-id=14ccb7336c2a219a","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"filenamify","version":"3.0.0","description":"Convert a string to a valid safe filename","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:filenamify:filenamify:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/filenamify@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/filenamify/package.json"}]},{"bom-ref":"pkg:npm/fill-range@7.1.1?package-id=cc2dfc20694f22cb","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Edo Rivai (edo.rivai.nl), Jon Schlinkert (http://twitter.com/jonschlinkert), Paul Miller (paulmillr.com), Rouven Weßling (www.rouvenwessling.de), ","name":"fill-range","version":"7.1.1","description":"Fill in a range of numbers or letters, optionally passing an increment or `step` to use, or create a regex-compatible range with `options.toRegex`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:fill-range:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/fill-range@7.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/fill-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill-range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill_range:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill-range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fill:fill_range:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fill-range/package.json"}]},{"bom-ref":"pkg:npm/finale-rest@1.2.2?package-id=0081831c03dd4ad6","type":"library","author":"Tom Juszczyk <tomkj4@gmail.com>, Matt Broadstone <mbroadst@gmail.com>, David Chester <dchester@shutterstock.com>, Renzo Rozza Gonzalez <renzo.rozza@gmail.com>","name":"finale-rest","version":"1.2.2","description":"Create REST resources and controllers with Sequelize and Express or Restify","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tommybananas:finale-rest:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/finale-rest@1.2.2","externalReferences":[{"url":"https://github.com/tommybananas/finale.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tommybananas:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale-rest:finale-rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale-rest:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale_rest:finale-rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale_rest:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale:finale-rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:finale:finale_rest:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/finale-rest/package.json"}]},{"bom-ref":"pkg:npm/finalhandler@1.3.2?package-id=6905017da79206c8","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"finalhandler","version":"1.3.2","description":"Node.js final http responder","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:finalhandler:finalhandler:1.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/finalhandler@1.3.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/finalhandler/package.json"}]},{"bom-ref":"pkg:npm/find-up@4.1.0?package-id=3413282984ba957b","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"find-up","version":"4.1.0","description":"Find a file or directory by walking up parent directories","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:find-up:find-up:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/find-up@4.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:find-up:find_up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find_up:find-up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find_up:find_up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find:find-up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:find:find_up:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/find-up/package.json"}]},{"bom-ref":"pkg:npm/findup-sync@4.0.0?package-id=6a5e9cbc54d4e98e","type":"library","author":"Gulp Team <team@gulpjs.com> (https://gulpjs.com/), Ben Alman <cowboy@rj3.net>, Tyler Kellen <tyler@sleekcode.net>, Jon Schlinkert <jon.schlinkert@sellside.com>, Blaine Bublitz <blaine.bublitz@gmail.com>","name":"findup-sync","version":"4.0.0","description":"Find the first file matching a given pattern in the current directory or the nearest ancestor directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:findup-sync:findup-sync:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/findup-sync@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup-sync:findup_sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup-sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup_sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup-sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup_sync:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json"}]},{"bom-ref":"pkg:npm/findup-sync@5.0.0?package-id=0c79bed4d968f86a","type":"library","author":"Gulp Team <team@gulpjs.com> (https://gulpjs.com/), Ben Alman <cowboy@rj3.net>, Tyler Kellen <tyler@sleekcode.net>, Jon Schlinkert <jon.schlinkert@sellside.com>, Blaine Bublitz <blaine.bublitz@gmail.com>","name":"findup-sync","version":"5.0.0","description":"Find the first file matching a given pattern in the current directory or the nearest ancestor directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:findup-sync:findup-sync:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/findup-sync@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup-sync:findup_sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup-sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup_sync:findup_sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup-sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:findup:findup_sync:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/findup-sync/package.json"}]},{"bom-ref":"pkg:npm/fined@1.2.0?package-id=d4103ef83c6d123b","type":"library","author":"Gulp Team <team@gulpjs.com> (http://gulpjs.com/), Takayuki Sato <sttk.xslet@gmail.com>, Blaine Bublitz <blaine.bublitz@gmail.com>","name":"fined","version":"1.2.0","description":"Find a file given a declaration of locations.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fined:fined:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/fined@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fined/package.json"}]},{"bom-ref":"pkg:npm/flagged-respawn@1.0.1?package-id=cb10ed4f13e99eda","type":"library","author":"Gulp Team <team@gulpjs.com> (http://gulpjs.com/), Takayuki Sato <sttk.xslet@gmail.com>, Bertrand Marron <bertrand.marron@ionisx.com>, Tyler Kellen <tyler@sleekcode.net>, Blaine Bublitz <blaine.bublitz@gmail.com>","name":"flagged-respawn","version":"1.0.1","description":"A tool for respawning node binaries when special flags are present.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:flagged-respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/flagged-respawn@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged-respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged_respawn:flagged-respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged_respawn:flagged_respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged:flagged-respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:flagged:flagged_respawn:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/flagged-respawn/package.json"}]},{"bom-ref":"pkg:npm/fn.name@1.1.0?package-id=b0ab3f38f00f9e67","type":"library","author":"Arnout Kazemier","name":"fn.name","version":"1.1.0","description":"Extract names from functions","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:fn.name:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fn.name@1.1.0","externalReferences":[{"url":"https://github.com/3rd-Eden/fn.name","type":"distribution"},{"url":"https://github.com/3rd-Eden/fn.name","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fn.name:fn.name:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fn.name/package.json"}]},{"bom-ref":"pkg:npm/fontkit@1.9.0?package-id=4d71c5f55dc211a8","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"fontkit","version":"1.9.0","description":"An advanced font engine for Node and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:foliojs:fontkit:1.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/fontkit@1.9.0","externalReferences":[{"url":"git://github.com/foliojs/fontkit.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fontkit:fontkit:1.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fontkit/package.json"}]},{"bom-ref":"pkg:npm/for-each@0.3.5?package-id=a555afc10b78c8e9","type":"library","author":"Raynos <raynos2@gmail.com>, Jake Verbaten, Jordan Harband (https://github.com/ljharb)","name":"for-each","version":"0.3.5","description":"A better forEach","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:for-each:for-each:0.3.5:*:*:*:*:*:*:*","purl":"pkg:npm/for-each@0.3.5","externalReferences":[{"url":"https://github.com/Raynos/for-each.git","type":"distribution"},{"url":"https://github.com/Raynos/for-each","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-each:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_each:for-each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_each:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:for-each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for-each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for_each:0.3.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/for-each/package.json"}]},{"bom-ref":"pkg:npm/for-in@1.0.2?package-id=967e44e4af521888","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert), Paul Irish (http://paulirish.com)","name":"for-in","version":"1.0.2","description":"Iterate over the own and inherited enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:for-in:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/for-in@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/for-in","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-in:for-in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-in:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_in:for-in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_in:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for-in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for_in:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/for-in/package.json"}]},{"bom-ref":"pkg:npm/for-own@1.0.0?package-id=411a3440348fb71b","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Javier Cejudo <javier@javiercejudo.com> (https://www.javiercejudo.com), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert)","name":"for-own","version":"1.0.0","description":"Iterate over the own enumerable properties of an object, and return an object with properties that evaluate to true from the callback. Exit early by returning `false`. JavaScript/Node.js.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:for-own:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/for-own@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/for-own","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-own:for-own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for-own:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_own:for-own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for_own:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for-own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:for:for_own:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/for-own/package.json"}]},{"bom-ref":"pkg:npm/foreachasync@3.0.0?package-id=386d38aff1a706fc","type":"library","author":"AJ ONeal <coolaj86@gmail.com> (http://coolaj86.com/)","name":"foreachasync","version":"3.0.0","description":"A node- and browser-ready async counterpart of Array.prototype.forEach","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:foreachasync:foreachasync:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/foreachasync@3.0.0","externalReferences":[{"url":"git://github.com/FuturesJS/forEachAsync.git","type":"distribution"},{"url":"https://github.com/FuturesJS/forEachAsync","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:FuturesJS:foreachasync:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/foreachasync/package.json"}]},{"bom-ref":"pkg:npm/foreground-child@3.3.1?package-id=49b05c8a83bc898e","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"foreground-child","version":"3.3.1","description":"Run a child as if it's the foreground process. Give it stdio. Exit when it exits.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:foreground-child:foreground-child:3.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/foreground-child@3.3.1","externalReferences":[{"url":"git+https://github.com/tapjs/foreground-child.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground-child:foreground_child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground_child:foreground-child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground_child:foreground_child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground:foreground-child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:foreground:foreground_child:3.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/foreground-child/package.json"}]},{"bom-ref":"pkg:npm/forwarded@0.2.0?package-id=cf9f575adc30e843","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"forwarded","version":"0.2.0","description":"Parse HTTP X-Forwarded-For header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:forwarded_project:forwarded:0.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/forwarded@0.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/forwarded/package.json"}]},{"bom-ref":"pkg:npm/fresh@0.5.2?package-id=c33f6af8ffbc3ffd","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"fresh","version":"0.5.2","description":"HTTP response freshness testing","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fresh_project:fresh:0.5.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/fresh@0.5.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fresh/package.json"}]},{"bom-ref":"pkg:npm/from2@2.3.0?package-id=f049b24706a2c914","type":"library","author":"Hugh Kennedy <hughskennedy@gmail.com> (http://hughsk.io/), Mathias Buus <mathiasbuus@gmail.com>","name":"from2","version":"2.3.0","description":"Convenience wrapper for ReadableStream, with an API lifted from \"from\" and \"through2\"","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hughsk:from2:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/from2@2.3.0","externalReferences":[{"url":"git://github.com/hughsk/from2","type":"distribution"},{"url":"https://github.com/hughsk/from2","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:from2:from2:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/from2/package.json"}]},{"bom-ref":"pkg:npm/frontend@20.0.0?package-id=820ce7954665253b","type":"library","name":"frontend","version":"20.0.0","cpe":"cpe:2.3:a:frontend:frontend:20.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/frontend@20.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/frontend/package.json"}]},{"bom-ref":"pkg:npm/fs-constants@1.0.0?package-id=702abc5d79be7e46","type":"library","author":"Mathias Buus (@mafintosh)","name":"fs-constants","version":"1.0.0","description":"Require constants across node and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:fs-constants:fs-constants:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs-constants@1.0.0","externalReferences":[{"url":"https://github.com/mafintosh/fs-constants.git","type":"distribution"},{"url":"https://github.com/mafintosh/fs-constants","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-constants:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_constants:fs-constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_constants:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:fs-constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_constants:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs-constants/package.json"}]},{"bom-ref":"pkg:npm/fs-extra@9.1.0?package-id=59256da7fb4a7586","type":"library","author":"JP Richardson <jprichardson@gmail.com>","name":"fs-extra","version":"9.1.0","description":"fs-extra contains methods that aren't included in the vanilla Node.js fs package. Such as recursive mkdir, copy, and remove.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jprichardson:fs-extra:9.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs-extra@9.1.0","externalReferences":[{"url":"https://github.com/jprichardson/node-fs-extra","type":"distribution"},{"url":"https://github.com/jprichardson/node-fs-extra","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jprichardson:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-extra:fs-extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-extra:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_extra:fs-extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_extra:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_extra:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs-extra/package.json"}]},{"bom-ref":"pkg:npm/fs-minipass@1.2.7?package-id=d8cf35e6758fddb2","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"fs-minipass","version":"1.2.7","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs-minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*","purl":"pkg:npm/fs-minipass@1.2.7","externalReferences":[{"url":"git+https://github.com/npm/fs-minipass.git","type":"distribution"},{"url":"https://github.com/npm/fs-minipass#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs-minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs-minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_minipass:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/fs-minipass@2.1.0?package-id=34b0337b00752017","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"fs-minipass","version":"2.1.0","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs-minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs-minipass@2.1.0","externalReferences":[{"url":"git+https://github.com/npm/fs-minipass.git","type":"distribution"},{"url":"https://github.com/npm/fs-minipass#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs-minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs-minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_minipass:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/fs-minipass@3.0.3?package-id=ddb32fc1590fd08c","type":"library","author":"GitHub Inc.","name":"fs-minipass","version":"3.0.3","description":"fs read and write streams based on minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs-minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/fs-minipass@3.0.3","externalReferences":[{"url":"https://github.com/npm/fs-minipass.git","type":"distribution"},{"url":"https://github.com/npm/fs-minipass#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs-minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs-minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs_minipass:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs-minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs-minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:fs:fs_minipass:3.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs-minipass/package.json"}]},{"bom-ref":"pkg:npm/fs.realpath@1.0.0?package-id=5215a4272ae071b5","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"fs.realpath","version":"1.0.0","description":"Use node's fs.realpath, but fall back to the JS implementation if the native one fails","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fs.realpath:fs.realpath:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/fs.realpath@1.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/fs.realpath.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fs.realpath/package.json"}]},{"bom-ref":"pkg:npm/fstream@1.0.12?package-id=a2282a5fe21d6573","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"fstream","version":"1.0.12","description":"Advanced file system stream things","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:fstream:fstream:1.0.12:*:*:*:*:*:*:*","purl":"pkg:npm/fstream@1.0.12","externalReferences":[{"url":"https://github.com/npm/fstream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:fstream:1.0.12:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/fstream/package.json"}]},{"bom-ref":"pkg:npm/function-bind@1.1.2?package-id=e034b9e16a017cc2","type":"library","author":"Raynos <raynos2@gmail.com>, Raynos, Jordan Harband (https://github.com/ljharb)","name":"function-bind","version":"1.1.2","description":"Implementation of Function.prototype.bind","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:function-bind:function-bind:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/function-bind@1.1.2","externalReferences":[{"url":"https://github.com/Raynos/function-bind.git","type":"distribution"},{"url":"https://github.com/Raynos/function-bind","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:function-bind:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function_bind:function-bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function_bind:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function:function-bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:function:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:function-bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Raynos:function_bind:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/function-bind/package.json"}]},{"bom-ref":"pkg:npm/functions-have-names@1.2.3?package-id=b2e38e0035342c0b","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"functions-have-names","version":"1.2.3","description":"Does this JS environment support the `name` property on functions?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:functions-have-names:functions-have-names:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/functions-have-names@1.2.3","externalReferences":[{"url":"git+https://github.com/inspect-js/functions-have-names.git","type":"distribution"},{"url":"https://github.com/inspect-js/functions-have-names#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions-have-names:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have_names:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have_names:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions-have:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions-have:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions_have:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions:functions-have-names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:functions:functions_have_names:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/functions-have-names/package.json"}]},{"bom-ref":"pkg:npm/gauge@2.7.4?package-id=d33d667d43d843b2","type":"library","author":"Rebecca Turner <me@re-becca.org>","name":"gauge","version":"2.7.4","description":"A terminal based horizontal guage","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:gauge:gauge:2.7.4:*:*:*:*:*:*:*","purl":"pkg:npm/gauge@2.7.4","externalReferences":[{"url":"https://github.com/iarna/gauge","type":"distribution"},{"url":"https://github.com/iarna/gauge","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:gauge:2.7.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/package.json"}]},{"bom-ref":"pkg:npm/gauge@4.0.4?package-id=3ebce6a81a69f49f","type":"library","author":"GitHub Inc.","name":"gauge","version":"4.0.4","description":"A terminal based horizontal gauge","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:gauge:gauge:4.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/gauge@4.0.4","externalReferences":[{"url":"https://github.com/npm/gauge.git","type":"distribution"},{"url":"https://github.com/npm/gauge","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:gauge:4.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json"}]},{"bom-ref":"pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14","type":"library","publisher":"Debian GCC Maintainers <debian-gcc@lists.debian.org>","name":"gcc-14-base","version":"14.2.0-19","licenses":[{"license":{"name":"sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"}}],"cpe":"cpe:2.3:a:gcc-14-base:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*","purl":"pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-14-base:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_14_base:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_14_base:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-14:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc-14:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_14:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc_14:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc:gcc-14-base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gcc:gcc_14_base:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/gcc-14-base"},{"name":"syft:location:1:layerID","value":"sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"},{"name":"syft:location:1:path","value":"/usr/share/doc/gcc-14-base/copyright"},{"name":"syft:location:2:layerID","value":"sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/gcc-14-base.md5sums"},{"name":"syft:metadata:installedSize","value":"112"},{"name":"syft:metadata:source","value":"gcc-14"}]},{"bom-ref":"pkg:npm/geojson-utils@1.1.0?package-id=ad6fe893f4863fc3","type":"library","author":"Max Ogden","name":"geojson-utils","version":"1.1.0","description":"GeoJSON Utilities for JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:geojson-utils:geojson-utils:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/geojson-utils@1.1.0","externalReferences":[{"url":"git://github.com/maxogden/geojson-js-utils.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson-utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson_utils:geojson-utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson_utils:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:geojson-utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:maxogden:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson:geojson-utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:geojson:geojson_utils:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/geojson-utils/package.json"}]},{"bom-ref":"pkg:npm/get-caller-file@2.0.5?package-id=546d53bc24510f43","type":"library","author":"Stefan Penner","name":"get-caller-file","version":"2.0.5","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:get-caller-file:get-caller-file:2.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/get-caller-file@2.0.5","externalReferences":[{"url":"git+https://github.com/stefanpenner/get-caller-file.git","type":"distribution"},{"url":"https://github.com/stefanpenner/get-caller-file#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-caller-file:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller_file:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller_file:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanpenner:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stefanpenner:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_caller:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-caller-file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_caller_file:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-caller-file/package.json"}]},{"bom-ref":"pkg:npm/get-intrinsic@1.3.0?package-id=fd30384e3e731beb","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"get-intrinsic","version":"1.3.0","description":"Get and robustly cache all JS language-level intrinsics at first require time","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-intrinsic@1.3.0","externalReferences":[{"url":"git+https://github.com/ljharb/get-intrinsic.git","type":"distribution"},{"url":"https://github.com/ljharb/get-intrinsic#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_intrinsic:get-intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_intrinsic:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get-intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_intrinsic:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-intrinsic/package.json"}]},{"bom-ref":"pkg:npm/get-proto@1.0.1?package-id=f140446776201e12","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"get-proto","version":"1.0.1","description":"Robustly get the [[Prototype]] of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-proto:get-proto:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/get-proto@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/get-proto.git","type":"distribution"},{"url":"https://github.com/ljharb/get-proto#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-proto:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_proto:get-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_proto:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_proto:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-proto/package.json"}]},{"bom-ref":"pkg:npm/get-stream@2.3.1?package-id=2cd76cc08fac13f8","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"get-stream","version":"2.3.1","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:2.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@2.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-stream@3.0.0?package-id=529f1c9fb766b433","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"get-stream","version":"3.0.0","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-stream@3.0.0?package-id=a688b423aa001971","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"get-stream","version":"3.0.0","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/got/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/get-stream@4.1.0?package-id=09ae98551bcf5cd8","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"get-stream","version":"4.1.0","description":"Get a stream as a string, buffer, or array","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:get-stream:get-stream:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/get-stream@4.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:get-stream:get_stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get-stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get_stream:get_stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get-stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:get:get_stream:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/get-stream/package.json"}]},{"bom-ref":"pkg:npm/getobject@1.0.2?package-id=206b7d3d675e4f94","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"getobject","version":"1.0.2","description":"get.and.set.deep.objects.easily = true","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:getobject_project:getobject:1.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/getobject@1.0.2","externalReferences":[{"url":"git://github.com/cowboy/node-getobject.git","type":"distribution"},{"url":"https://github.com/cowboy/node-getobject","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/getobject/package.json"}]},{"bom-ref":"pkg:npm/github-from-package@0.0.0?package-id=9021b88a5ab51ee3","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"github-from-package","version":"0.0.0","description":"return the github url from a package.json file","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:github-from-package:github-from-package:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/github-from-package@0.0.0","externalReferences":[{"url":"git://github.com/substack/github-from-package.git","type":"distribution"},{"url":"https://github.com/substack/github-from-package","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:github-from-package:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from_package:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from_package:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github-from:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github-from:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github_from:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github:github-from-package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:github:github_from_package:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/github-from-package/package.json"}]},{"bom-ref":"pkg:npm/glob@10.5.0?package-id=d3e87b073555ed11","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me/)","name":"glob","version":"10.5.0","description":"the most correct and second fastest glob implementation in JavaScript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:10.5.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@10.5.0","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.1.7?package-id=0ff063b9149f88f9","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"glob","version":"7.1.7","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.1.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.1.7","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=ffb7ca9150502f5a","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/move-file/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=cb1579e0fac84290","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=e2fd343720beab4f","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/archiver/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=acbfd4a89a1d4104","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rimraf/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/glob@7.2.3?package-id=48e2cd171ff40be3","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"glob","version":"7.2.3","description":"a little globber","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:glob:7.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/glob@7.2.3","externalReferences":[{"url":"git://github.com/isaacs/node-glob.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/glob/package.json"}]},{"bom-ref":"pkg:npm/global-modules@1.0.0?package-id=e51c05cfa6a53954","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Kiko Beats (https://kikobeats.com)","name":"global-modules","version":"1.0.0","description":"The directory used by npm for globally installed npm modules.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:global-modules:global-modules:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/global-modules@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/global-modules","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:global-modules:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_modules:global-modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_modules:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global-modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global-modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global_modules:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-modules/package.json"}]},{"bom-ref":"pkg:npm/global-prefix@1.0.2?package-id=214a6e1e9476a5ef","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Alexandr Bogachev (https://github.com/rmbaad), Brian Woodward (https://twitter.com/doowb), Charlike Mike Reagent (https://i.am.charlike.online), JasonChang (https://packagist.org/packages/jason-chang), Jon Schlinkert (http://twitter.com/jonschlinkert), Jorrit Schippers (https://www.ncode.nl), Mathias Rasmussen (chrome://dino), Ross Fenning (http://rossfenning.co.uk)","name":"global-prefix","version":"1.0.2","description":"Get the npm global path prefix.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:global-prefix:global-prefix:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/global-prefix@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/global-prefix","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:global-prefix:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_prefix:global-prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global_prefix:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global-prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global-prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:global:global_prefix:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-prefix/package.json"}]},{"bom-ref":"pkg:npm/gopd@1.2.0?package-id=83baf5c5b6922e77","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"gopd","version":"1.2.0","description":"`Object.getOwnPropertyDescriptor`, but accounts for IE's broken implementation.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ljharb:gopd:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/gopd@1.2.0","externalReferences":[{"url":"git+https://github.com/ljharb/gopd.git","type":"distribution"},{"url":"https://github.com/ljharb/gopd#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:gopd:gopd:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gopd/package.json"}]},{"bom-ref":"pkg:npm/got@8.3.2?package-id=5bd1b0995776246c","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop), Alexander Tesfamichael <alex.tesfamichael@gmail.com> (alextes.me)","name":"got","version":"8.3.2","description":"Simplified HTTP requests","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:got:got:8.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/got@8.3.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/got/package.json"}]},{"bom-ref":"pkg:npm/graceful-fs@4.2.11?package-id=efbe6f20b1abe3a8","type":"library","name":"graceful-fs","version":"4.2.11","description":"A drop-in replacement for fs, making various improvements.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:graceful-fs:graceful-fs:4.2.11:*:*:*:*:*:*:*","purl":"pkg:npm/graceful-fs@4.2.11","externalReferences":[{"url":"https://github.com/isaacs/node-graceful-fs","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful-fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful_fs:graceful-fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful_fs:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful:graceful-fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:graceful:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:graceful-fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:graceful_fs:4.2.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/graceful-fs/package.json"}]},{"bom-ref":"pkg:npm/grunt@1.6.2?package-id=51e33e1c59426225","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"grunt","version":"1.6.2","description":"The JavaScript Task Runner","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:gruntjs:grunt:1.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/grunt@1.6.2","externalReferences":[{"url":"https://github.com/gruntjs/grunt.git","type":"distribution"},{"url":"https://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/package.json"}]},{"bom-ref":"pkg:npm/grunt-cli@1.5.0?package-id=97f188b93d04dfa6","type":"library","author":"Grunt Development Team (http://gruntjs.com/development-team)","name":"grunt-cli","version":"1.5.0","description":"The grunt command line interface","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-cli:grunt-cli:1.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-cli@1.5.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-cli:grunt_cli:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_cli:grunt-cli:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_cli:grunt_cli:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-cli:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_cli:1.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-cli/package.json"}]},{"bom-ref":"pkg:npm/grunt-contrib-compress@1.6.0?package-id=96ee58510e0b9ecc","type":"library","author":"Grunt Team (http://gruntjs.com/)","name":"grunt-contrib-compress","version":"1.6.0","description":"Compress files and folders","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-contrib-compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-contrib-compress@1.6.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-contrib-compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib_compress:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib_compress:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_contrib:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-contrib-compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_contrib_compress:1.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/package.json"}]},{"bom-ref":"pkg:npm/grunt-known-options@2.0.0?package-id=91f0ef5736e3a948","type":"library","author":"Grunt Development Team (http://gruntjs.com/development-team)","name":"grunt-known-options","version":"2.0.0","description":"The known options used in Grunt","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-known-options:grunt-known-options:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-known-options@2.0.0","externalReferences":[{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-known-options:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known_options:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known_options:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-known:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-known:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_known:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-known-options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_known_options:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-known-options/package.json"}]},{"bom-ref":"pkg:npm/grunt-legacy-log@3.0.1?package-id=9d59ea0b5bec4707","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"grunt-legacy-log","version":"3.0.1","description":"The Grunt 0.4.x logger.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-legacy-log:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-legacy-log@3.0.1","externalReferences":[{"url":"git://github.com/gruntjs/grunt-legacy-log.git","type":"distribution"},{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-legacy-log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_legacy_log:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log/package.json"}]},{"bom-ref":"pkg:npm/grunt-legacy-log-utils@2.1.3?package-id=df0bb8b3f95a0d4e","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"grunt-legacy-log-utils","version":"2.1.3","description":"Static methods for the Grunt 0.4.x logger.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-legacy-log-utils:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-legacy-log-utils@2.1.3","externalReferences":[{"url":"git://github.com/gruntjs/grunt-legacy-log-utils.git","type":"distribution"},{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log-utils:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log_utils:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log_utils:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-log:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_log:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-legacy-log-utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_legacy_log_utils:2.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/package.json"}]},{"bom-ref":"pkg:npm/grunt-legacy-util@2.0.2?package-id=953128f9ed466782","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"grunt-legacy-util","version":"2.0.2","description":"Some old grunt utils provided for backwards compatibility.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-legacy-util:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-legacy-util@2.0.2","externalReferences":[{"url":"git://github.com/gruntjs/grunt-legacy-util.git","type":"distribution"},{"url":"http://gruntjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy-util:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_util:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy_util:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-legacy:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_legacy:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:gruntjs:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-legacy-util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_legacy_util:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-util/package.json"}]},{"bom-ref":"pkg:npm/grunt-replace-json@0.1.0?package-id=33dc445c60254c99","type":"library","author":"Agustin Croce <agustinc@exo.com.ar>","name":"grunt-replace-json","version":"0.1.0","description":"Updates attributes of json files.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:grunt-replace-json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/grunt-replace-json@0.1.0","externalReferences":[{"url":"https://github.com/exo-dev/grunt-replace-json.git","type":"distribution"},{"url":"https://github.com/exo-dev/grunt-replace-json","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-replace-json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace_json:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace_json:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt-replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt_replace:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exo-dev:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:exo-dev:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt-replace-json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:grunt:grunt_replace_json:0.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-replace-json/package.json"}]},{"bom-ref":"pkg:npm/handlebars@4.7.9?package-id=f8594aa67de6f0a7","type":"library","author":"Yehuda Katz","name":"handlebars","version":"4.7.9","description":"Handlebars provides the power necessary to let you build semantic templates effectively with no frustration","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:handlebars.js_project:handlebars.js:4.7.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/handlebars@4.7.9","externalReferences":[{"url":"https://github.com/handlebars-lang/handlebars.js.git","type":"distribution"},{"url":"https://handlebarsjs.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:handlebarsjs:handlebars:4.7.9:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/handlebars/package.json"}]},{"bom-ref":"pkg:npm/has-ansi@2.0.0?package-id=e42b36bf3b02ccb2","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com)","name":"has-ansi","version":"2.0.0","description":"Check if a string has ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-ansi:has-ansi:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-ansi@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_ansi:has-ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_ansi:has_ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_ansi:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-ansi/package.json"}]},{"bom-ref":"pkg:npm/has-bigints@1.1.0?package-id=71687501ff0fe52a","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"has-bigints","version":"1.1.0","description":"Determine if the JS environment has BigInt support.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-bigints:has-bigints:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-bigints@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/has-bigints.git","type":"distribution"},{"url":"https://github.com/ljharb/has-bigints#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_bigints:has-bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_bigints:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has-bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_bigints:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-bigints/package.json"}]},{"bom-ref":"pkg:npm/has-flag@3.0.0?package-id=3d7118b6bb8495c1","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"has-flag","version":"3.0.0","description":"Check if argv has a specific flag","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-flag:has-flag:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-flag@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-flag:has_flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has-flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has_flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_flag:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-flag/package.json"}]},{"bom-ref":"pkg:npm/has-flag@4.0.0?package-id=886bedfa751a610e","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"has-flag","version":"4.0.0","description":"Check if argv has a specific flag","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-flag:has-flag:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-flag@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-flag:has_flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has-flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_flag:has_flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_flag:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json"}]},{"bom-ref":"pkg:npm/has-property-descriptors@1.0.2?package-id=8da3543c9f5d677c","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"has-property-descriptors","version":"1.0.2","description":"Does the environment have full property descriptor support? Handles IE 8's broken defineProperty/gOPD.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-property-descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/has-property-descriptors@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/has-property-descriptors.git","type":"distribution"},{"url":"https://github.com/inspect-js/has-property-descriptors#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-property-descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property_descriptors:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property_descriptors:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_property:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-property-descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_property_descriptors:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-property-descriptors/package.json"}]},{"bom-ref":"pkg:npm/has-symbol-support-x@1.4.2?package-id=9cdc3fbb4c69858e","type":"library","author":"Graham Fairweather <xotic750@gmail.com>","name":"has-symbol-support-x","version":"1.4.2","description":"Tests if ES6 Symbol is supported.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-symbol-support-x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*","purl":"pkg:npm/has-symbol-support-x@1.4.2","externalReferences":[{"url":"https://github.com/Xotic750/has-symbol-support-x.git","type":"distribution"},{"url":"https://github.com/Xotic750/has-symbol-support-x","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol-support-x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support_x:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support_x:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol-support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol-support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol_support:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbol:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-symbol-support-x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_symbol_support_x:1.4.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-symbol-support-x/package.json"}]},{"bom-ref":"pkg:npm/has-symbols@1.1.0?package-id=d11db59abbaaff57","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"has-symbols","version":"1.1.0","description":"Determine if the JS environment has Symbol support. Supports spec, or shams.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-symbols:has-symbols:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/has-symbols@1.1.0","externalReferences":[{"url":"git://github.com/inspect-js/has-symbols.git","type":"distribution"},{"url":"https://github.com/ljharb/has-symbols#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbols:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_symbols:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_symbols:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-symbols/package.json"}]},{"bom-ref":"pkg:npm/has-to-string-tag-x@1.4.1?package-id=57099c5b40b3237c","type":"library","author":"Graham Fairweather <xotic750@gmail.com>","name":"has-to-string-tag-x","version":"1.4.1","description":"Tests if ES6 @@toStringTag is supported.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-to-string-tag-x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/has-to-string-tag-x@1.4.1","externalReferences":[{"url":"https://github.com/Xotic750/has-to-string-tag-x.git","type":"distribution"},{"url":"https://github.com/Xotic750/has-to-string-tag-x","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string-tag-x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag_x:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag_x:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string-tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string-tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string_tag:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to-string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to_string:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Xotic750:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_to:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-to-string-tag-x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_to_string_tag_x:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-to-string-tag-x/package.json"}]},{"bom-ref":"pkg:npm/has-tostringtag@1.0.2?package-id=e022fba37335d6bc","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"has-tostringtag","version":"1.0.2","description":"Determine if the JS environment has `Symbol.toStringTag` support. Supports spec, or shams.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:has-tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/has-tostringtag@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/has-tostringtag.git","type":"distribution"},{"url":"https://github.com/inspect-js/has-tostringtag#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_tostringtag:has-tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_tostringtag:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has-tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_tostringtag:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-tostringtag/package.json"}]},{"bom-ref":"pkg:npm/has-unicode@2.0.1?package-id=3e71117dc4558f9f","type":"library","author":"Rebecca Turner <me@re-becca.org>","name":"has-unicode","version":"2.0.1","description":"Try to guess if your terminal supports unicode","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:has-unicode:has-unicode:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/has-unicode@2.0.1","externalReferences":[{"url":"https://github.com/iarna/has-unicode","type":"distribution"},{"url":"https://github.com/iarna/has-unicode","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:has-unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_unicode:has-unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has_unicode:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:has-unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has-unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:has:has_unicode:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/has-unicode/package.json"}]},{"bom-ref":"pkg:npm/hashids@2.3.0?package-id=89162caca8f9959a","type":"library","author":"hashids.org <npm@invent.life> (https://github.com/hashids), Ivan Akimov <ivan@barreleye.com> (https://twitter.com/IvanAkimov), Bazyli Brzóska <npm@invent.life> (https://twitter.com/niieani)","name":"hashids","version":"2.3.0","description":"Generate YouTube-like ids from numbers. Use Hashids when you do not want to expose your database ids to the user.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hashids:hashids:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/hashids@2.3.0","externalReferences":[{"url":"https://github.com/niieani/hashids.js.git","type":"distribution"},{"url":"http://hashids.org/javascript","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:niieani:hashids:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hashids/package.json"}]},{"bom-ref":"pkg:npm/hashids-esm?package-id=4d7ad7732dcf2924","type":"library","name":"hashids-esm","version":"UNKNOWN","cpe":"cpe:2.3:a:hashids-esm:hashids-esm:*:*:*:*:*:*:*:*","purl":"pkg:npm/hashids-esm","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids-esm:hashids_esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids_esm:hashids-esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids_esm:hashids_esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids:hashids-esm:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:hashids:hashids_esm:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hashids/esm/package.json"}]},{"bom-ref":"pkg:npm/hasown@2.0.3?package-id=789dc183e76e3e9f","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"hasown","version":"2.0.3","description":"A robust, ES3 compatible, \"has own property\" predicate.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:hasown:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/hasown@2.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/hasOwn.git","type":"distribution"},{"url":"https://github.com/inspect-js/hasOwn#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hasown:hasown:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hasown/package.json"}]},{"bom-ref":"pkg:npm/hbs@4.2.1?package-id=2f82f49c0edfe08d","type":"library","author":"Don Park <donpark@docuverse.com> (http://blog.docuverse.com), Roman Shtylman <shtylman@gmail.com>","name":"hbs","version":"4.2.1","description":"Express.js template engine plugin for Handlebars","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hbs_project:hbs:4.2.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/hbs@4.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hbs/package.json"}]},{"bom-ref":"pkg:npm/he@0.4.1?package-id=c1acb688ae0eb8a3","type":"library","author":"Mathias Bynens (http://mathiasbynens.be/)","name":"he","version":"0.4.1","description":"A robust HTML entities encoder/decoder with full Unicode support.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mathiasbynens:he:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/he@0.4.1","externalReferences":[{"url":"https://github.com/mathiasbynens/he.git","type":"distribution"},{"url":"http://mths.be/he","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:he:he:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/he/package.json"}]},{"bom-ref":"pkg:npm/helmet@4.6.0?package-id=78e8bd8351bc0a93","type":"library","author":"Adam Baldwin <adam@npmjs.com> (https://evilpacket.net), Evan Hahn <me@evanhahn.com> (https://evanhahn.com), Ameen Abdeen <ameen.abdeen.se@gmail.com>","name":"helmet","version":"4.6.0","description":"help secure Express/Connect apps with various HTTP headers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:helmetjs:helmet:4.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/helmet@4.6.0","externalReferences":[{"url":"git://github.com/helmetjs/helmet.git","type":"distribution"},{"url":"https://helmetjs.github.io/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:helmet:helmet:4.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/helmet/package.json"}]},{"bom-ref":"pkg:npm/hoister@0.0.2?package-id=2a78cde116b73996","type":"library","author":"Matt McKegg","name":"hoister","version":"0.0.2","description":"Put all function and variable declarations at the top of the scope in an AST","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:hoister:hoister:0.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/hoister@0.0.2","externalReferences":[{"url":"https://github.com/mmckegg/hoister.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mmckegg:hoister:0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hoister/package.json"}]},{"bom-ref":"pkg:npm/homedir-polyfill@1.0.3?package-id=8fe8e9465b9662f0","type":"library","author":"Brian Woodward (https://github.com/doowb)","name":"homedir-polyfill","version":"1.0.3","description":"Node.js os.homedir polyfill for older versions of node.js.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:homedir-polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/homedir-polyfill@1.0.3","externalReferences":[{"url":"https://github.com/doowb/homedir-polyfill","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir-polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir_polyfill:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir_polyfill:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:homedir:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:homedir-polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:homedir_polyfill:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/homedir-polyfill/package.json"}]},{"bom-ref":"pkg:npm/hooker@0.2.3?package-id=6e5642e695422045","type":"library","author":"\"Cowboy\" Ben Alman (http://benalman.com/)","name":"hooker","version":"0.2.3","description":"Monkey-patch (hook) functions for debugging and stuff.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cowboy:hooker:0.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/hooker@0.2.3","externalReferences":[{"url":"git://github.com/cowboy/javascript-hooker.git","type":"distribution"},{"url":"http://github.com/cowboy/javascript-hooker","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:hooker:hooker:0.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/hooker/package.json"}]},{"bom-ref":"pkg:npm/html-entities@1.4.0?package-id=351099be57f5afec","type":"library","author":"Marat Dulin <mdevils@yandex.ru>","name":"html-entities","version":"1.4.0","description":"Faster HTML entities encode/decode library.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:html-entities:html-entities:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/html-entities@1.4.0","externalReferences":[{"url":"https://github.com/mdevils/node-html-entities.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:html-entities:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html_entities:html-entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html_entities:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mdevils:html-entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mdevils:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html:html-entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:html:html_entities:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/html-entities/package.json"}]},{"bom-ref":"pkg:npm/htmlparser2@3.3.0?package-id=00e058af6a435f1c","type":"library","author":"Felix Boehm <me@feedic.com>, Chris Winberry <chris@winberry.net>","name":"htmlparser2","version":"3.3.0","description":"Fast & forgiving HTML/XML/RSS parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:htmlparser2:htmlparser2:3.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/htmlparser2@3.3.0","externalReferences":[{"url":"git://github.com/fb55/htmlparser2.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:fb55:htmlparser2:3.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json"}]},{"bom-ref":"pkg:npm/http-cache-semantics@3.8.1?package-id=bd9e0a0c5346494e","type":"library","author":"Kornel Lesiński <kornel@geekhood.net> (https://kornel.ski/)","name":"http-cache-semantics","version":"3.8.1","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:3.8.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/http-cache-semantics@3.8.1","externalReferences":[{"url":"https://github.com/pornel/http-cache-semantics.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-cache-semantics/package.json"}]},{"bom-ref":"pkg:npm/http-cache-semantics@4.2.0?package-id=d0af3fbe4ae8a36c","type":"library","author":"Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)","name":"http-cache-semantics","version":"4.2.0","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/http-cache-semantics@4.2.0","externalReferences":[{"url":"git+https://github.com/kornelski/http-cache-semantics.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json"}]},{"bom-ref":"pkg:npm/http-cache-semantics@4.2.0?package-id=2a408450d3d46b54","type":"library","author":"Kornel Lesiński <npms2@geekhood.net> (https://kornel.ski/)","name":"http-cache-semantics","version":"4.2.0","description":"Parses Cache-Control and other headers. Helps building correct HTTP caches and proxies","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:http-cache-semantics_project:http-cache-semantics:4.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/http-cache-semantics@4.2.0","externalReferences":[{"url":"git+https://github.com/kornelski/http-cache-semantics.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json"}]},{"bom-ref":"pkg:npm/http-errors@1.8.1?package-id=60acca32325951a0","type":"library","author":"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Alan Plum <me@pluma.io>, Douglas Christopher Wilson <doug@somethingdoug.com>","name":"http-errors","version":"1.8.1","description":"Create HTTP error objects","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-errors:http-errors:1.8.1:*:*:*:*:*:*:*","purl":"pkg:npm/http-errors@1.8.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-errors:http_errors:1.8.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http-errors:1.8.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http_errors:1.8.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-errors:1.8.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_errors:1.8.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json"}]},{"bom-ref":"pkg:npm/http-errors@2.0.1?package-id=de028e640c98e008","type":"library","author":"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Alan Plum <me@pluma.io>, Douglas Christopher Wilson <doug@somethingdoug.com>","name":"http-errors","version":"2.0.1","description":"Create HTTP error objects","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-errors:http-errors:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/http-errors@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-errors:http_errors:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http-errors:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_errors:http_errors:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-errors:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_errors:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-errors/package.json"}]},{"bom-ref":"pkg:npm/http-proxy-agent@4.0.1?package-id=33dca7266e02ca13","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"http-proxy-agent","version":"4.0.1","description":"An HTTP(s) proxy `http.Agent` implementation for HTTP","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-proxy-agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/http-proxy-agent@4.0.1","externalReferences":[{"url":"git://github.com/TooTallNate/node-http-proxy-agent.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy-agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-proxy-agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_proxy_agent:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/http-proxy-agent@7.0.2?package-id=11d816319f4dc947","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"http-proxy-agent","version":"7.0.2","description":"An HTTP(s) proxy `http.Agent` implementation for HTTP","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:http-proxy-agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/http-proxy-agent@7.0.2","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy-agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy_agent:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http-proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http_proxy:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http-proxy-agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:http:http_proxy_agent:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/https-proxy-agent@5.0.1?package-id=55bb2ef3daa202f8","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"https-proxy-agent","version":"5.0.1","description":"An HTTP(s) proxy `http.Agent` implementation for HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:5.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/https-proxy-agent@5.0.1","externalReferences":[{"url":"git://github.com/TooTallNate/node-https-proxy-agent.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/https-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/https-proxy-agent@7.0.6?package-id=d2d5e71e930f6ec3","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"https-proxy-agent","version":"7.0.6","description":"An HTTP(s) proxy `http.Agent` implementation for HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:https-proxy-agent_project:https-proxy-agent:7.0.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/https-proxy-agent@7.0.6","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/https-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/humanize-ms@1.2.1?package-id=47a025b2f115b17c","type":"library","author":"dead-horse <dead_horse@qq.com> (http://deadhorse.me)","name":"humanize-ms","version":"1.2.1","description":"transform humanize time to ms","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-modules:humanize-ms:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/humanize-ms@1.2.1","externalReferences":[{"url":"https://github.com/node-modules/humanize-ms","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-modules:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize-ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize-ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize_ms:humanize-ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize_ms:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize:humanize-ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:humanize:humanize_ms:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/humanize-ms/package.json"}]},{"bom-ref":"pkg:npm/i18n@0.11.1?package-id=ff8810fe24462f72","type":"library","author":"Marcus Spiegel <marcus.spiegel@gmail.com>","name":"i18n","version":"0.11.1","description":"lightweight translation module with dynamic json storage","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:i18n_project:i18n:0.11.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/i18n@0.11.1","externalReferences":[{"url":"http://github.com/mashpie/i18n-node.git","type":"distribution"},{"url":"http://github.com/mashpie/i18n-node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/i18n/package.json"}]},{"bom-ref":"pkg:npm/iconv-lite@0.4.24?package-id=ac38ce6689a29c62","type":"library","author":"Alexander Shtuchkin <ashtuchkin@gmail.com>","name":"iconv-lite","version":"0.4.24","description":"Convert character encodings in pure javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ashtuchkin:iconv-lite:0.4.24:*:*:*:*:*:*:*","purl":"pkg:npm/iconv-lite@0.4.24","externalReferences":[{"url":"git://github.com/ashtuchkin/iconv-lite.git","type":"distribution"},{"url":"https://github.com/ashtuchkin/iconv-lite","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ashtuchkin:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv-lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv-lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv_lite:0.4.24:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/iconv-lite/package.json"}]},{"bom-ref":"pkg:npm/iconv-lite@0.6.3?package-id=e1003a119853fa51","type":"library","author":"Alexander Shtuchkin <ashtuchkin@gmail.com>","name":"iconv-lite","version":"0.6.3","description":"Convert character encodings in pure javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/iconv-lite@0.6.3","externalReferences":[{"url":"git://github.com/ashtuchkin/iconv-lite.git","type":"distribution"},{"url":"https://github.com/ashtuchkin/iconv-lite","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json"}]},{"bom-ref":"pkg:npm/iconv-lite@0.6.3?package-id=8e503ff726974706","type":"library","author":"Alexander Shtuchkin <ashtuchkin@gmail.com>","name":"iconv-lite","version":"0.6.3","description":"Convert character encodings in pure javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ashtuchkin:iconv-lite:0.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/iconv-lite@0.6.3","externalReferences":[{"url":"git://github.com/ashtuchkin/iconv-lite.git","type":"distribution"},{"url":"https://github.com/ashtuchkin/iconv-lite","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ashtuchkin:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv-lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv_lite:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv-lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iconv:iconv_lite:0.6.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json"}]},{"bom-ref":"pkg:npm/ieee754@1.2.1?package-id=6310f32d7b232558","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org), Romain Beauxis <toots@rastageeks.org>","name":"ieee754","version":"1.2.1","description":"Read/write IEEE754 floating point numbers from/to a Buffer or array-like object","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:ieee754:ieee754:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/ieee754@1.2.1","externalReferences":[{"url":"git://github.com/feross/ieee754.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:ieee754:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ieee754/package.json"}]},{"bom-ref":"pkg:npm/ignore-walk@3.0.4?package-id=2e4b859fb5db53f0","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"ignore-walk","version":"3.0.4","description":"Nested/recursive `.gitignore`/`.npmignore` parsing and filtering.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ignore-walk:ignore-walk:3.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/ignore-walk@3.0.4","externalReferences":[{"url":"git+https://github.com/isaacs/ignore-walk.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore-walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore_walk:ignore-walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore_walk:ignore_walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore:ignore-walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ignore:ignore_walk:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ignore-walk/package.json"}]},{"bom-ref":"pkg:npm/iltorb@2.4.5?package-id=56389acc66e9bbcf","type":"library","author":"Nicolas Stepien <stepien.nicolas@gmail.com>, Hung Tran <oohnoitz@gmail.com>","name":"iltorb","version":"2.4.5","description":"Brotli compression/decompression with native bindings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nstepien:iltorb:2.4.5:*:*:*:*:*:*:*","purl":"pkg:npm/iltorb@2.4.5","externalReferences":[{"url":"git://github.com/nstepien/iltorb.git","type":"distribution"},{"url":"https://github.com/nstepien/iltorb","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:iltorb:iltorb:2.4.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/iltorb/package.json"}]},{"bom-ref":"pkg:npm/imurmurhash@0.1.4?package-id=09572f0a0bc74ba7","type":"library","author":"Jens Taylor <jensyt@gmail.com> (https://github.com/homebrewing)","name":"imurmurhash","version":"0.1.4","description":"An incremental implementation of MurmurHash3","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:imurmurhash:imurmurhash:0.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/imurmurhash@0.1.4","externalReferences":[{"url":"https://github.com/jensyt/imurmurhash-js","type":"distribution"},{"url":"https://github.com/jensyt/imurmurhash-js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jensyt:imurmurhash:0.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/imurmurhash/package.json"}]},{"bom-ref":"pkg:npm/indent-string@4.0.0?package-id=affc82d01eae8fae","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"indent-string","version":"4.0.0","description":"Indent each line in a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:indent-string:indent-string:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/indent-string@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent-string:indent_string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent_string:indent-string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent_string:indent_string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent:indent-string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:indent:indent_string:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/indent-string/package.json"}]},{"bom-ref":"pkg:npm/infer-owner@1.0.4?package-id=0ba5cda90a6ec74a","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"infer-owner","version":"1.0.4","description":"Infer the owner of a path based on the owner of its nearest existing parent","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:infer-owner:infer-owner:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/infer-owner@1.0.4","externalReferences":[{"url":"https://github.com/npm/infer-owner","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer-owner:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer_owner:infer-owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer_owner:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer:infer-owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:infer:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:infer-owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:infer_owner:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/infer-owner/package.json"}]},{"bom-ref":"pkg:npm/inflection@1.13.4?package-id=6e2671dca7da065a","type":"library","author":"dreamerslab <ben@dreamerslab.com>, Ryan Schuft <ryan.schuft@gmail.com>, Ben Lin <ben@dreamerslab.com>, Lance Pollard <lancejpollard@gmail.com>, Dane O'Connor <dane.oconnor@gmail.com>, David Miró <lite.3engine@gmail.com>, brandondewitt, luk3thomas, Marcel Klehr, Raymond Feng, Kane Cohen <kanecohen@gmail.com>, Gianni Chiappetta <gianni@runlevel6.org>, Eric Brody, overlookmotel, Patrick Mowrer, Greger Olsson, Jason Crawford <jason@jasoncrawford.org>, Ray Myers <ray.myers@gmail.com>, Dillon Shook <dshook@alumni.nmt.edu>, Patrick Kuen <p.kuen@cloudacy.com>","name":"inflection","version":"1.13.4","description":"A port of inflection-js to node.js module","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dreamerslab:inflection:1.13.4:*:*:*:*:*:*:*","purl":"pkg:npm/inflection@1.13.4","externalReferences":[{"url":"https://github.com/dreamerslab/node.inflection.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inflection:inflection:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/inflection/package.json"}]},{"bom-ref":"pkg:npm/inflight@1.0.6?package-id=ddef02a8605a5e19","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"inflight","version":"1.0.6","description":"Add callbacks to requests in flight to avoid async duplication","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:inflight:inflight:1.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/inflight@1.0.6","externalReferences":[{"url":"https://github.com/npm/inflight.git","type":"distribution"},{"url":"https://github.com/isaacs/inflight","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:inflight:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:inflight:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/inflight/package.json"}]},{"bom-ref":"pkg:npm/inherits@2.0.4?package-id=4446fbeb35a2fa36","type":"library","name":"inherits","version":"2.0.4","description":"Browser-friendly inheritance fully compatible with standard node.js inherits()","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:inherits:inherits:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/inherits@2.0.4","externalReferences":[{"url":"git://github.com/isaacs/inherits","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:inherits:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/inherits/package.json"}]},{"bom-ref":"pkg:npm/ini@1.3.8?package-id=6ddd6811138876ea","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"ini","version":"1.3.8","description":"An ini encoder/decoder for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/ini@1.3.8","externalReferences":[{"url":"git://github.com/isaacs/ini.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-prefix/node_modules/ini/package.json"}]},{"bom-ref":"pkg:npm/ini@1.3.8?package-id=4df1b4c1b6e1b526","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"ini","version":"1.3.8","description":"An ini encoder/decoder for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ini_project:ini:1.3.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/ini@1.3.8","externalReferences":[{"url":"git://github.com/isaacs/ini.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rc/node_modules/ini/package.json"}]},{"bom-ref":"pkg:npm/internal-slot@1.1.0?package-id=2cb332855f0978e4","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"internal-slot","version":"1.1.0","description":"ES spec-like internal slots","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:internal-slot:internal-slot:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/internal-slot@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/internal-slot.git","type":"distribution"},{"url":"https://github.com/ljharb/internal-slot#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal-slot:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal_slot:internal-slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal_slot:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal:internal-slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:internal:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:internal-slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:internal_slot:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/internal-slot/package.json"}]},{"bom-ref":"pkg:npm/interpret@1.1.0?package-id=ef0ffd4514fbc5b0","type":"library","author":"Tyler Kellen (http://goingslowly.com/)","name":"interpret","version":"1.1.0","description":"A dictionary of file extensions and associated module loaders.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:interpret:interpret:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/interpret@1.1.0","externalReferences":[{"url":"git://github.com/tkellen/node-interpret.git","type":"distribution"},{"url":"https://github.com/tkellen/node-interpret","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tkellen:interpret:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/interpret/package.json"}]},{"bom-ref":"pkg:npm/into-stream@3.1.0?package-id=fc003e7e8cee4468","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"into-stream","version":"3.1.0","description":"Convert a buffer/string/array/object/iterable/promise into a stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:into-stream:into-stream:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/into-stream@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:into-stream:into_stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into_stream:into-stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into_stream:into_stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into:into-stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:into:into_stream:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/into-stream/package.json"}]},{"bom-ref":"pkg:npm/invalid_main?package-id=2320fb69c45985de","type":"library","name":"invalid_main","version":"UNKNOWN","cpe":"cpe:2.3:a:invalid-main:invalid-main:*:*:*:*:*:*:*:*","purl":"pkg:npm/invalid_main","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid-main:invalid_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid_main:invalid-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid_main:invalid_main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid:invalid-main:*:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:invalid:invalid_main:*:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json"}]},{"bom-ref":"pkg:npm/invariant@2.2.4?package-id=2b89e9158c0c13bf","type":"library","author":"Andres Suarez <zertosh@gmail.com>","name":"invariant","version":"2.2.4","description":"invariant","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:invariant:invariant:2.2.4:*:*:*:*:*:*:*","purl":"pkg:npm/invariant@2.2.4","externalReferences":[{"url":"https://github.com/zertosh/invariant","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:zertosh:invariant:2.2.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/invariant/package.json"}]},{"bom-ref":"pkg:npm/ip-address@10.2.0?package-id=53d74670fdc23666","type":"library","author":"Beau Gunderson <beau@beaugunderson.com> (https://beaugunderson.com/)","name":"ip-address","version":"10.2.0","description":"A library for parsing IPv4 and IPv6 IP addresses in node and the browser.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:beaugunderson:ip-address:10.2.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ip-address@10.2.0","externalReferences":[{"url":"git://github.com/beaugunderson/ip-address.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ip-address/package.json"}]},{"bom-ref":"pkg:npm/ip6@0.2.13?package-id=1e1e691421c815b4","type":"library","author":"Qian Chen","name":"ip6","version":"0.2.13","description":"IPv6 address helper utilities.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:elgs:ip6:0.2.13:*:*:*:*:*:*:*","purl":"pkg:npm/ip6@0.2.13","externalReferences":[{"url":"git+https://github.com/elgs/ip6.git","type":"distribution"},{"url":"https://github.com/elgs/ip6#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ip6:ip6:0.2.13:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ip6/package.json"}]},{"bom-ref":"pkg:npm/ipaddr.js@1.9.1?package-id=e0e0b515b51cb94b","type":"library","author":"whitequark <whitequark@whitequark.org>","name":"ipaddr.js","version":"1.9.1","description":"A library for manipulating IPv4 and IPv6 addresses in JavaScript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:whitequark:ipaddr.js:1.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/ipaddr.js@1.9.1","externalReferences":[{"url":"git://github.com/whitequark/ipaddr.js","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ipaddr.js:ipaddr.js:1.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ipaddr.js/package.json"}]},{"bom-ref":"pkg:npm/is-absolute@1.0.0?package-id=0512f66f9555653e","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Elan Shanker (https://github.com/es128), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io), ","name":"is-absolute","version":"1.0.0","description":"Returns true if a file path is absolute. Does not rely on the path module and can be used as a polyfill for node.js native `path.isAbolute`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-absolute:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-absolute@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-absolute","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-absolute:is-absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-absolute:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_absolute:is-absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_absolute:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_absolute:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-absolute/package.json"}]},{"bom-ref":"pkg:npm/is-arguments@1.2.0?package-id=c249422b6e0036a2","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"is-arguments","version":"1.2.0","description":"Is this an arguments object? It's a harder question than you think.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-arguments:is-arguments:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-arguments@1.2.0","externalReferences":[{"url":"git://github.com/inspect-js/is-arguments.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-arguments","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_arguments:is-arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_arguments:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_arguments:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-arguments/package.json"}]},{"bom-ref":"pkg:npm/is-array-buffer@3.0.5?package-id=d9958b6373169d4d","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-array-buffer","version":"3.0.5","description":"Is this value a JS ArrayBuffer?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-array-buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/is-array-buffer@3.0.5","externalReferences":[{"url":"git+https://github.com/inspect-js/is-array-buffer.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-array-buffer#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-array-buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array_buffer:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array_buffer:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_array:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-array-buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_array_buffer:3.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-array-buffer/package.json"}]},{"bom-ref":"pkg:npm/is-bigint@1.1.0?package-id=70e6035521bca2e6","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-bigint","version":"1.1.0","description":"Is this value an ES BigInt?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-bigint:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-bigint@1.1.0","externalReferences":[{"url":"git+https://github.com/inspect-js/is-bigint.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-bigint#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_bigint:is-bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_bigint:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_bigint:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-bigint/package.json"}]},{"bom-ref":"pkg:npm/is-boolean-object@1.2.2?package-id=4f4be33a0614ffc4","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-boolean-object","version":"1.2.2","description":"Is this value a JS Boolean? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-boolean-object:is-boolean-object:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-boolean-object@1.2.2","externalReferences":[{"url":"git://github.com/inspect-js/is-boolean-object.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-boolean-object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean_object:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean_object:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_boolean:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-boolean-object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_boolean_object:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-boolean-object/package.json"}]},{"bom-ref":"pkg:npm/is-callable@1.2.7?package-id=e47af72ad358fc5c","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"is-callable","version":"1.2.7","description":"Is this JS value callable? Works with Functions and GeneratorFunctions, despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-callable:is-callable:1.2.7:*:*:*:*:*:*:*","purl":"pkg:npm/is-callable@1.2.7","externalReferences":[{"url":"git://github.com/inspect-js/is-callable.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-callable:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_callable:is-callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_callable:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_callable:1.2.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-callable/package.json"}]},{"bom-ref":"pkg:npm/is-core-module@2.16.2?package-id=e5c7b25e51d0e4a0","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-core-module","version":"2.16.2","description":"Is this specifier a node.js core module?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-core-module:is-core-module:2.16.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-core-module@2.16.2","externalReferences":[{"url":"git+https://github.com/inspect-js/is-core-module.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-core-module","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-core-module:is_core_module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core_module:is-core-module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core_module:is_core_module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-core-module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_core_module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-core:is-core-module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-core:is_core_module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core:is-core-module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_core:is_core_module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-core-module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_core_module:2.16.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-core-module/package.json"}]},{"bom-ref":"pkg:npm/is-date-object@1.1.0?package-id=4d742be2d09ada71","type":"library","author":"Jordan Harband","name":"is-date-object","version":"1.1.0","description":"Is this value a JS Date object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-date-object:is-date-object:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-date-object@1.1.0","externalReferences":[{"url":"git://github.com/inspect-js/is-date-object.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-date-object:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date_object:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date_object:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-date:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-date:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_date:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-date-object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_date_object:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-date-object/package.json"}]},{"bom-ref":"pkg:npm/is-expression@4.0.0?package-id=025b1622a77b0169","type":"library","author":"Timothy Gu <timothygu99@gmail.com>","name":"is-expression","version":"4.0.0","description":"Check if a string is a valid JavaScript expression","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-expression:is-expression:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-expression@4.0.0","externalReferences":[{"url":"https://github.com/pugjs/is-expression.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-expression:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_expression:is-expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_expression:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:is-expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_expression:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-expression/package.json"}]},{"bom-ref":"pkg:npm/is-extglob@2.1.1?package-id=7f72b5b8f89d7183","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-extglob","version":"2.1.1","description":"Returns true if a string has an extglob.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-extglob:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-extglob@2.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/is-extglob","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extglob:is-extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-extglob:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extglob:is-extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_extglob:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_extglob:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-extglob/package.json"}]},{"bom-ref":"pkg:npm/is-fullwidth-code-point@1.0.0?package-id=68fe94da8f6466e7","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"is-fullwidth-code-point","version":"1.0.0","description":"Check if the character represented by a given Unicode code point is fullwidth","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-fullwidth-code-point@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-fullwidth-code-point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_fullwidth_code_point:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json"}]},{"bom-ref":"pkg:npm/is-fullwidth-code-point@2.0.0?package-id=fac6f12e8720a1b3","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"is-fullwidth-code-point","version":"2.0.0","description":"Check if the character represented by a given Unicode code point is fullwidth","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-fullwidth-code-point@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-fullwidth-code-point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_fullwidth_code_point:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json"}]},{"bom-ref":"pkg:npm/is-fullwidth-code-point@3.0.0?package-id=ceb97ce06d62ac60","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"is-fullwidth-code-point","version":"3.0.0","description":"Check if the character represented by a given Unicode code point is fullwidth","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-fullwidth-code-point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-fullwidth-code-point@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code-point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code_point:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth-code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth_code:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_fullwidth:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-fullwidth-code-point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_fullwidth_code_point:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-fullwidth-code-point/package.json"}]},{"bom-ref":"pkg:npm/is-glob@4.0.3?package-id=c962a2f9025eb914","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Brian Woodward (https://twitter.com/doowb), Daniel Perez (https://tuvistavie.com), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"is-glob","version":"4.0.3","description":"Returns `true` if the given string looks like a glob pattern or an extglob pattern. This makes it easy to create code that only uses external modules like node-glob when necessary, resulting in much faster code execution and initialization time, and a better user experience.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:micromatch:is-glob:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-glob@4.0.3","externalReferences":[{"url":"https://github.com/micromatch/is-glob","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-glob:is-glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-glob:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_glob:is-glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_glob:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_glob:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-glob/package.json"}]},{"bom-ref":"pkg:npm/is-lambda@1.0.1?package-id=d9cbeeda741b13b2","type":"library","author":"Thomas Watson Steen <w@tson.dk> (https://twitter.com/wa7son)","name":"is-lambda","version":"1.0.1","description":"Detect if your code is running on an AWS Lambda server","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-lambda:is-lambda:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-lambda@1.0.1","externalReferences":[{"url":"https://github.com/watson/is-lambda.git","type":"distribution"},{"url":"https://github.com/watson/is-lambda","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-lambda:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_lambda:is-lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_lambda:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:watson:is-lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:watson:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_lambda:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-lambda/package.json"}]},{"bom-ref":"pkg:npm/is-map@2.0.3?package-id=7aeb57cf02726c97","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-map","version":"2.0.3","description":"Is this value a JS Map? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-map:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-map@2.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/is-map.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-map#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-map:is-map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-map:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_map:is-map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_map:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_map:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-map/package.json"}]},{"bom-ref":"pkg:npm/is-natural-number@4.0.1?package-id=5f3943fd8b1b46a9","type":"library","author":"Shinnosuke Watanabe (https://github.com/shinnn)","name":"is-natural-number","version":"4.0.1","description":"Check if a value is a natural number","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-natural-number:is-natural-number:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-natural-number@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-natural-number:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural_number:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural_number:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-natural:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-natural:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_natural:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-natural-number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_natural_number:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-natural-number/package.json"}]},{"bom-ref":"pkg:npm/is-number@7.0.0?package-id=ef651aa972136a02","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Olsten Larck (https://i.am.charlike.online), Rouven Weßling (www.rouvenwessling.de)","name":"is-number","version":"7.0.0","description":"Returns true if a number or string value is a finite number. Useful for regex matches, parsing, user input, etc.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-number:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-number@7.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-number","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number/package.json"}]},{"bom-ref":"pkg:npm/is-number-like@1.0.8?package-id=045ed23701e3dcd7","type":"library","author":"Vigour.io <dev@vigour.io>, Jim De Beer <jim@vigour.io>, Shawn Inder <shawn@vigour.io>","name":"is-number-like","version":"1.0.8","description":"Checks whether provided parameter looks like a number","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:is-number-like:is-number-like:1.0.8:*:*:*:*:*:*:*","purl":"pkg:npm/is-number-like@1.0.8","externalReferences":[{"url":"git+https://github.com/vigour-io/is-number-like.git","type":"distribution"},{"url":"https://github.com/vigour-io/is-number-like#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number-like:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_like:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_like:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vigour-io:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:vigour-io:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number-like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number_like:1.0.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number-like/package.json"}]},{"bom-ref":"pkg:npm/is-number-object@1.1.1?package-id=e69c6205dff000a1","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-number-object","version":"1.1.1","description":"Is this value a JS Number object? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-number-object:is-number-object:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-number-object@1.1.1","externalReferences":[{"url":"git://github.com/inspect-js/is-number-object.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-number-object#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number-object:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_object:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number_object:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-number:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_number:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-number-object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_number_object:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-number-object/package.json"}]},{"bom-ref":"pkg:npm/is-object@1.0.2?package-id=080098421fa0b116","type":"library","author":"Raynos <raynos2@gmail.com>, Raynos, Jordan Harband (https://github.com/ljharb)","name":"is-object","version":"1.0.2","description":"Checks whether a value is an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-object:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-object@1.0.2","externalReferences":[{"url":"git://github.com/inspect-js/is-object.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-object","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-object:is-object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-object:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_object:is-object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_object:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_object:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-object/package.json"}]},{"bom-ref":"pkg:npm/is-plain-obj@1.1.0?package-id=85335907c023e35c","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"is-plain-obj","version":"1.1.0","description":"Check if a value is a plain object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-plain-obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-plain-obj@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain-obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_obj:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_obj:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-plain-obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_plain_obj:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-plain-obj/package.json"}]},{"bom-ref":"pkg:npm/is-plain-object@2.0.4?package-id=0cdcb3b46bab4f76","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Osman Nuri Okumuş (http://onokumus.com), Steven Vachon (https://svachon.com), ","name":"is-plain-object","version":"2.0.4","description":"Returns true if an object was created by the `Object` constructor.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-plain-object:is-plain-object:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/is-plain-object@2.0.4","externalReferences":[{"url":"https://github.com/jonschlinkert/is-plain-object","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain-object:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_object:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain_object:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-plain:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_plain:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-plain-object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_plain_object:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-plain-object/package.json"}]},{"bom-ref":"pkg:npm/is-promise@2.2.2?package-id=06d9e6f32c28a5f8","type":"library","author":"ForbesLindesay","name":"is-promise","version":"2.2.2","description":"Test whether an object looks like a promises-a+ promise","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-promise:is-promise:2.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-promise@2.2.2","externalReferences":[{"url":"https://github.com/then/is-promise.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-promise:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_promise:is-promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_promise:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:then:is-promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:then:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_promise:2.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-promise/package.json"}]},{"bom-ref":"pkg:npm/is-regex@1.2.1?package-id=eb42217c762c43fc","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-regex","version":"1.2.1","description":"Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-regex:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-regex@1.2.1","externalReferences":[{"url":"git://github.com/inspect-js/is-regex.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-regex:is-regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-regex:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_regex:is-regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_regex:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_regex:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-regex/package.json"}]},{"bom-ref":"pkg:npm/is-relative@1.0.0?package-id=2efd093414ff4eab","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Shinnosuke Watanabe (https://shinnn.github.io)","name":"is-relative","version":"1.0.0","description":"Returns `true` if the path appears to be relative.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-relative:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-relative@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-relative","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-relative:is-relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-relative:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_relative:is-relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_relative:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_relative:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-relative/package.json"}]},{"bom-ref":"pkg:npm/is-retry-allowed@1.2.0?package-id=4be8fdb80ba2df5a","type":"library","author":"Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)","name":"is-retry-allowed","version":"1.2.0","description":"Is retry allowed for Error?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-retry-allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-retry-allowed@1.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-retry-allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry_allowed:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry_allowed:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_retry:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-retry-allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_retry_allowed:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-retry-allowed/package.json"}]},{"bom-ref":"pkg:npm/is-set@2.0.3?package-id=3636986997116379","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-set","version":"2.0.3","description":"Is this value a JS Set? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-set:2.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/is-set@2.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/is-set.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-set#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-set:is-set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-set:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_set:is-set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_set:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_set:2.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-set/package.json"}]},{"bom-ref":"pkg:npm/is-shared-array-buffer@1.0.4?package-id=be5dd13ccee97384","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"is-shared-array-buffer","version":"1.0.4","description":"Is this value a JS SharedArrayBuffer?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-shared-array-buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/is-shared-array-buffer@1.0.4","externalReferences":[{"url":"git+https://github.com/inspect-js/is-shared-array-buffer.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-shared-array-buffer#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared-array-buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array_buffer:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array_buffer:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared-array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared-array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared_array:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_shared:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-shared-array-buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_shared_array_buffer:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-shared-array-buffer/package.json"}]},{"bom-ref":"pkg:npm/is-stream@1.1.0?package-id=ac3f97806ad63d60","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"is-stream","version":"1.1.0","description":"Check if something is a Node.js stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-stream:is-stream:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-stream@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-stream:is_stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is-stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is_stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_stream:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-stream/package.json"}]},{"bom-ref":"pkg:npm/is-stream@2.0.1?package-id=5b3d2863ea25c0ee","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"is-stream","version":"2.0.1","description":"Check if something is a Node.js stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-stream:is-stream:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-stream@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-stream:is_stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is-stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_stream:is_stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_stream:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/node_modules/is-stream/package.json"}]},{"bom-ref":"pkg:npm/is-string@1.1.1?package-id=f7b87c51d707a2b4","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-string","version":"1.1.1","description":"Is this value a JS String object or primitive? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-string:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-string@1.1.1","externalReferences":[{"url":"git://github.com/inspect-js/is-string.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-string:is-string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-string:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_string:is-string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_string:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_string:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-string/package.json"}]},{"bom-ref":"pkg:npm/is-symbol@1.1.1?package-id=865696304cc6c89b","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-symbol","version":"1.1.1","description":"Determine if a value is an ES6 Symbol or not.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-symbol:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/is-symbol@1.1.1","externalReferences":[{"url":"git://github.com/inspect-js/is-symbol.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_symbol:is-symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_symbol:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_symbol:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-symbol/package.json"}]},{"bom-ref":"pkg:npm/is-typed-array@1.1.15?package-id=241515ad73bdd1d4","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"is-typed-array","version":"1.1.15","description":"Is this value a JS Typed Array? This module works cross-realm/iframe, does not depend on `instanceof` or mutable properties, and despite ES6 Symbol.toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:is-typed-array:is-typed-array:1.1.15:*:*:*:*:*:*:*","purl":"pkg:npm/is-typed-array@1.1.15","externalReferences":[{"url":"git://github.com/inspect-js/is-typed-array.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-typed-array:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed_array:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed_array:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-typed:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-typed:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_typed:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-typed-array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_typed_array:1.1.15:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-typed-array/package.json"}]},{"bom-ref":"pkg:npm/is-unc-path@1.0.0?package-id=ce172a3a7c21705f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"is-unc-path","version":"1.0.0","description":"Returns true if a filepath is a windows UNC file path.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-unc-path:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/is-unc-path@1.0.0","externalReferences":[{"url":"https://github.com/jonschlinkert/is-unc-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc-path:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc-path:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc_path:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc_path:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-unc:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_unc:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-unc-path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_unc_path:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-unc-path/package.json"}]},{"bom-ref":"pkg:npm/is-weakmap@2.0.2?package-id=e45ebd1d0caec949","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-weakmap","version":"2.0.2","description":"Is this value a JS WeakMap? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-weakmap:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-weakmap@2.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/is-weakmap.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-weakmap#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakmap:is-weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakmap:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_weakmap:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-weakmap/package.json"}]},{"bom-ref":"pkg:npm/is-weakset@2.0.4?package-id=5c11a4ead031e5d5","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"is-weakset","version":"2.0.4","description":"Is this value a JS WeakSet? This module works cross-realm/iframe, and despite ES6 @@toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:inspect-js:is-weakset:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/is-weakset@2.0.4","externalReferences":[{"url":"git+https://github.com/inspect-js/is-weakset.git","type":"distribution"},{"url":"https://github.com/inspect-js/is-weakset#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakset:is-weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_weakset:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_weakset:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-weakset/package.json"}]},{"bom-ref":"pkg:npm/is-windows@1.0.2?package-id=c97557a2dcbdd3a0","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Simen Bekkhus (https://github.com/SimenB), 刘祺 (gucong.co.cc)","name":"is-windows","version":"1.0.2","description":"Returns true if the platform is windows. UMD module, works with node.js, commonjs, browser, AMD, electron, etc.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:is-windows:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/is-windows@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/is-windows","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-windows:is-windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is-windows:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_windows:is-windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is_windows:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is-windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:is:is_windows:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/is-windows/package.json"}]},{"bom-ref":"pkg:npm/isarray@0.0.1?package-id=bc50e5d6cbc7eb36","type":"library","author":"Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)","name":"isarray","version":"0.0.1","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@0.0.1","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isarray@1.0.0?package-id=034deefb6c4b8769","type":"library","author":"Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)","name":"isarray","version":"1.0.0","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@1.0.0","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isarray@2.0.5?package-id=ed8d984bcbb93ff5","type":"library","author":"Julian Gruber <mail@juliangruber.com> (http://juliangruber.com)","name":"isarray","version":"2.0.5","description":"Array#isArray for older browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juliangruber:isarray:2.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/isarray@2.0.5","externalReferences":[{"url":"git://github.com/juliangruber/isarray.git","type":"distribution"},{"url":"https://github.com/juliangruber/isarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isarray:isarray:2.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isarray/package.json"}]},{"bom-ref":"pkg:npm/isexe@2.0.0?package-id=f016a5f09c60797b","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"isexe","version":"2.0.0","description":"Minimal module to check if a file is executable.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:isexe:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isexe@2.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/isexe.git","type":"distribution"},{"url":"https://github.com/isaacs/isexe#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isexe:isexe:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isexe/package.json"}]},{"bom-ref":"pkg:npm/isexe@3.1.5?package-id=17fcea35d5a26f20","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"isexe","version":"3.1.5","description":"Minimal module to check if a file is executable.","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:isaacs:isexe:3.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/isexe@3.1.5","externalReferences":[{"url":"https://github.com/isaacs/isexe","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isexe:isexe:3.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json"}]},{"bom-ref":"pkg:npm/isobject@3.0.1?package-id=71363469c72f98ea","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert), Magnús Dæhlen (https://github.com/magnudae), Tom MacWright (https://macwright.org)","name":"isobject","version":"3.0.1","description":"Returns true if the value is an object and not an array or null.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:isobject:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/isobject@3.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/isobject","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isobject:isobject:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isobject/package.json"}]},{"bom-ref":"pkg:npm/isurl@1.0.0?package-id=28254e996fa56b2a","type":"library","author":"Steven Vachon <contact@svachon.com> (https://www.svachon.com/)","name":"isurl","version":"1.0.0","description":"Checks whether a value is a WHATWG URL.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isurl:isurl:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/isurl@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/isurl/package.json"}]},{"bom-ref":"pkg:npm/jackspeak@3.4.3?package-id=e96a52decca51432","type":"library","author":"Isaac Z. Schlueter <i@izs.me>","name":"jackspeak","version":"3.4.3","description":"A very strict and proper argument parser.","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:jackspeak:jackspeak:3.4.3:*:*:*:*:*:*:*","purl":"pkg:npm/jackspeak@3.4.3","externalReferences":[{"url":"git+https://github.com/isaacs/jackspeak.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jackspeak/package.json"}]},{"bom-ref":"pkg:npm/js-stringify@1.0.2?package-id=58ecb50896023cef","type":"library","author":"ForbesLindesay","name":"js-stringify","version":"1.0.2","description":"Stringify an object so it can be safely inlined in JavaScript code","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:js-stringify:js-stringify:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/js-stringify@1.0.2","externalReferences":[{"url":"https://github.com/jadejs/js-stringify.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:js-stringify:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_stringify:js-stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_stringify:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:js-stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js-stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js_stringify:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/js-stringify/package.json"}]},{"bom-ref":"pkg:npm/js-tokens@4.0.0?package-id=3fc29f45ef8c9e41","type":"library","author":"Simon Lydell","name":"js-tokens","version":"4.0.0","description":"A regex that tokenizes JavaScript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:js-tokens:js-tokens:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/js-tokens@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:js-tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_tokens:js-tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js_tokens:js_tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js-tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:js:js_tokens:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/js-tokens/package.json"}]},{"bom-ref":"pkg:npm/js-yaml@3.14.2?package-id=f7f3579a635a8337","type":"library","author":"Vladimir Zapparov <dervus.grim@gmail.com>, Aleksey V Zapparov <ixti@member.fsf.org> (http://www.ixti.net/), Vitaly Puzrin <vitaly@rcdesign.ru> (https://github.com/puzrin), Martin Grenfell <martin.grenfell@gmail.com> (http://got-ravings.blogspot.com)","name":"js-yaml","version":"3.14.2","description":"YAML 1.2 parser and serializer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodeca:js-yaml:3.14.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/js-yaml@3.14.2","externalReferences":[{"url":"https://github.com/nodeca/js-yaml","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/js-yaml/package.json"}]},{"bom-ref":"pkg:npm/json-buffer@3.0.0?package-id=298ecde0ab662ada","type":"library","author":"Dominic Tarr <dominic.tarr@gmail.com> (http://dominictarr.com)","name":"json-buffer","version":"3.0.0","description":"JSON parse & stringify that supports binary via bops & base64","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dominictarr:json-buffer:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/json-buffer@3.0.0","externalReferences":[{"url":"git://github.com/dominictarr/json-buffer.git","type":"distribution"},{"url":"https://github.com/dominictarr/json-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:dominictarr:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json-buffer:json-buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json-buffer:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_buffer:json-buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_buffer:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:json-buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:json_buffer:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json"}]},{"bom-ref":"pkg:npm/json-schema@0.4.0?package-id=f593cbff106763e8","type":"library","author":"Kris Zyp, Kris Zyp <kriszyp@gmail.com>","name":"json-schema","version":"0.4.0","description":"JSON Schema validation and specifications","licenses":[{"expression":"AFL-2.1 OR BSD-3-Clause"}],"cpe":"cpe:2.3:a:json-schema:json-schema:0.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/json-schema@0.4.0","externalReferences":[{"url":"http://github.com/kriszyp/json-schema","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:json-schema:json_schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_schema:json-schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json_schema:json_schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kriszyp:json-schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kriszyp:json_schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:json-schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:json:json_schema:0.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/json-schema/package.json"}]},{"bom-ref":"pkg:npm/json5@2.2.3?package-id=ff0081c9bee3a9f6","type":"library","author":"Aseem Kishore <aseem.kishore@gmail.com>, Max Nanasy <max.nanasy@gmail.com>, Andrew Eisenberg <andrew@eisenberg.as>, Jordan Tucker <jordanbtucker@gmail.com>","name":"json5","version":"2.2.3","description":"JSON for Humans","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:json5:json5:2.2.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/json5@2.2.3","externalReferences":[{"url":"git+https://github.com/json5/json5.git","type":"distribution"},{"url":"http://json5.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/json5/package.json"}]},{"bom-ref":"pkg:npm/jsonfile@6.2.1?package-id=203aa116ca1676f3","type":"library","author":"JP Richardson <jprichardson@gmail.com>","name":"jsonfile","version":"6.2.1","description":"Easily read/write JSON files.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jsonfile:jsonfile:6.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/jsonfile@6.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jsonfile/package.json"}]},{"bom-ref":"pkg:npm/jsonwebtoken@0.1.0?package-id=c29669d438fb9e38","type":"library","author":"auth0","name":"jsonwebtoken","version":"0.1.0","description":"JSON Web Token implementation (symmetric and asymmetric)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:auth0:jsonwebtoken:0.1.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/jsonwebtoken@0.1.0","externalReferences":[{"url":"https://github.com/auth0/node-jsonwebtoken","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json"}]},{"bom-ref":"pkg:npm/jsonwebtoken@0.4.0?package-id=1e23bc54c16fbe6d","type":"library","author":"auth0","name":"jsonwebtoken","version":"0.4.0","description":"JSON Web Token implementation (symmetric and asymmetric)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:auth0:jsonwebtoken:0.4.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/jsonwebtoken@0.4.0","externalReferences":[{"url":"https://github.com/auth0/node-jsonwebtoken","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jsonwebtoken/package.json"}]},{"bom-ref":"pkg:npm/jstransformer@1.0.0?package-id=cb3672db528c0205","type":"library","author":"ForbesLindesay","name":"jstransformer","version":"1.0.0","description":"Normalize the API of any jstransformer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jstransformers:jstransformer:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/jstransformer@1.0.0","externalReferences":[{"url":"https://github.com/jstransformers/jstransformer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jstransformer:jstransformer:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jstransformer/package.json"}]},{"bom-ref":"pkg:npm/juice-shop@20.0.0?package-id=d93cffb187cc6ed6","type":"library","author":"Björn Kimminich <bjoern.kimminich@owasp.org> (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, JuiceShopBot, ShubhamPalriwala, CaptainFreak, Supratik Das, the-pro, Harsh Kumar, rishabhkeshan, Ziyang Li, ...","name":"juice-shop","version":"20.0.0","description":"Probably the most modern and sophisticated insecure web application","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juice-shop:juice-shop:20.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/juice-shop@20.0.0","externalReferences":[{"url":"https://github.com/juice-shop/juice-shop.git","type":"distribution"},{"url":"https://owasp-juice.shop","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice-shop:juice_shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice-shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice_shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice-shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice_shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/build/package.json"}]},{"bom-ref":"pkg:npm/juice-shop@20.0.0?package-id=486affa68e36ab8d","type":"library","author":"Björn Kimminich <bjoern.kimminich@owasp.org> (https://kimminich.de), Björn Kimminich, Jannik Hollenbach, Aashish683, greenkeeper[bot], MarcRler, agrawalarpit14, Scar26, JuiceShopBot, ShubhamPalriwala, CaptainFreak, Supratik Das, the-pro, Harsh Kumar, rishabhkeshan, Ziyang Li, ...","name":"juice-shop","version":"20.0.0","description":"Probably the most modern and sophisticated insecure web application","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:juice-shop:juice-shop:20.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/juice-shop@20.0.0","externalReferences":[{"url":"https://github.com/juice-shop/juice-shop.git","type":"distribution"},{"url":"https://owasp-juice.shop","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice-shop:juice_shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice-shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice_shop:juice_shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice-shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:juice:juice_shop:20.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/package.json"}]},{"bom-ref":"pkg:npm/jwa@0.0.1?package-id=1fe4d16b42282bbe","type":"library","author":"Brian J. Brennan","name":"jwa","version":"0.0.1","description":"JWA implementation (supports all JWS algorithms)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:jwa:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/jwa@0.0.1","externalReferences":[{"url":"git://github.com/brianloveswords/node-jwa.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jwa:jwa:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jwa/package.json"}]},{"bom-ref":"pkg:npm/jws@0.2.6?package-id=e3ae0c46d846c3b2","type":"library","author":"Brian J Brennan","name":"jws","version":"0.2.6","description":"Implementation of JSON Web Signatures","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:brianloveswords:jws:0.2.6:*:*:*:*:*:*:*","purl":"pkg:npm/jws@0.2.6","externalReferences":[{"url":"git://github.com/brianloveswords/node-jws.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jws:jws:0.2.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/jws/package.json"}]},{"bom-ref":"pkg:npm/keyv@3.0.0?package-id=8594e21b80d1e888","type":"library","author":"Luke Childs <lukechilds123@gmail.com> (http://lukechilds.co.uk)","name":"keyv","version":"3.0.0","description":"Simple key-value storage with support for multiple backends","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lukechilds:keyv:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/keyv@3.0.0","externalReferences":[{"url":"git+https://github.com/lukechilds/keyv.git","type":"distribution"},{"url":"https://github.com/lukechilds/keyv","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:keyv:keyv:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json"}]},{"bom-ref":"pkg:npm/kind-of@6.0.3?package-id=c406772b04e5464c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), David Fox-Powell (https://dtothefp.github.io/me), James (https://twitter.com/aretecode), Jon Schlinkert (http://twitter.com/jonschlinkert), Ken Sheedlo (kensheedlo.com), laggingreflex (https://github.com/laggingreflex), Miguel Mota (https://miguelmota.com), Peter deHaan (http://about.me/peterdehaan), tunnckoCore (https://i.am.charlike.online)","name":"kind-of","version":"6.0.3","description":"Get the native type of a value.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:kind-of:6.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/kind-of@6.0.3","externalReferences":[{"url":"https://github.com/jonschlinkert/kind-of","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind-of:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind_of:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind-of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:kind:kind_of:6.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/kind-of/package.json"}]},{"bom-ref":"pkg:npm/kuler@2.0.0?package-id=ed79d2954c83dae0","type":"library","author":"Arnout Kazemier","name":"kuler","version":"2.0.0","description":"Color your terminal using CSS/hex color codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:kuler:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/kuler@2.0.0","externalReferences":[{"url":"https://github.com/3rd-Eden/kuler","type":"distribution"},{"url":"https://github.com/3rd-Eden/kuler","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:kuler:kuler:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/kuler/package.json"}]},{"bom-ref":"pkg:npm/lazystream@1.0.1?package-id=181999b6186ce408","type":"library","author":"Jonas Pommerening <jonas.pommerening@gmail.com> (https://npmjs.org/~jpommerening), Mario Casciaro <mariocasciaro@gmail.com>","name":"lazystream","version":"1.0.1","description":"Open Node Streams on demand.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jpommerening:lazystream:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/lazystream@1.0.1","externalReferences":[{"url":"https://github.com/jpommerening/node-lazystream.git","type":"distribution"},{"url":"https://github.com/jpommerening/node-lazystream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lazystream:lazystream:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lazystream/package.json"}]},{"bom-ref":"pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc","type":"library","publisher":"GNU Libc Maintainers <debian-glibc@lists.debian.org>","name":"libc6","version":"2.41-12+deb13u2","licenses":[{"license":{"id":"BSD-2-Clause"}},{"license":{"id":"BSL-1.0"}},{"license":{"id":"FSFAP"}},{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"GPL-2.0-or-later"}},{"license":{"id":"GPL-3.0-only"}},{"license":{"id":"GPL-3.0-or-later"}},{"license":{"id":"ISC"}},{"license":{"id":"LGPL-2.0-only"}},{"license":{"id":"LGPL-2.0-or-later"}},{"license":{"id":"LGPL-2.1-only"}},{"license":{"id":"LGPL-2.1-or-later"}},{"license":{"id":"LGPL-3.0-only"}},{"license":{"id":"LGPL-3.0-or-later"}},{"license":{"id":"SunPro"}},{"license":{"id":"Unicode-DFS-2016"}},{"license":{"name":"BSD-3-clause-Berkeley"}},{"license":{"name":"BSD-3-clause-Carnegie"}},{"license":{"name":"BSD-3-clause-Oracle"}},{"license":{"name":"BSD-3-clause-WIDE"}},{"license":{"name":"BSD-like-Spencer"}},{"license":{"name":"CORE-MATH"}},{"license":{"name":"Carnegie"}},{"license":{"name":"DEC"}},{"license":{"name":"GPL-2+-with-link-exception"}},{"license":{"name":"IBM"}},{"license":{"name":"Inner-Net"}},{"license":{"name":"LGPL-2.1+-with-link-exception"}},{"license":{"name":"MIT-like-Lord"}},{"license":{"name":"PCRE"}},{"license":{"name":"Univ-Coimbra"}},{"license":{"name":"public-domain"}}],"cpe":"cpe:2.3:a:libc6:libc6:2.41-12\\+deb13u2:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&upstream=glibc","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:178f8917449ef6a59c2c0da79a0388c9b8d3dbff790657dba42b4776927d9ab1"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libc6"},{"name":"syft:location:1:layerID","value":"sha256:178f8917449ef6a59c2c0da79a0388c9b8d3dbff790657dba42b4776927d9ab1"},{"name":"syft:location:1:path","value":"/usr/share/doc/libc6/copyright"},{"name":"syft:location:2:layerID","value":"sha256:178f8917449ef6a59c2c0da79a0388c9b8d3dbff790657dba42b4776927d9ab1"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libc6.md5sums"},{"name":"syft:metadata:installedSize","value":"23769"},{"name":"syft:metadata:source","value":"glibc"}]},{"bom-ref":"pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14","type":"library","publisher":"Debian GCC Maintainers <debian-gcc@lists.debian.org>","name":"libgcc-s1","version":"14.2.0-19","licenses":[{"license":{"name":"sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"}}],"cpe":"cpe:2.3:a:libgcc-s1:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc-s1:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc_s1:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc_s1:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc:libgcc-s1:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:libgcc:libgcc_s1:14.2.0-19:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:fcb0c313318aac64dde0e0574b4df3394902929eb62d43e8b6c47ec4562f170d"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libgcc-s1"},{"name":"syft:location:1:layerID","value":"sha256:fcb0c313318aac64dde0e0574b4df3394902929eb62d43e8b6c47ec4562f170d"},{"name":"syft:location:1:path","value":"/var/lib/dpkg/status.d/libgcc-s1.md5sums"},{"name":"syft:location:2:layerID","value":"sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"},{"name":"syft:location:2:path","value":"/usr/share/doc/gcc-14-base/copyright"},{"name":"syft:metadata:installedSize","value":"148"},{"name":"syft:metadata:source","value":"gcc-14"}]},{"bom-ref":"pkg:deb/debian/libgomp1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=8d4d6890752630d0&upstream=gcc-14","type":"library","publisher":"Debian GCC Maintainers <debian-gcc@lists.debian.org>","name":"libgomp1","version":"14.2.0-19","licenses":[{"license":{"name":"sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"}}],"cpe":"cpe:2.3:a:libgomp1:libgomp1:14.2.0-19:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libgomp1@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:7578331450f7cd6e1f6f28caf2ce9af93ea935a049132bb63ed523dcbda068e4"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libgomp1"},{"name":"syft:location:1:layerID","value":"sha256:7578331450f7cd6e1f6f28caf2ce9af93ea935a049132bb63ed523dcbda068e4"},{"name":"syft:location:1:path","value":"/var/lib/dpkg/status.d/libgomp1.md5sums"},{"name":"syft:location:2:layerID","value":"sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"},{"name":"syft:location:2:path","value":"/usr/share/doc/gcc-14-base/copyright"},{"name":"syft:metadata:installedSize","value":"352"},{"name":"syft:metadata:source","value":"gcc-14"}]},{"bom-ref":"pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=arm64&distro=debian-13.4&package-id=4f12411d3227085b&upstream=openssl","type":"library","publisher":"Debian OpenSSL Team <pkg-openssl-devel@alioth-lists.debian.net>","name":"libssl3t64","version":"3.5.5-1~deb13u2","licenses":[{"license":{"id":"Apache-2.0"}},{"license":{"id":"GPL-1.0-only"}},{"license":{"id":"GPL-1.0-or-later"}},{"license":{"name":"Artistic"}}],"cpe":"cpe:2.3:a:libssl3t64:libssl3t64:3.5.5-1\\~deb13u2:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=arm64&distro=debian-13.4&upstream=openssl","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:6d2638f8b1c04bff63885c77c81c1cf0d5d4eb598e3826fba1037630fe6d401a"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libssl3t64"},{"name":"syft:location:1:layerID","value":"sha256:6d2638f8b1c04bff63885c77c81c1cf0d5d4eb598e3826fba1037630fe6d401a"},{"name":"syft:location:1:path","value":"/usr/share/doc/libssl3t64/copyright"},{"name":"syft:location:2:layerID","value":"sha256:6d2638f8b1c04bff63885c77c81c1cf0d5d4eb598e3826fba1037630fe6d401a"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libssl3t64.md5sums"},{"name":"syft:metadata:installedSize","value":"8014"},{"name":"syft:metadata:source","value":"openssl"}]},{"bom-ref":"pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=9cc8acacefdee288&upstream=gcc-14","type":"library","publisher":"Debian GCC Maintainers <debian-gcc@lists.debian.org>","name":"libstdc++6","version":"14.2.0-19","licenses":[{"license":{"name":"sha256:20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"}}],"cpe":"cpe:2.3:a:libstdc\\+\\+6:libstdc\\+\\+6:14.2.0-19:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=arm64&distro=debian-13.4&upstream=gcc-14","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:323c2be748e4417f7ab7b05b33d6c1a52df0788e779143555109ddcd5325c76c"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libstdc++6"},{"name":"syft:location:1:layerID","value":"sha256:323c2be748e4417f7ab7b05b33d6c1a52df0788e779143555109ddcd5325c76c"},{"name":"syft:location:1:path","value":"/var/lib/dpkg/status.d/libstdc++6.md5sums"},{"name":"syft:location:2:layerID","value":"sha256:30884b21b6a1362fbcdb60743280a138148b6d0ac50a3f8ee3e9f213b371c9e7"},{"name":"syft:location:2:path","value":"/usr/share/doc/gcc-14-base/copyright"},{"name":"syft:metadata:installedSize","value":"3022"},{"name":"syft:metadata:source","value":"gcc-14"}]},{"bom-ref":"pkg:npm/libxmljs2@0.37.0?package-id=008b04af34471513","type":"library","author":"marudor, Jeff Smick, Marco Rogers","name":"libxmljs2","version":"0.37.0","description":"libxml bindings for v8 javascript engine","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:libxmljs2:libxmljs2:0.37.0:*:*:*:*:*:*:*","purl":"pkg:npm/libxmljs2@0.37.0","externalReferences":[{"url":"http://github.com/marudor/libxmljs2.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:marudor:libxmljs2:0.37.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/package.json"}]},{"bom-ref":"pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&package-id=02b5bf6dd9ecb243&upstream=libzstd","type":"library","publisher":"RPM packaging team <team+pkg-rpm@tracker.debian.org>","name":"libzstd1","version":"1.5.7+dfsg-1","licenses":[{"license":{"id":"BSD-3-Clause"}},{"license":{"id":"GPL-2.0-only"}},{"license":{"id":"Zlib"}},{"license":{"name":"Expat"}}],"cpe":"cpe:2.3:a:libzstd1:libzstd1:1.5.7\\+dfsg-1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&upstream=libzstd","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:91213e6dc2fda431a0de4541602a933c7a48206a0bf487217fa681260fccdc23"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/libzstd1"},{"name":"syft:location:1:layerID","value":"sha256:91213e6dc2fda431a0de4541602a933c7a48206a0bf487217fa681260fccdc23"},{"name":"syft:location:1:path","value":"/usr/share/doc/libzstd1/copyright"},{"name":"syft:location:2:layerID","value":"sha256:91213e6dc2fda431a0de4541602a933c7a48206a0bf487217fa681260fccdc23"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/libzstd1.md5sums"},{"name":"syft:metadata:installedSize","value":"748"},{"name":"syft:metadata:source","value":"libzstd"}]},{"bom-ref":"pkg:npm/liftup@3.0.1?package-id=b4203f0dbd71dc51","type":"library","author":"Grunt Development Team (https://gruntjs.com/development-team)","name":"liftup","version":"3.0.1","description":"Launch your command line tool with ease.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:liftup:liftup:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/liftup@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/liftup/package.json"}]},{"bom-ref":"pkg:npm/linebreak@1.1.0?package-id=b2ed0312398a883c","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"linebreak","version":"1.1.0","description":"An implementation of the Unicode Line Breaking Algorithm (UAX #14)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:linebreak:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/linebreak@1.1.0","externalReferences":[{"url":"https://github.com/devongovett/linebreaker.git","type":"distribution"},{"url":"https://github.com/devongovett/linebreaker","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:linebreak:linebreak:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/linebreak/package.json"}]},{"bom-ref":"pkg:npm/listenercount@1.0.1?package-id=8cf228f1cc8b3027","type":"library","author":"jden <jason@denizac.org>","name":"listenercount","version":"1.0.1","description":"backwards compatible version of builtin events.listenercount","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:listenercount:listenercount:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/listenercount@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/listenercount/package.json"}]},{"bom-ref":"pkg:npm/ljharb-monorepo-symlink-test@0.0.0?package-id=b0673eac3bec27e8","type":"library","name":"ljharb-monorepo-symlink-test","version":"0.0.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/ljharb-monorepo-symlink-test@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo-symlink-test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink_test:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo-symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo-symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo_symlink:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb-monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb_monorepo:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:ljharb-monorepo-symlink-test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:ljharb_monorepo_symlink_test:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json"}]},{"bom-ref":"pkg:npm/locate-path@5.0.0?package-id=91b02cf44711d543","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"locate-path","version":"5.0.0","description":"Get the first path that exists on disk of multiple paths","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:locate-path:locate-path:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/locate-path@5.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate-path:locate_path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate_path:locate-path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate_path:locate_path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate:locate-path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:locate:locate_path:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/locate-path/package.json"}]},{"bom-ref":"pkg:npm/lodash@2.4.2?package-id=dbbb92a4d9c4d340","type":"library","author":"John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine@iceddev.com> (http://www.iceddev.com/), Kit Cambridge <github@kitcambridge.be> (http://kitcambridge.be/), Mathias Bynens <mathias@qiwi.be> (http://mathiasbynens.be/)","name":"lodash","version":"2.4.2","description":"A utility library delivering consistency, customization, performance, & extras.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash:lodash:2.4.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/lodash@2.4.2","externalReferences":[{"url":"https://github.com/lodash/lodash.git","type":"distribution"},{"url":"http://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json"}]},{"bom-ref":"pkg:npm/lodash@4.18.1?package-id=9a03ea155cc712e9","type":"library","author":"John-David Dalton <john.david.dalton@gmail.com>, John-David Dalton <john.david.dalton@gmail.com>, Mathias Bynens <mathias@qiwi.be>","name":"lodash","version":"4.18.1","description":"Lodash modular utilities.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash:lodash:4.18.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/lodash@4.18.1","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash/package.json"}]},{"bom-ref":"pkg:npm/lodash.isfinite@3.3.2?package-id=ec6d4a50251c782e","type":"library","author":"John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)","name":"lodash.isfinite","version":"3.3.2","description":"The lodash method `_.isFinite` exported as a module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash.isfinite:lodash.isfinite:3.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/lodash.isfinite@3.3.2","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash.isfinite/package.json"}]},{"bom-ref":"pkg:npm/lodash.set@4.3.2?package-id=be8f210a7cd0fab3","type":"library","author":"John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), John-David Dalton <john.david.dalton@gmail.com> (http://allyoucanleet.com/), Blaine Bublitz <blaine.bublitz@gmail.com> (https://github.com/phated), Mathias Bynens <mathias@qiwi.be> (https://mathiasbynens.be/)","name":"lodash.set","version":"4.3.2","description":"The lodash method `_.set` exported as a module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lodash.set:lodash.set:4.3.2:*:*:*:*:*:*:*","purl":"pkg:npm/lodash.set@4.3.2","externalReferences":[{"url":"https://lodash.com/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lodash.set/package.json"}]},{"bom-ref":"pkg:npm/logform@2.7.0?package-id=de0c453fbecf2b01","type":"library","author":"Charlie Robbins <charlie.robbins@gmail.com>","name":"logform","version":"2.7.0","description":"An mutable object-based log format designed for chaining & objectMode streams.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:winstonjs:logform:2.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/logform@2.7.0","externalReferences":[{"url":"git+https://github.com/winstonjs/logform.git","type":"distribution"},{"url":"https://github.com/winstonjs/logform#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:logform:logform:2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/logform/package.json"}]},{"bom-ref":"pkg:npm/loose-envify@1.4.0?package-id=360730ddc52a7620","type":"library","author":"Andres Suarez <zertosh@gmail.com>","name":"loose-envify","version":"1.4.0","description":"Fast (and loose) selective `process.env` replacer using js-tokens instead of an AST","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:loose-envify:loose-envify:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/loose-envify@1.4.0","externalReferences":[{"url":"git://github.com/zertosh/loose-envify.git","type":"distribution"},{"url":"https://github.com/zertosh/loose-envify","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose-envify:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose_envify:loose-envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose_envify:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zertosh:loose-envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zertosh:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose:loose-envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:loose:loose_envify:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/loose-envify/package.json"}]},{"bom-ref":"pkg:npm/lowercase-keys@1.0.0?package-id=32832572ce4df07d","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"lowercase-keys","version":"1.0.0","description":"Lowercase the keys of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lowercase-keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/lowercase-keys@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase-keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase_keys:lowercase-keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase_keys:lowercase_keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase:lowercase-keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lowercase:lowercase_keys:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lowercase-keys/package.json"}]},{"bom-ref":"pkg:npm/lru-cache@10.4.3?package-id=ceda3bc6e5ebcc1b","type":"library","author":"Isaac Z. Schlueter <i@izs.me>","name":"lru-cache","version":"10.4.3","description":"A cache object that deletes the least-recently-used items.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:lru-cache:10.4.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/lru-cache@10.4.3","externalReferences":[{"url":"git://github.com/isaacs/node-lru-cache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/lru-cache/package.json"}]},{"bom-ref":"pkg:npm/lru-cache@6.0.0?package-id=65977491543b90a8","type":"library","author":"Isaac Z. Schlueter <i@izs.me>","name":"lru-cache","version":"6.0.0","description":"A cache object that deletes the least-recently-used items.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:lru-cache:6.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/lru-cache@6.0.0","externalReferences":[{"url":"git://github.com/isaacs/node-lru-cache.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json"}]},{"bom-ref":"pkg:npm/make-dir@1.3.0?package-id=94cfb98bee7b443d","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"make-dir","version":"1.3.0","description":"Make a directory and its parents if needed - Think `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:make-dir:make-dir:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-dir@1.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-dir:make_dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make-dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make_dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_dir:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/node_modules/make-dir/package.json"}]},{"bom-ref":"pkg:npm/make-dir@2.1.0?package-id=4beba0ec739f4b97","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"make-dir","version":"2.1.0","description":"Make a directory and its parents if needed - Think `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:make-dir:make-dir:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-dir@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-dir:make_dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make-dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_dir:make_dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_dir:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-dir/package.json"}]},{"bom-ref":"pkg:npm/make-fetch-happen@14.0.3?package-id=cbd26296f86ea3b8","type":"library","author":"GitHub Inc.","name":"make-fetch-happen","version":"14.0.3","description":"Opinionated, caching, retrying fetch client","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-fetch-happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/make-fetch-happen@14.0.3","externalReferences":[{"url":"git+https://github.com/npm/make-fetch-happen.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch-happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-fetch-happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_fetch_happen:14.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-fetch-happen/package.json"}]},{"bom-ref":"pkg:npm/make-fetch-happen@9.1.0?package-id=07e960a14667d805","type":"library","author":"Kat Marchán <kzm@zkat.tech>","name":"make-fetch-happen","version":"9.1.0","description":"Opinionated, caching, retrying fetch client","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-fetch-happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-fetch-happen@9.1.0","externalReferences":[{"url":"https://github.com/npm/make-fetch-happen","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch-happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch_happen:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_fetch:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:make-fetch-happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:make_fetch_happen:9.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json"}]},{"bom-ref":"pkg:npm/make-iterator@1.0.1?package-id=2e70d0d98acb0009","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"make-iterator","version":"1.0.1","description":"Convert an argument into a valid iterator. Based on the `.makeIterator()` implementation in mout https://github.com/mout/mout.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:make-iterator:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/make-iterator@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/make-iterator","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-iterator:make-iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-iterator:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_iterator:make-iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_iterator:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_iterator:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-iterator/package.json"}]},{"bom-ref":"pkg:npm/make-plural@4.3.0?package-id=6f404b9eb22f1024","type":"library","author":"Eemeli Aro <eemeli@gmail.com>","name":"make-plural","version":"4.3.0","description":"Translates Unicode CLDR pluralization rules to executable JavaScript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-plural:make-plural:4.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/make-plural@4.3.0","externalReferences":[{"url":"https://github.com/eemeli/make-plural#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-plural:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make-plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make-plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_plural:4.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json"}]},{"bom-ref":"pkg:npm/make-plural@6.2.2?package-id=7b87370db2b76e71","type":"library","author":"Eemeli Aro <eemeli@gmail.com>","name":"make-plural","version":"6.2.2","description":"Unicode CLDR pluralization rules as JavaScript functions","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:make-plural:make-plural:6.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/make-plural@6.2.2","externalReferences":[{"url":"https://github.com/eemeli/make-plural.git","type":"distribution"},{"url":"https://github.com/eemeli/make-plural#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:make-plural:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make-plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make_plural:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make-plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:eemeli:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make-plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:make:make_plural:6.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-plural/package.json"}]},{"bom-ref":"pkg:npm/map-cache@0.2.2?package-id=5f83b17e9f854ecc","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"map-cache","version":"0.2.2","description":"Basic cache object for storing key-value pairs.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:map-cache:0.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/map-cache@0.2.2","externalReferences":[{"url":"https://github.com/jonschlinkert/map-cache","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map-cache:map-cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map-cache:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map_cache:map-cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map_cache:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map:map-cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:map:map_cache:0.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/map-cache/package.json"}]},{"bom-ref":"pkg:npm/marsdb@0.6.11?package-id=92d5870e9d43058d","type":"library","author":"Artem Artemev <art@studytime.me>, Artem Artemev","name":"marsdb","version":"0.6.11","description":"MarsDB is a lightweight client-side MongoDB-like database, Promise based, written in ES6","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:marsdb:marsdb:0.6.11:*:*:*:*:*:*:*","purl":"pkg:npm/marsdb@0.6.11","externalReferences":[{"url":"https://github.com/c58/marsdb","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:c58:marsdb:0.6.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/marsdb/package.json"}]},{"bom-ref":"pkg:npm/material-dynamic-colors@1.1.4?package-id=fe5d0e75276cf249","type":"library","author":"Leonardo Rafal Wehrmeister","name":"material-dynamic-colors","version":"1.1.4","description":"This project is based on https://material-foundation.github.io/material-theme-builder and uses official color utilities from Material Design.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:material-dynamic-colors:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/material-dynamic-colors@1.1.4","externalReferences":[{"url":"git+https://github.com/leonardorafael/material-dynamic-colors.git","type":"distribution"},{"url":"https://github.com/leonardorafael/material-dynamic-colors","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:material-dynamic-colors:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material_dynamic_colors:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material_dynamic_colors:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material-dynamic:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material-dynamic:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material_dynamic:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material_dynamic:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:leonardorafael:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:leonardorafael:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material:material-dynamic-colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material:material_dynamic_colors:1.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/material-dynamic-colors/package.json"}]},{"bom-ref":"pkg:npm/material-icons@1.13.14?package-id=1483a12cffbd67d7","type":"library","name":"material-icons","version":"1.13.14","description":"Latest icon fonts and CSS for self-hosting material design icons.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:material-icons:material-icons:1.13.14:*:*:*:*:*:*:*","purl":"pkg:npm/material-icons@1.13.14","externalReferences":[{"url":"git+https://github.com/marella/material-icons.git","type":"distribution"},{"url":"https://marella.github.io/material-icons/demo/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:material-icons:material_icons:1.13.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material_icons:material-icons:1.13.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material_icons:material_icons:1.13.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material:material-icons:1.13.14:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:material:material_icons:1.13.14:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/material-icons/package.json"}]},{"bom-ref":"pkg:npm/math-interval-parser@2.0.1?package-id=c4cf81a86732a92f","type":"library","author":"Dmitry Semigradsky <semigradskyd@gmail.com> (https://github.com/Semigradsky)","name":"math-interval-parser","version":"2.0.1","description":"Parse math interval","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:math-interval-parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/math-interval-parser@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-interval-parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval_parser:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval_parser:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_interval:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math-interval-parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math_interval_parser:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/math-interval-parser/package.json"}]},{"bom-ref":"pkg:npm/math-intrinsics@1.1.0?package-id=aa8ac1643abd998a","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"math-intrinsics","version":"1.1.0","description":"ES Math-related intrinsics and helpers, robustly cached.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:math-intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/math-intrinsics@1.1.0","externalReferences":[{"url":"git+https://github.com/es-shims/math-intrinsics.git","type":"distribution"},{"url":"https://github.com/es-shims/math-intrinsics#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:math-intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_intrinsics:math-intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math_intrinsics:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:math-intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math-intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:math:math_intrinsics:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/math-intrinsics/package.json"}]},{"bom-ref":"pkg:npm/media-typer@0.3.0?package-id=761d39c4b96da905","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"media-typer","version":"0.3.0","description":"Simple RFC 6838 media type parser and formatter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:media-typer:media-typer:0.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/media-typer@0.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:media-typer:media_typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_typer:media-typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_typer:media_typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media-typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media_typer:0.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/media-typer/package.json"}]},{"bom-ref":"pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13.4&package-id=3c9375f7f83b0d94","type":"library","publisher":"Mime-Support Packagers <team+debian-mimesupport-packagers@tracker.debian.org>","name":"media-types","version":"13.0.0","licenses":[{"license":{"name":"ad-hoc"}}],"cpe":"cpe:2.3:a:media-types:media-types:13.0.0:*:*:*:*:*:*:*","purl":"pkg:deb/debian/media-types@13.0.0?arch=all&distro=debian-13.4","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:media-types:media_types:13.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_types:media-types:13.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media_types:media_types:13.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media-types:13.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:media:media_types:13.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/media-types"},{"name":"syft:location:1:layerID","value":"sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412"},{"name":"syft:location:1:path","value":"/usr/share/doc/media-types/copyright"},{"name":"syft:location:2:layerID","value":"sha256:275a30dd8ce958b21daa9ad962c6fbc09f98306ee2f486b65c9075dc257b1412"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/media-types.md5sums"},{"name":"syft:metadata:installedSize","value":"98"}]},{"bom-ref":"pkg:npm/median@0.0.2?package-id=9d5d7412a9d2ef14","type":"library","author":"Khalid Lafi","name":"median","version":"0.0.2","description":"a small module for node and browser to calculate median","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:lafikl:median:0.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/median@0.0.2","externalReferences":[{"url":"http://github.com/lafikl/median","type":"distribution"},{"url":"https://github.com/lafikl/median","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:median:median:0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/median/package.json"}]},{"bom-ref":"pkg:npm/merge-descriptors@1.0.3?package-id=d9e5a65c51115c3f","type":"library","author":"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Mike Grabowski <grabbou@gmail.com>","name":"merge-descriptors","version":"1.0.3","description":"Merge objects using descriptors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:merge-descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/merge-descriptors@1.0.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge-descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge_descriptors:merge-descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge_descriptors:merge_descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge:merge-descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:merge:merge_descriptors:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/merge-descriptors/package.json"}]},{"bom-ref":"pkg:npm/messageformat@2.3.0?package-id=f69b2994a9e9d9fe","type":"library","author":"Alex Sexton <alexsexton@gmail.com>, Eemeli Aro <eemeli@gmail.com>","name":"messageformat","version":"2.3.0","description":"PluralFormat and SelectFormat Message and i18n Tool - A JavaScript Implemenation of the ICU standards.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:messageformat:messageformat:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/messageformat@2.3.0","externalReferences":[{"url":"https://messageformat.github.io/messageformat/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat/package.json"}]},{"bom-ref":"pkg:npm/messageformat-formatters@2.0.1?package-id=2b6c534059aeab68","type":"library","author":"Eemeli Aro <eemeli@gmail.com>","name":"messageformat-formatters","version":"2.0.1","description":"Formatters for messageformat","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:messageformat-formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/messageformat-formatters@2.0.1","externalReferences":[{"url":"https://github.com/messageformat/messageformat.git","type":"distribution"},{"url":"https://messageformat.github.io/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat-formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_formatters:messageformat-formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_formatters:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat-formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat_formatters:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat-formatters/package.json"}]},{"bom-ref":"pkg:npm/messageformat-parser@4.1.3?package-id=e027aa677afa5141","type":"library","author":"Alex Sexton <alexsexton@gmail.com>, Eemeli Aro <eemeli@gmail.com>, Nikola Kovacs <nikola.kovacs@gmail.com>, Adrian Vogelsgesang <adrian.vogelsgesang@tum.de>","name":"messageformat-parser","version":"4.1.3","description":"A PEG.js parser for ICU MessageFormat strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:messageformat-parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/messageformat-parser@4.1.3","externalReferences":[{"url":"https://github.com/messageformat/messageformat.git","type":"distribution"},{"url":"https://messageformat.github.io/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat-parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_parser:messageformat-parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat_parser:messageformat_parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat-parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:messageformat:messageformat_parser:4.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/messageformat-parser/package.json"}]},{"bom-ref":"pkg:npm/methods@1.1.2?package-id=5f8a3e9c18de5014","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com)","name":"methods","version":"1.1.2","description":"HTTP methods that node supports","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:methods:methods:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/methods@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/methods/package.json"}]},{"bom-ref":"pkg:npm/micromatch@4.0.8?package-id=cd4baaca2f4fae81","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), , Amila Welihinda (amilajack.com), Bogdan Chadkin (https://github.com/TrySound), Brian Woodward (https://twitter.com/doowb), Devon Govett (http://badassjs.com), Elan Shanker (https://github.com/es128), Fabrício Matté (https://ultcombo.js.org), Jon Schlinkert (http://twitter.com/jonschlinkert), Martin Kolárik (https://kolarik.sk), Olsten Larck (https://i.am.charlike.online), Paul Miller (paulmillr.com), Tom Byrer (https://github.com/tomByrer), Tyler Akins (http://rumkin.com), Peter Bright <drpizza@quiscalusmexicanus.org> (https://github.com/drpizza), Kuba Juszczyk (https://github.com/ku8ar)","name":"micromatch","version":"4.0.8","description":"Glob matching for javascript/node.js. A replacement and faster alternative to minimatch and multimatch.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:micromatch:4.0.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/micromatch@4.0.8","externalReferences":[{"url":"https://github.com/micromatch/micromatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/micromatch/package.json"}]},{"bom-ref":"pkg:npm/mime@1.6.0?package-id=1ebb82e2ba25a844","type":"library","author":"Robert Kieffer <robert@broofa.com> (http://github.com/broofa), Benjamin Thomas <benjamin@benjaminthomas.org> (http://github.com/bentomas)","name":"mime","version":"1.6.0","description":"A comprehensive library for mime-type mapping","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mime_project:mime:1.6.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/mime@1.6.0","externalReferences":[{"url":"https://github.com/broofa/node-mime","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mime/package.json"}]},{"bom-ref":"pkg:npm/mime-db@1.52.0?package-id=43c6f2fbd14f0eba","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Robert Kieffer <robert@broofa.com> (http://github.com/broofa)","name":"mime-db","version":"1.52.0","description":"Media Type Database","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mime-db:mime-db:1.52.0:*:*:*:*:*:*:*","purl":"pkg:npm/mime-db@1.52.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime-db:mime_db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_db:mime-db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_db:mime_db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime-db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime_db:1.52.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mime-db/package.json"}]},{"bom-ref":"pkg:npm/mime-types@2.1.35?package-id=33e05356d0dff6ad","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jeremiah Senkpiel <fishrock123@rocketmail.com> (https://searchbeam.jit.su), Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"mime-types","version":"2.1.35","description":"The ultimate javascript content-type utility.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mime-types:mime-types:2.1.35:*:*:*:*:*:*:*","purl":"pkg:npm/mime-types@2.1.35","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime-types:mime_types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_types:mime-types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime_types:mime_types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime-types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mime:mime_types:2.1.35:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mime-types/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@1.0.1?package-id=02b892e02c7322ac","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"mimic-response","version":"1.0.1","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@2.1.0?package-id=0e93cdb85c89eacc","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"mimic-response","version":"2.1.0","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@3.1.0?package-id=845c5d602993a101","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"mimic-response","version":"3.1.0","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/mimic-response@3.1.0?package-id=2b67abea8a06a8db","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"mimic-response","version":"3.1.0","description":"Mimic a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mimic-response:mimic-response:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/mimic-response@3.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic-response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic_response:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic-response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mimic:mimic_response:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.0.5?package-id=a7d9f58fa9223af7","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)","name":"minimatch","version":"3.0.5","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.0.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.0.5","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@3.1.5?package-id=4c40ff5e6c73fe10","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)","name":"minimatch","version":"3.1.5","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:3.1.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@3.1.5","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimatch@9.0.9?package-id=cdc77ee68011f408","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)","name":"minimatch","version":"9.0.9","description":"a glob matcher in javascript","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minimatch_project:minimatch:9.0.9:*:*:*:*:node.js:*:*","purl":"pkg:npm/minimatch@9.0.9","externalReferences":[{"url":"git://github.com/isaacs/minimatch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/glob/node_modules/minimatch/package.json"}]},{"bom-ref":"pkg:npm/minimist@1.2.8?package-id=9c7c73598a676732","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"minimist","version":"1.2.8","description":"parse argument options","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minimistjs:minimist:1.2.8:*:*:*:*:*:*:*","purl":"pkg:npm/minimist@1.2.8","externalReferences":[{"url":"git://github.com/minimistjs/minimist.git","type":"distribution"},{"url":"https://github.com/minimistjs/minimist","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minimist:minimist:1.2.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minimist/package.json"}]},{"bom-ref":"pkg:npm/minipass@2.9.0?package-id=59462219a37abffd","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"2.9.0","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:2.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@2.9.0","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=338b486a654e33cb","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=7256b9dc3ee5141e","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=b65044371c10aa40","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@3.3.6?package-id=04660218c5e211d0","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"3.3.6","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@3.3.6","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@5.0.0?package-id=e285aecf7d10679e","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"5.0.0","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass:minipass:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@5.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/minipass.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass@7.1.3?package-id=192441890be7c4e4","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minipass","version":"7.1.3","description":"minimal implementation of a PassThrough stream","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:minipass:minipass:7.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/minipass@7.1.3","externalReferences":[{"url":"https://github.com/isaacs/minipass","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:minipass:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass/package.json"}]},{"bom-ref":"pkg:npm/minipass-collect@1.0.2?package-id=63efb267ac514e08","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"minipass-collect","version":"1.0.2","description":"A Minipass stream that collects all the data into a single chunk","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-collect:minipass-collect:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-collect@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-collect:minipass_collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass-collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass_collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_collect:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json"}]},{"bom-ref":"pkg:npm/minipass-collect@2.0.1?package-id=8fecd15c1c48c3bb","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"minipass-collect","version":"2.0.1","description":"A Minipass stream that collects all the data into a single chunk","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-collect:minipass-collect:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-collect@2.0.1","externalReferences":[{"url":"https://github.com/isaacs/minipass-collect","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass-collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_collect:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:minipass-collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:minipass_collect:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-collect/package.json"}]},{"bom-ref":"pkg:npm/minipass-fetch@1.4.1?package-id=f1dcdfbdae2d40b2","type":"library","name":"minipass-fetch","version":"1.4.1","description":"An implementation of window.fetch in Node.js using Minipass streams","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minipass-fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-fetch@1.4.1","externalReferences":[{"url":"git+https://github.com/npm/minipass-fetch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass-fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass_fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_fetch:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json"}]},{"bom-ref":"pkg:npm/minipass-fetch@4.0.1?package-id=7894cdb8bcb4ca43","type":"library","author":"GitHub Inc.","name":"minipass-fetch","version":"4.0.1","description":"An implementation of window.fetch in Node.js using Minipass streams","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minipass-fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-fetch@4.0.1","externalReferences":[{"url":"git+https://github.com/npm/minipass-fetch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass-fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_fetch:minipass_fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_fetch:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-fetch/package.json"}]},{"bom-ref":"pkg:npm/minipass-flush@1.0.7?package-id=24aae4756b0bc5be","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"minipass-flush","version":"1.0.7","description":"A Minipass stream that calls a flush function before emitting 'end'","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:minipass-flush:minipass-flush:1.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-flush@1.0.7","externalReferences":[{"url":"git+https://github.com/isaacs/minipass-flush.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-flush:minipass_flush:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_flush:minipass-flush:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_flush:minipass_flush:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-flush:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_flush:1.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-flush/package.json"}]},{"bom-ref":"pkg:npm/minipass-pipeline@1.2.4?package-id=8d7f8393e7e2d352","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"minipass-pipeline","version":"1.2.4","description":"create a pipeline of streams using Minipass","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-pipeline@1.2.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_pipeline:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_pipeline:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_pipeline:1.2.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-pipeline/package.json"}]},{"bom-ref":"pkg:npm/minipass-sized@1.0.3?package-id=82b64febd11d5f17","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"minipass-sized","version":"1.0.3","description":"A Minipass stream that raises an error if you get a different number of bytes than expected","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:minipass-sized:minipass-sized:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/minipass-sized@1.0.3","externalReferences":[{"url":"git+https://github.com/isaacs/minipass-sized.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass-sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_sized:minipass-sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass_sized:minipass_sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass-sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:minipass:minipass_sized:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-sized/package.json"}]},{"bom-ref":"pkg:npm/minizlib@1.3.3?package-id=6cecd69a39d4a47e","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minizlib","version":"1.3.3","description":"A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minizlib:minizlib:1.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/minizlib@1.3.3","externalReferences":[{"url":"git+https://github.com/isaacs/minizlib.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json"}]},{"bom-ref":"pkg:npm/minizlib@2.1.2?package-id=871e116128fa5e93","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minizlib","version":"2.1.2","description":"A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minizlib:minizlib:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/minizlib@2.1.2","externalReferences":[{"url":"git+https://github.com/isaacs/minizlib.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json"}]},{"bom-ref":"pkg:npm/minizlib@3.1.0?package-id=eb188ffb845b006f","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"minizlib","version":"3.1.0","description":"A small fast zlib stream built on [minipass](http://npm.im/minipass) and Node.js's zlib binding.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:minizlib:minizlib:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/minizlib@3.1.0","externalReferences":[{"url":"git+https://github.com/isaacs/minizlib.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minizlib/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@0.5.6?package-id=c8db67c82a47b27a","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"mkdirp","version":"0.5.6","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:mkdirp:0.5.6:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@0.5.6","externalReferences":[{"url":"https://github.com/substack/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:0.5.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@1.0.4?package-id=d3ea554779e8735f","type":"library","name":"mkdirp","version":"1.0.4","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@1.0.4","externalReferences":[{"url":"https://github.com/isaacs/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/move-file/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp@1.0.4?package-id=7ecfd98172b6768e","type":"library","name":"mkdirp","version":"1.0.4","description":"Recursively mkdir, like `mkdir -p`","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:isaacs:mkdirp:1.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp@1.0.4","externalReferences":[{"url":"https://github.com/isaacs/node-mkdirp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp:1.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/mkdirp/package.json"}]},{"bom-ref":"pkg:npm/mkdirp-classic@0.5.3?package-id=fbd74b5142e9aacc","type":"library","author":"Mathias Buus (@mafintosh)","name":"mkdirp-classic","version":"0.5.3","description":"Mirror of mkdirp 0.5.2","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mkdirp-classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*","purl":"pkg:npm/mkdirp-classic@0.5.3","externalReferences":[{"url":"https://github.com/mafintosh/mkdirp-classic.git","type":"distribution"},{"url":"https://github.com/mafintosh/mkdirp-classic","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp-classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp_classic:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp_classic:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp-classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mkdirp:mkdirp_classic:0.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mkdirp-classic/package.json"}]},{"bom-ref":"pkg:npm/moment@2.0.0?package-id=fb07dad56d7726f5","type":"library","author":"Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Iskren Ivov Chernev <iskren.chernev@gmail.com> (https://github.com/ichernev)","name":"moment","version":"2.0.0","description":"Parse, manipulate, and display dates.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:momentjs:moment:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/moment@2.0.0","externalReferences":[{"url":"https://github.com/timrwood/moment.git","type":"distribution"},{"url":"http://momentjs.com","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/express-jwt/node_modules/moment/package.json"}]},{"bom-ref":"pkg:npm/moment@2.30.1?package-id=7f78544a103db020","type":"library","author":"Iskren Ivov Chernev <iskren.chernev@gmail.com> (https://github.com/ichernev), Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/), Rocky Meza (http://rockymeza.com), Matt Johnson <mj1856@hotmail.com> (http://codeofmatt.com), Isaac Cambron <isaac@isaaccambron.com> (http://isaaccambron.com), Andre Polykanine <andre@oire.org> (https://github.com/oire)","name":"moment","version":"2.30.1","description":"Parse, validate, manipulate, and display dates","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:momentjs:moment:2.30.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/moment@2.30.1","externalReferences":[{"url":"https://github.com/moment/moment.git","type":"distribution"},{"url":"https://momentjs.com","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/moment/package.json"}]},{"bom-ref":"pkg:npm/moment-timezone@0.5.48?package-id=1d07c82a5521aa67","type":"library","author":"Tim Wood <washwithcare@gmail.com> (http://timwoodcreates.com/)","name":"moment-timezone","version":"0.5.48","description":"Parse and display moments in any timezone.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:moment-timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*","purl":"pkg:npm/moment-timezone@0.5.48","externalReferences":[{"url":"https://github.com/moment/moment-timezone.git","type":"distribution"},{"url":"http://momentjs.com/timezone/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment-timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment_timezone:moment-timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment_timezone:moment_timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment:moment-timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:moment:moment_timezone:0.5.48:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/moment-timezone/package.json"}]},{"bom-ref":"pkg:npm/morgan@1.10.1?package-id=36a2e18413295dc3","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"morgan","version":"1.10.1","description":"HTTP request logger middleware for node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:morgan_project:morgan:1.10.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/morgan@1.10.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/package.json"}]},{"bom-ref":"pkg:npm/ms@2.0.0?package-id=581ded64725caf94","type":"library","name":"ms","version":"2.0.0","description":"Tiny milisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=fa76bb477435fb7e","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=6489b39df41cd879","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/http-proxy-agent/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=319a29eaa7507424","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/https-proxy-agent/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=e125437ccc162a77","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/logform/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=a9fd2cba9c8e1d2c","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/needle/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=ea5ff84bf95ffe96","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/send/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=6d03f34fc7d77eec","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sequelize/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=19d28c2a60db5e6f","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io-parser/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=8a79e4b90db520a0","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=5cf696f159e61430","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks-proxy-agent/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/ms@2.1.3?package-id=703b594b3e2459c7","type":"library","name":"ms","version":"2.1.3","description":"Tiny millisecond conversion utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vercel:ms:2.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/ms@2.1.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/ms/package.json"}]},{"bom-ref":"pkg:npm/multer@1.4.5-lts.2?package-id=cce9b5dd2cb3fe54","type":"library","author":"Hage Yaapa <captain@hacksparrow.com> (http://www.hacksparrow.com), Jaret Pfluger <https://github.com/jpfluger>, Linus Unnebäck <linus@folkdatorn.se>","name":"multer","version":"1.4.5-lts.2","description":"Middleware for handling `multipart/form-data`.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:multer:multer:1.4.5-lts.2:*:*:*:*:*:*:*","purl":"pkg:npm/multer@1.4.5-lts.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/multer/package.json"}]},{"bom-ref":"pkg:npm/mustache@4.2.0?package-id=4b189aa85e6c312d","type":"library","author":"mustache.js Authors <http://github.com/janl/mustache.js>","name":"mustache","version":"4.2.0","description":"Logic-less {{mustache}} templates with JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mustache.js:mustache.js:4.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/mustache@4.2.0","externalReferences":[{"url":"https://github.com/janl/mustache.js.git","type":"distribution"},{"url":"https://github.com/janl/mustache.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mustache.js:mustache:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mustache:mustache.js:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mustache:mustache:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:janl:mustache.js:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:janl:mustache:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/mustache/package.json"}]},{"bom-ref":"pkg:npm/mylib@0.0.0?package-id=ca93165f21ef1895","type":"library","name":"mylib","version":"0.0.0","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:mylib:mylib:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/mylib@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json"}]},{"bom-ref":"pkg:npm/nan@2.22.2?package-id=f98605c6f902c9b8","type":"library","author":"Rod Vagg <r@va.gg> (https://github.com/rvagg), Benjamin Byholm <bbyholm@abo.fi> (https://github.com/kkoopa/), Trevor Norris <trev.norris@gmail.com> (https://github.com/trevnorris), Nathan Rajlich <nathan@tootallnate.net> (https://github.com/TooTallNate), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Ben Noordhuis <info@bnoordhuis.nl> (https://github.com/bnoordhuis), David Siegel <david@artcom.de> (https://github.com/agnat), Michael Ira Krufky <mkrufky@gmail.com> (https://github.com/mkrufky)","name":"nan","version":"2.22.2","description":"Native Abstractions for Node.js: C++ header for Node 0.8 -> 22 compatibility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodejs:nan:2.22.2:*:*:*:*:*:*:*","purl":"pkg:npm/nan@2.22.2","externalReferences":[{"url":"git://github.com/nodejs/nan.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nan:nan:2.22.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nan/package.json"}]},{"bom-ref":"pkg:npm/napi-build-utils@1.0.2?package-id=f9886324943b066f","type":"library","author":"Jim Schlight","name":"napi-build-utils","version":"1.0.2","description":"A set of utilities to assist developers of tools that build N-API native add-ons","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:napi-build-utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/napi-build-utils@1.0.2","externalReferences":[{"url":"git+https://github.com/inspiredware/napi-build-utils.git","type":"distribution"},{"url":"https://github.com/inspiredware/napi-build-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build-utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi-build-utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi_build_utils:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/napi-build-utils/package.json"}]},{"bom-ref":"pkg:npm/napi-build-utils@2.0.0?package-id=a1b5ba5038b982fd","type":"library","author":"Jim Schlight","name":"napi-build-utils","version":"2.0.0","description":"A set of utilities to assist developers of tools that build N-API native add-ons","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/napi-build-utils@2.0.0","externalReferences":[{"url":"git+https://github.com/inspiredware/napi-build-utils.git","type":"distribution"},{"url":"https://github.com/inspiredware/napi-build-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json"}]},{"bom-ref":"pkg:npm/napi-build-utils@2.0.0?package-id=3a25fd995add959b","type":"library","author":"Jim Schlight","name":"napi-build-utils","version":"2.0.0","description":"A set of utilities to assist developers of tools that build N-API native add-ons","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:napi-build-utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/napi-build-utils@2.0.0","externalReferences":[{"url":"git+https://github.com/inspiredware/napi-build-utils.git","type":"distribution"},{"url":"https://github.com/inspiredware/napi-build-utils#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build-utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build_utils:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspiredware:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi-build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi_build:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi-build-utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:napi:napi_build_utils:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json"}]},{"bom-ref":"pkg:npm/needle@2.9.1?package-id=02a44fe43834d9a1","type":"library","author":"Tomás Pollak <tomas@forkhq.com>","name":"needle","version":"2.9.1","description":"The leanest and most handsome HTTP client in the Nodelands.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:needle:needle:2.9.1:*:*:*:*:*:*:*","purl":"pkg:npm/needle@2.9.1","externalReferences":[{"url":"https://github.com/tomas/needle.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tomas:needle:2.9.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/needle/package.json"}]},{"bom-ref":"pkg:npm/negotiator@0.6.3?package-id=3124531c115a5cf0","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"negotiator","version":"0.6.3","description":"HTTP content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:negotiator:negotiator:0.6.3:*:*:*:*:*:*:*","purl":"pkg:npm/negotiator@0.6.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/accepts/node_modules/negotiator/package.json"}]},{"bom-ref":"pkg:npm/negotiator@0.6.4?package-id=922044f9c518728f","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"negotiator","version":"0.6.4","description":"HTTP content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:negotiator:negotiator:0.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/negotiator@0.6.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/negotiator/package.json"}]},{"bom-ref":"pkg:npm/negotiator@1.0.0?package-id=c566eb58c86960c4","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Federico Romero <federico.romero@outboxlabs.com>, Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"negotiator","version":"1.0.0","description":"HTTP content negotiation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:negotiator:negotiator:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/negotiator@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json"}]},{"bom-ref":"pkg:npm/neo-async@2.6.2?package-id=fa2e675cd8ba8607","type":"library","name":"neo-async","version":"2.6.2","description":"Neo-Async is a drop-in replacement for Async, it almost fully covers its functionality and runs faster ","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:neo-async:neo-async:2.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/neo-async@2.6.2","externalReferences":[{"url":"https://github.com/suguru03/neo-async","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo-async:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo_async:neo-async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo_async:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:suguru03:neo-async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:suguru03:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo:neo-async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:neo:neo_async:2.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/neo-async/package.json"}]},{"bom-ref":"pkg:npm/neoip@2.1.0?package-id=376d1a73b3eff3dd","type":"library","author":"Fedor Indutny <fedor@indutny.com>, Mike Hall <michael.hall@zaptic.com>","name":"neoip","version":"2.1.0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:zaptic:neoip:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/neoip@2.1.0","externalReferences":[{"url":"https://github.com/zaptic/neoip.git","type":"distribution"},{"url":"https://github.com/zaptic/neoip","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:neoip:neoip:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/neoip/package.json"}]},{"bom-ref":"pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13.4&package-id=789361e68c8ad425","type":"library","publisher":"Marco d'Itri <md@linux.it>","name":"netbase","version":"6.5","licenses":[{"license":{"id":"GPL-2.0-only"}}],"cpe":"cpe:2.3:a:netbase:netbase:6.5:*:*:*:*:*:*:*","purl":"pkg:deb/debian/netbase@6.5?arch=all&distro=debian-13.4","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/netbase"},{"name":"syft:location:1:layerID","value":"sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda"},{"name":"syft:location:1:path","value":"/usr/share/doc/netbase/copyright"},{"name":"syft:location:2:layerID","value":"sha256:621c35e751a51a9a9dc3e80aa0b7fe8be2a93402ea6ccd307d30852cd7776cda"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/netbase.md5sums"},{"name":"syft:metadata:installedSize","value":"35"}]},{"bom-ref":"pkg:generic/node@24.15.0?package-id=76f03d93690a7b09","type":"application","name":"node","version":"24.15.0","cpe":"cpe:2.3:a:nodejs:node.js:24.15.0:*:*:*:*:*:*:*","purl":"pkg:generic/node@24.15.0","properties":[{"name":"syft:package:foundBy","value":"binary-classifier-cataloger"},{"name":"syft:package:type","value":"binary"},{"name":"syft:package:metadataType","value":"binary-signature"},{"name":"syft:location:0:layerID","value":"sha256:4a046718166fef824e88680c1932718faaae3d2c7d301fe7777f4678cdad2b14"},{"name":"syft:location:0:path","value":"/nodejs/bin/node"}]},{"bom-ref":"pkg:npm/node-abi@2.30.1?package-id=56163144372dee3f","type":"library","author":"Lukas Geiger","name":"node-abi","version":"2.30.1","description":"Get the Node ABI for a given target and runtime, and vice versa.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-abi:node-abi:2.30.1:*:*:*:*:*:*:*","purl":"pkg:npm/node-abi@2.30.1","externalReferences":[{"url":"https://github.com/lgeiger/node-abi.git","type":"distribution"},{"url":"https://github.com/lgeiger/node-abi#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node-abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lgeiger:node-abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:lgeiger:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_abi:2.30.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-abi/package.json"}]},{"bom-ref":"pkg:npm/node-abi@3.92.0?package-id=0203e2d57c19a37d","type":"library","author":"Lukas Geiger","name":"node-abi","version":"3.92.0","description":"Get the Node ABI for a given target and runtime, and vice versa.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:electron:node-abi:3.92.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-abi@3.92.0","externalReferences":[{"url":"git+https://github.com/electron/node-abi.git","type":"distribution"},{"url":"https://github.com/electron/node-abi#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:electron:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node-abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node-abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json"}]},{"bom-ref":"pkg:npm/node-abi@3.92.0?package-id=49f015f169b02934","type":"library","author":"Lukas Geiger","name":"node-abi","version":"3.92.0","description":"Get the Node ABI for a given target and runtime, and vice versa.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:electron:node-abi:3.92.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-abi@3.92.0","externalReferences":[{"url":"git+https://github.com/electron/node-abi.git","type":"distribution"},{"url":"https://github.com/electron/node-abi#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:electron:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node-abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-abi:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node-abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_abi:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_abi:3.92.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json"}]},{"bom-ref":"pkg:npm/node-addon-api@7.1.1?package-id=3b2568607ceb74e4","type":"library","author":"Abhishek Kumar Singh (https://github.com/abhi11210646), Alba Mendez (https://github.com/jmendeth), Alexander Floh (https://github.com/alexanderfloh), Ammar Faizi (https://github.com/ammarfaizi2), András Timár, Dr (https://github.com/timarandras), Andrew Petersen (https://github.com/kirbysayshi), Anisha Rohra (https://github.com/anisha-rohra), Anna Henningsen (https://github.com/addaleax), Arnaud Botella (https://github.com/BotellaA), Arunesh Chandra (https://github.com/aruneshchandra), Azlan Mukhtar (https://github.com/azlan), Ben Berman (https://github.com/rivertam), Benjamin Byholm (https://github.com/kkoopa), Bill Gallafent (https://github.com/gallafent), blagoev (https://github.com/blagoev), Bruce A. MacNaughton (https://github.com/bmacnaughton), Cory Mickelson (https://github.com/corymickelson), Daniel Bevenius (https://github.com/danbev), Dante Calderón (https://github.com/dantehemerson), Darshan Sen (https://github.com/RaisinTen), David Halls (https://github.com/davedoesdev), Deepak Rajamohan (https://github.com/deepakrkris), Dmitry Ashkadov (https://github.com/dmitryash), Dongjin Na (https://github.com/nadongguri), Doni Rubiagatra (https://github.com/rubiagatra), Eric Bickle (https://github.com/ebickle), extremeheat (https://github.com/extremeheat), Feng Yu (https://github.com/F3n67u), Ferdinand Holzer (https://github.com/fholzer), Gabriel Schulhof (https://github.com/gabrielschulhof), Guenter Sandner (https://github.com/gms1), Gus Caplan (https://github.com/devsnek), Helio Frota (https://github.com/helio-frota), Hitesh Kanwathirtha (https://github.com/digitalinfinity), ikokostya (https://github.com/ikokostya), Jack Xia (https://github.com/JckXia), Jake Barnes (https://github.com/DuBistKomisch), Jake Yoon (https://github.com/yjaeseok), Jason Ginchereau (https://github.com/jasongin), Jenny (https://github.com/egg-bread), Jeroen Janssen (https://github.com/japj), Jim Schlight (https://github.com/jschlight), Jinho Bang (https://github.com/romandev), José Expósito (https://github.com/JoseExposito), joshgarde (https://github.com/joshgarde), Julian Mesa (https://github.com/julianmesa-gitkraken), Kasumi Hanazuki (https://github.com/hanazuki), Kelvin (https://github.com/kelvinhammond), Kevin Eady (https://github.com/KevinEady), Kévin VOYER (https://github.com/kecsou), kidneysolo (https://github.com/kidneysolo), Koki Nishihara (https://github.com/Nishikoh), Konstantin Tarkus (https://github.com/koistya), Kyle Farnung (https://github.com/kfarnung), Kyle Kovacs (https://github.com/nullromo), legendecas (https://github.com/legendecas), LongYinan (https://github.com/Brooooooklyn), Lovell Fuller (https://github.com/lovell), Luciano Martorella (https://github.com/lmartorella), mastergberry (https://github.com/mastergberry), Mathias Küsel (https://github.com/mathiask88), Mathias Stearn (https://github.com/RedBeard0531), Matteo Collina (https://github.com/mcollina), Michael Dawson (https://github.com/mhdawson), Michael Price (https://github.com/mikepricedev), Michele Campus (https://github.com/kYroL01), Mikhail Cheshkov (https://github.com/mcheshkov), nempoBu4 (https://github.com/nempoBu4), Nicola Del Gobbo (https://github.com/NickNaso), Nick Soggin (https://github.com/iSkore), Nikolai Vavilov (https://github.com/seishun), Nurbol Alpysbayev (https://github.com/anurbol), pacop (https://github.com/pacop), Peter Šándor (https://github.com/petersandor), Philipp Renoth (https://github.com/DaAitch), rgerd (https://github.com/rgerd), Richard Lau (https://github.com/richardlau), Rolf Timmermans (https://github.com/rolftimmermans), Ross Weir (https://github.com/ross-weir), Ryuichi Okumura (https://github.com/okuryu), Saint Gabriel (https://github.com/chineduG), Sampson Gao (https://github.com/sampsongao), Sam Roberts (https://github.com/sam-github), strager (https://github.com/strager), Taylor Woll (https://github.com/boingoing), Thomas Gentilhomme (https://github.com/fraxken), Tim Rach (https://github.com/timrach), Tobias Nießen (https://github.com/tniessen), todoroff (https://github.com/todoroff), Toyo Li (https://github.com/toyobayashi), Tux3 (https://github.com/tux3), Vlad Velmisov (https://github.com/Velmisov), Vladimir Morozov (https://github.com/vmoroz), WenheLI (https://github.com/WenheLI), Xuguang Mei (https://github.com/meixg), Yohei Kishimoto (https://github.com/morokosi), Yulong Wang (https://github.com/fs-eire), Ziqiu Zhao (https://github.com/ZzqiZQute), Feng Yu (https://github.com/F3n67u), wanlu wang (https://github.com/wanlu), Caleb Hearon (https://github.com/chearon), Marx (https://github.com/MarxJiao), Ömer AKGÜL (https://github.com/tuhalf)","name":"node-addon-api","version":"7.1.1","description":"Node.js API (Node-API)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-addon-api:node-addon-api:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/node-addon-api@7.1.1","externalReferences":[{"url":"git://github.com/nodejs/node-addon-api.git","type":"distribution"},{"url":"https://github.com/nodejs/node-addon-api","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-addon-api:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon_api:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon_api:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-addon:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-addon:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_addon:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-addon-api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_addon_api:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-addon-api/package.json"}]},{"bom-ref":"pkg:npm/node-gyp@11.5.0?package-id=81a9275b7bb13ed5","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)","name":"node-gyp","version":"11.5.0","description":"Node.js native addon build tool","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-gyp:node-gyp:11.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-gyp@11.5.0","externalReferences":[{"url":"git://github.com/nodejs/node-gyp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node-gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node_gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node-gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node_gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_gyp:11.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/package.json"}]},{"bom-ref":"pkg:npm/node-gyp@8.4.1?package-id=4c76218352127cf5","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://tootallnate.net)","name":"node-gyp","version":"8.4.1","description":"Node.js native addon build tool","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:node-gyp:node-gyp:8.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/node-gyp@8.4.1","externalReferences":[{"url":"git://github.com/nodejs/node-gyp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-gyp:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node-gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_gyp:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node-gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_gyp:8.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json"}]},{"bom-ref":"pkg:npm/node-pre-gyp@0.15.0?package-id=f723ada374e828f8","type":"library","author":"Dane Springmeyer <dane@mapbox.com>","name":"node-pre-gyp","version":"0.15.0","description":"Node.js native addon binary install tool","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:node-pre-gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*","purl":"pkg:npm/node-pre-gyp@0.15.0","externalReferences":[{"url":"git://github.com/mapbox/node-pre-gyp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-pre-gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre_gyp:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre_gyp:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node-pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node_pre:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mapbox:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mapbox:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node-pre-gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:node:node_pre_gyp:0.15.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/package.json"}]},{"bom-ref":"pkg:npm/noop-logger@0.1.1?package-id=62097a3cbdf4d6ce","type":"library","name":"noop-logger","version":"0.1.1","description":"A logger that does exactly nothing.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:noop-logger:noop-logger:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/noop-logger@0.1.1","externalReferences":[{"url":"git://github.com/segmentio/noop-logger.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop-logger:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop_logger:noop-logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop_logger:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:segmentio:noop-logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:segmentio:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop:noop-logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:noop:noop_logger:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/noop-logger/package.json"}]},{"bom-ref":"pkg:npm/nopt@4.0.3?package-id=17084a2a134171fb","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"nopt","version":"4.0.3","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:4.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@4.0.3","externalReferences":[{"url":"https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:nopt:4.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/nopt@5.0.0?package-id=a292a6d3f8b86f6b","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"nopt","version":"5.0.0","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@5.0.0","externalReferences":[{"url":"https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:nopt:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/nopt@8.1.0?package-id=e53437a448e9c126","type":"library","author":"GitHub Inc.","name":"nopt","version":"8.1.0","description":"Option parsing for Node, supporting types, shorthands, etc. Used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:nopt:nopt:8.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/nopt@8.1.0","externalReferences":[{"url":"git+https://github.com/npm/nopt.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json"}]},{"bom-ref":"pkg:npm/normalize-path@2.1.1?package-id=371b1b4791f29956","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz <blaine.bublitz@gmail.com> (https://twitter.com/BlaineBublitz), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert)","name":"normalize-path","version":"2.1.1","description":"Normalize file path slashes to be unix-like forward slashes. Also condenses repeat slashes to a single slash and removes and trailing slashes unless disabled.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:normalize-path:normalize-path:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/normalize-path@2.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/normalize-path","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize-path:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize-path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize_path:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize-path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize-path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:normalize:normalize_path:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/normalize-path/package.json"}]},{"bom-ref":"pkg:npm/normalize-url@2.0.1?package-id=19ee02344c33b376","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"normalize-url","version":"2.0.1","description":"Normalize a URL","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:normalize-url_project:normalize-url:2.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/normalize-url@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/normalize-url/package.json"}]},{"bom-ref":"pkg:npm/notevil@1.3.3?package-id=06d4740823f7ae47","type":"library","author":"Matt McKegg","name":"notevil","version":"1.3.3","description":"Evalulate javascript like the built-in eval() method but safely","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:notevil_project:notevil:1.3.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/notevil@1.3.3","externalReferences":[{"url":"https://github.com/mmckegg/notevil","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/notevil/package.json"}]},{"bom-ref":"pkg:npm/npm-bundled@1.1.2?package-id=9514fb53235856ea","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"npm-bundled","version":"1.1.2","description":"list things in node_modules that are bundledDependencies, or transitive dependencies thereof","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npm-bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/npm-bundled@1.1.2","externalReferences":[{"url":"git+https://github.com/npm/npm-bundled.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_bundled:npm-bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_bundled:npm_bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm-bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm_bundled:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npm-bundled/package.json"}]},{"bom-ref":"pkg:npm/npm-normalize-package-bin@1.0.1?package-id=a243c54124680107","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"npm-normalize-package-bin","version":"1.0.1","description":"Turn any flavor of allowable package.json bin into a normalized object","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npm-normalize-package-bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/npm-normalize-package-bin@1.0.1","externalReferences":[{"url":"git+https://github.com/npm/npm-normalize-package-bin","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize-package-bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package_bin:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package_bin:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize-package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize-package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize_package:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_normalize:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm-normalize-package-bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm_normalize_package_bin:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npm-normalize-package-bin/package.json"}]},{"bom-ref":"pkg:npm/npm-packlist@1.4.8?package-id=d146b73bd2488b35","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"npm-packlist","version":"1.4.8","description":"Get a list of the files to add from a folder into an npm package","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npm-packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*","purl":"pkg:npm/npm-packlist@1.4.8","externalReferences":[{"url":"git+https://github.com/npm/npm-packlist.git","type":"distribution"},{"url":"https://www.npmjs.com/package/npm-packlist","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm-packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_packlist:npm-packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm_packlist:npm_packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm-packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npm_packlist:1.4.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npm-packlist/package.json"}]},{"bom-ref":"pkg:npm/npmlog@4.1.2?package-id=f0ae369a8e8ec43c","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"npmlog","version":"4.1.2","description":"logger for npm","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmlog:npmlog:4.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/npmlog@4.1.2","externalReferences":[{"url":"https://github.com/npm/npmlog.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npmlog:4.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/npmlog/package.json"}]},{"bom-ref":"pkg:npm/npmlog@6.0.2?package-id=0ceab194b80b773c","type":"library","author":"GitHub Inc.","name":"npmlog","version":"6.0.2","description":"logger for npm","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmlog:npmlog:6.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/npmlog@6.0.2","externalReferences":[{"url":"https://github.com/npm/npmlog.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:npmlog:6.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json"}]},{"bom-ref":"pkg:npm/number-is-nan@1.0.1?package-id=d623ff908a3a9701","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"number-is-nan","version":"1.0.1","description":"ES2015 Number.isNaN() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:number-is-nan:number-is-nan:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/number-is-nan@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:number-is-nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is_nan:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is_nan:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number-is:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number-is:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number_is:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number:number-is-nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:number:number_is_nan:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/number-is-nan/package.json"}]},{"bom-ref":"pkg:npm/nw-pre-gyp-module-test@0.0.1?package-id=c9c21893f035082b","type":"library","name":"nw-pre-gyp-module-test","version":"0.0.1","description":"Node-webkit-based module test.","cpe":"cpe:2.3:a:nw-pre-gyp-module-test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/nw-pre-gyp-module-test@0.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp-module-test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module_test:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module_test:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp-module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp-module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp_module:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre-gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre_gyp:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw-pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw_pre:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw:nw-pre-gyp-module-test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nw:nw_pre_gyp_module_test:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json"}]},{"bom-ref":"pkg:npm/object-assign@4.1.1?package-id=4c17ebf4ed7ff6f6","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"object-assign","version":"4.1.1","description":"ES2015 `Object.assign()` ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-assign:object-assign:4.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/object-assign@4.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-assign:object_assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_assign:object-assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_assign:object_assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_assign:4.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-assign/package.json"}]},{"bom-ref":"pkg:npm/object-inspect@1.13.4?package-id=9fa07124108ec4f5","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"object-inspect","version":"1.13.4","description":"string representations of objects in node and the browser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-inspect:object-inspect:1.13.4:*:*:*:*:*:*:*","purl":"pkg:npm/object-inspect@1.13.4","externalReferences":[{"url":"git://github.com/inspect-js/object-inspect.git","type":"distribution"},{"url":"https://github.com/inspect-js/object-inspect","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_inspect:object-inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_inspect:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:object-inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_inspect:1.13.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-inspect/package.json"}]},{"bom-ref":"pkg:npm/object-is@1.1.6?package-id=84b496a3bc09adcb","type":"library","author":"Jordan Harband","name":"object-is","version":"1.1.6","description":"ES2015-compliant shim for Object.is - differentiates between -0 and +0","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-is:object-is:1.1.6:*:*:*:*:*:*:*","purl":"pkg:npm/object-is@1.1.6","externalReferences":[{"url":"git://github.com/es-shims/object-is.git","type":"distribution"},{"url":"https://github.com/es-shims/object-is","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-is:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_is:object-is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_is:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:object-is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_is:1.1.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-is/package.json"}]},{"bom-ref":"pkg:npm/object-keys@1.1.1?package-id=f895e876218f5744","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Raynos <raynos2@gmail.com>, Nathan Rajlich <nathan@tootallnate.net>, Ivan Starkov <istarkov@gmail.com>, Gary Katsevman <git@gkatsev.com>","name":"object-keys","version":"1.1.1","description":"An Object.keys replacement, in case Object.keys is not available. From https://github.com/es-shims/es5-shim","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object-keys:object-keys:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/object-keys@1.1.1","externalReferences":[{"url":"git://github.com/ljharb/object-keys.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object-keys:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_keys:object-keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object_keys:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:object-keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object-keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:object:object_keys:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object-keys/package.json"}]},{"bom-ref":"pkg:npm/object.assign@4.1.7?package-id=99e989384d4fde68","type":"library","author":"Jordan Harband","name":"object.assign","version":"4.1.7","description":"ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object.assign:object.assign:4.1.7:*:*:*:*:*:*:*","purl":"pkg:npm/object.assign@4.1.7","externalReferences":[{"url":"git://github.com/ljharb/object.assign.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:object.assign:4.1.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.assign/package.json"}]},{"bom-ref":"pkg:npm/object.defaults@1.1.0?package-id=367f49b07eb9d797","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert <jon.schlinkert@sellside.com> (http://twitter.com/jonschlinkert), Sobolev Nikita <mail@sobolevn.me> (https://github.com/sobolevn)","name":"object.defaults","version":"1.1.0","description":"Like `extend` but only copies missing properties/values to the target object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:object.defaults:object.defaults:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/object.defaults@1.1.0","externalReferences":[{"url":"https://github.com/jonschlinkert/object.defaults","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:object.defaults:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.defaults/package.json"}]},{"bom-ref":"pkg:npm/object.map@1.0.1?package-id=929d9a3710694392","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Blaine Bublitz (https://twitter.com/BlaineBublitz), Brian Woodward (https://twitter.com/doowb), Jon Schlinkert (http://twitter.com/jonschlinkert)","name":"object.map","version":"1.0.1","description":"Similar to map for arrays, this creates a new object by calling the callback on each property of the original object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:object.map:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/object.map@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/object.map","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object.map:object.map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.map/package.json"}]},{"bom-ref":"pkg:npm/object.pick@1.3.0?package-id=5e847d3bd979f56f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"object.pick","version":"1.3.0","description":"Returns a filtered copy of an object with only the specified keys, similar to `_.pick` from lodash / underscore.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:object.pick:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/object.pick@1.3.0","externalReferences":[{"url":"https://github.com/jonschlinkert/object.pick","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:object.pick:object.pick:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/object.pick/package.json"}]},{"bom-ref":"pkg:npm/on-finished@2.3.0?package-id=eba7c3545387287a","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"on-finished","version":"2.3.0","description":"Execute a callback when a request closes, finishes, or errors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:on-finished:on-finished:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/on-finished@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:on-finished:on_finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on-finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on_finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on-finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on_finished:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/morgan/node_modules/on-finished/package.json"}]},{"bom-ref":"pkg:npm/on-finished@2.4.1?package-id=f038e79e9d5d2966","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"on-finished","version":"2.4.1","description":"Execute a callback when a request closes, finishes, or errors","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:on-finished:on-finished:2.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/on-finished@2.4.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:on-finished:on_finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on-finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_finished:on_finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on-finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on_finished:2.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/on-finished/package.json"}]},{"bom-ref":"pkg:npm/on-headers@1.1.0?package-id=4edf87114c9684eb","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"on-headers","version":"1.1.0","description":"Execute a listener when a response is about to write headers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:on-headers:on-headers:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/on-headers@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:on-headers:on_headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_headers:on-headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on_headers:on_headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on-headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:on:on_headers:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/on-headers/package.json"}]},{"bom-ref":"pkg:npm/once@1.4.0?package-id=710fa9c43bb773a8","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"once","version":"1.4.0","description":"Run a function exactly one time","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:once:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/once@1.4.0","externalReferences":[{"url":"git://github.com/isaacs/once","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:once:once:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/once/package.json"}]},{"bom-ref":"pkg:npm/one-time@1.0.0?package-id=c572449b4ab3e7a6","type":"library","author":"Arnout Kazemier","name":"one-time","version":"1.0.0","description":"Run the supplied function exactly one time (once)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:one-time:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/one-time@1.0.0","externalReferences":[{"url":"https://github.com/3rd-Eden/one-time.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:3rd-Eden:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one-time:one-time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one-time:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one_time:one-time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one_time:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one:one-time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:one:one_time:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/one-time/package.json"}]},{"bom-ref":"pkg:npm/opentype.js@0.7.3?package-id=0a5d0e299d0ca888","type":"library","author":"Frederik De Bleser <frederik@debleser.be>","name":"opentype.js","version":"0.7.3","description":"OpenType font parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:opentype.js:opentype.js:0.7.3:*:*:*:*:*:*:*","purl":"pkg:npm/opentype.js@0.7.3","externalReferences":[{"url":"git://github.com/nodebox/opentype.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodebox:opentype.js:0.7.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/opentype.js/package.json"}]},{"bom-ref":"pkg:npm/os-homedir@1.0.2?package-id=52db215c8294fee6","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"os-homedir","version":"1.0.2","description":"Node.js 4 `os.homedir()` ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:os-homedir:os-homedir:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/os-homedir@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:os-homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_homedir:os-homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_homedir:os_homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os-homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os_homedir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/os-homedir/package.json"}]},{"bom-ref":"pkg:npm/os-tmpdir@1.0.2?package-id=4374998874b59022","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"os-tmpdir","version":"1.0.2","description":"Node.js os.tmpdir() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:os-tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/os-tmpdir@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:os-tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_tmpdir:os-tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os_tmpdir:os_tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os-tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:os:os_tmpdir:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/os-tmpdir/package.json"}]},{"bom-ref":"pkg:npm/osenv@0.1.5?package-id=1369b3372e58f531","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"osenv","version":"0.1.5","description":"Look up environment settings specific to different operating systems","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:osenv:osenv:0.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/osenv@0.1.5","externalReferences":[{"url":"https://github.com/npm/osenv","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:osenv:0.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/osenv/package.json"}]},{"bom-ref":"pkg:npm/otplib@13.4.0?package-id=0044d1899783133a","type":"library","author":"Gerald Yeo <support@yeojz.dev>","name":"otplib","version":"13.4.0","description":"TypeScript-first library for TOTP and HOTP with multi-runtime and plugin support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:otplib:otplib:13.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/otplib@13.4.0","externalReferences":[{"url":"git+https://github.com/yeojz/otplib.git","type":"distribution"},{"url":"https://otplib.yeojz.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/otplib/package.json"}]},{"bom-ref":"pkg:npm/p-cancelable@0.4.1?package-id=0583de70fcdfc131","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-cancelable","version":"0.4.1","description":"Create a promise that can be canceled","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/p-cancelable@0.4.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_cancelable:p-cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_cancelable:p_cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_cancelable:0.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-cancelable/package.json"}]},{"bom-ref":"pkg:npm/p-event@2.3.1?package-id=df4ea6677e364df8","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-event","version":"2.3.1","description":"Promisify an event by waiting for it to be emitted","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-event:p-event:2.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/p-event@2.3.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-event:p_event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_event:p-event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_event:p_event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_event:2.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-event/package.json"}]},{"bom-ref":"pkg:npm/p-finally@1.0.0?package-id=6dc32e80fda079a9","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-finally","version":"1.0.0","description":"`Promise#finally()` ponyfill - Invoked when the promise is settled regardless of outcome","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-finally:p-finally:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-finally@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-finally:p_finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_finally:p-finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_finally:p_finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_finally:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-finally/package.json"}]},{"bom-ref":"pkg:npm/p-is-promise@1.1.0?package-id=bf2a9cb36f7ff224","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-is-promise","version":"1.1.0","description":"Check if something is a promise","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-is-promise:p-is-promise:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-is-promise@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-is-promise:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is_promise:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is_promise:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-is:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-is:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_is:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-is-promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_is_promise:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-is-promise/package.json"}]},{"bom-ref":"pkg:npm/p-limit@2.3.0?package-id=1e7a4b5a5a7aade9","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-limit","version":"2.3.0","description":"Run multiple promise-returning & async functions with limited concurrency","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-limit:p-limit:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-limit@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-limit:p_limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_limit:p-limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_limit:p_limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_limit:2.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/p-limit/package.json"}]},{"bom-ref":"pkg:npm/p-locate@4.1.0?package-id=55f14ff67eedbaf2","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-locate","version":"4.1.0","description":"Get the first fulfilled promise that satisfies the provided testing function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-locate:p-locate:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-locate@4.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-locate:p_locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_locate:p-locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_locate:p_locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_locate:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/p-locate/package.json"}]},{"bom-ref":"pkg:npm/p-map@4.0.0?package-id=e8a38305d2594577","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"p-map","version":"4.0.0","description":"Map over promises concurrently","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-map:p-map:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-map@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-map:p_map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p-map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p_map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_map:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-map/package.json"}]},{"bom-ref":"pkg:npm/p-map@7.0.4?package-id=e932e8eb4b9575ca","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"p-map","version":"7.0.4","description":"Map over promises concurrently","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-map:p-map:7.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/p-map@7.0.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-map:p_map:7.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p-map:7.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_map:p_map:7.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-map:7.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_map:7.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/cacache/node_modules/p-map/package.json"}]},{"bom-ref":"pkg:npm/p-timeout@2.0.1?package-id=df05fe622aab59f4","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-timeout","version":"2.0.1","description":"Timeout a promise after a specified amount of time","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-timeout:p-timeout:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/p-timeout@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-timeout:p_timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_timeout:p-timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_timeout:p_timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_timeout:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-timeout/package.json"}]},{"bom-ref":"pkg:npm/p-try@2.2.0?package-id=cc75054caddacf72","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"p-try","version":"2.2.0","description":"`Start a promise chain","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:p-try:p-try:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/p-try@2.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:p-try:p_try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_try:p-try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p_try:p_try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p-try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:p:p_try:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/p-try/package.json"}]},{"bom-ref":"pkg:npm/package-json-from-dist@1.0.1?package-id=966e804e2cdc19c3","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://izs.me)","name":"package-json-from-dist","version":"1.0.1","description":"Load the local package.json from either src or dist folder","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:package-json-from-dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/package-json-from-dist@1.0.1","externalReferences":[{"url":"git+https://github.com/isaacs/package-json-from-dist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json-from-dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from_dist:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from_dist:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json-from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json-from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json_from:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package-json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package_json:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:package-json-from-dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:package:package_json_from_dist:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/package-json-from-dist/package.json"}]},{"bom-ref":"pkg:npm/pako@0.2.9?package-id=25e56b2924cae615","type":"library","author":"Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin)","name":"pako","version":"0.2.9","description":"zlib port to javascript - fast, modularized, with browser support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:nodeca:pako:0.2.9:*:*:*:*:*:*:*","purl":"pkg:npm/pako@0.2.9","externalReferences":[{"url":"https://github.com/nodeca/pako","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pako:pako:0.2.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unicode-trie/node_modules/pako/package.json"}]},{"bom-ref":"pkg:npm/pako@1.0.11?package-id=0652478bc95e80f3","type":"library","author":"Andrei Tuputcyn (https://github.com/andr83), Vitaly Puzrin (https://github.com/puzrin), Friedel Ziegelmayer (https://github.com/dignifiedquire), Kirill Efimov (https://github.com/Kirill89), Jean-loup Gailly, Mark Adler","name":"pako","version":"1.0.11","description":"zlib port to javascript - fast, modularized, with browser support","licenses":[{"expression":"MIT AND Zlib"}],"cpe":"cpe:2.3:a:nodeca:pako:1.0.11:*:*:*:*:*:*:*","purl":"pkg:npm/pako@1.0.11","externalReferences":[{"url":"https://github.com/nodeca/pako","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pako:pako:1.0.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pako/package.json"}]},{"bom-ref":"pkg:npm/parse-filepath@1.0.2?package-id=e056c65cb29d1cdc","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"parse-filepath","version":"1.0.2","description":"Pollyfill for node.js `path.parse`, parses a filepath into an object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:parse-filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/parse-filepath@1.0.2","externalReferences":[{"url":"https://github.com/jonschlinkert/parse-filepath","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse-filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_filepath:parse-filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_filepath:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:parse-filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse-filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse_filepath:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/parse-filepath/package.json"}]},{"bom-ref":"pkg:npm/parse-passwd@1.0.0?package-id=fb103d20d587efac","type":"library","author":"Brian Woodward (https://github.com/doowb)","name":"parse-passwd","version":"1.0.0","description":"Parse a passwd file into a list of users.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:parse-passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/parse-passwd@1.0.0","externalReferences":[{"url":"https://github.com/doowb/parse-passwd","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse-passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_passwd:parse-passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse_passwd:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:parse-passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:doowb:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse-passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parse:parse_passwd:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/parse-passwd/package.json"}]},{"bom-ref":"pkg:npm/parseurl@1.3.3?package-id=742ccf9d8e4af8dc","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"parseurl","version":"1.3.3","description":"parse a url with memoization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:parseurl:parseurl:1.3.3:*:*:*:*:*:*:*","purl":"pkg:npm/parseurl@1.3.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/parseurl/package.json"}]},{"bom-ref":"pkg:npm/path-exists@4.0.0?package-id=e34ca3dd718a6918","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"path-exists","version":"4.0.0","description":"Check if a path exists","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-exists:path-exists:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/path-exists@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-exists:path_exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_exists:path-exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_exists:path_exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_exists:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-exists/package.json"}]},{"bom-ref":"pkg:npm/path-is-absolute@1.0.1?package-id=8bf9ef21aa2f3e3c","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"path-is-absolute","version":"1.0.1","description":"Node.js 0.12 path.isAbsolute() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-is-absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-is-absolute@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-is-absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is_absolute:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is_absolute:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_is:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-is-absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_is_absolute:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-is-absolute/package.json"}]},{"bom-ref":"pkg:npm/path-key@3.1.1?package-id=0fdcd7cdef61a3e7","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"path-key","version":"3.1.1","description":"Get the PATH environment variable key cross-platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-key:path-key:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-key@3.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-key:path_key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_key:path-key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_key:path_key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_key:3.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-key/package.json"}]},{"bom-ref":"pkg:npm/path-parse@1.0.7?package-id=5705871024a48530","type":"library","author":"Javier Blanco <http://jbgutierrez.info>","name":"path-parse","version":"1.0.7","description":"Node.js path.parse() ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-parse_project:path-parse:1.0.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/path-parse@1.0.7","externalReferences":[{"url":"https://github.com/jbgutierrez/path-parse.git","type":"distribution"},{"url":"https://github.com/jbgutierrez/path-parse#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-parse/package.json"}]},{"bom-ref":"pkg:npm/path-root@0.1.1?package-id=03046e5f9c1c7d1f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"path-root","version":"0.1.1","description":"Get the root of a posix or windows filepath.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:path-root:0.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-root@0.1.1","externalReferences":[{"url":"https://github.com/jonschlinkert/path-root","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path-root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path-root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_root:0.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-root/package.json"}]},{"bom-ref":"pkg:npm/path-root-regex@0.1.2?package-id=91e5c6fbec5920e7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"path-root-regex","version":"0.1.2","description":"Regular expression for getting the root of a posix or windows filepath.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:path-root-regex:path-root-regex:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/path-root-regex@0.1.2","externalReferences":[{"url":"https://github.com/regexhq/path-root-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root-regex:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root_regex:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root_regex:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-root:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_root:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-root-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_root_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-root-regex/package.json"}]},{"bom-ref":"pkg:npm/path-scurry@1.11.1?package-id=ea725e26827e4925","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (https://blog.izs.me)","name":"path-scurry","version":"1.11.1","description":"walk paths fast and efficiently","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:path-scurry:path-scurry:1.11.1:*:*:*:*:*:*:*","purl":"pkg:npm/path-scurry@1.11.1","externalReferences":[{"url":"git+https://github.com/isaacs/path-scurry","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:path-scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_scurry:path-scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path_scurry:path_scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path-scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:path:path_scurry:1.11.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-scurry/package.json"}]},{"bom-ref":"pkg:npm/path-to-regexp@0.1.13?package-id=956f5aed1bcabe03","type":"library","name":"path-to-regexp","version":"0.1.13","description":"Express style path to RegExp utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pillarjs:path-to-regexp:0.1.13:*:*:*:*:node.js:*:*","purl":"pkg:npm/path-to-regexp@0.1.13","externalReferences":[{"url":"https://github.com/pillarjs/path-to-regexp.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/path-to-regexp/package.json"}]},{"bom-ref":"pkg:npm/pdfkit@0.11.0?package-id=9db722276593f5ce","type":"library","author":"Devon Govett <devongovett@gmail.com> (http://badassjs.com/)","name":"pdfkit","version":"0.11.0","description":"A PDF generation library for Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:foliojs:pdfkit:0.11.0:*:*:*:*:*:*:*","purl":"pkg:npm/pdfkit@0.11.0","externalReferences":[{"url":"https://github.com/foliojs/pdfkit.git","type":"distribution"},{"url":"http://pdfkit.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pdfkit:pdfkit:0.11.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pdfkit/package.json"}]},{"bom-ref":"pkg:npm/peek-readable@4.1.0?package-id=a8a35d958d903684","type":"library","author":"Borewit (https://github.com/Borewit)","name":"peek-readable","version":"4.1.0","description":"Read and peek from a readable stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:peek-readable:peek-readable:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/peek-readable@4.1.0","externalReferences":[{"url":"git+https://github.com/Borewit/peek-readable","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek-readable:peek_readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek_readable:peek-readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek_readable:peek_readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek:peek-readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:peek:peek_readable:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/peek-readable/package.json"}]},{"bom-ref":"pkg:npm/pend@1.2.0?package-id=12701b802402fca7","type":"library","author":"Andrew Kelley <superjoe30@gmail.com>","name":"pend","version":"1.2.0","description":"dead-simple optimistic async helper","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:andrewrk:pend:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/pend@1.2.0","externalReferences":[{"url":"git://github.com/andrewrk/node-pend.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pend:pend:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pend/package.json"}]},{"bom-ref":"pkg:npm/pg-connection-string@2.12.0?package-id=b511874505753174","type":"library","author":"Blaine Bublitz <blaine@iceddev.com> (http://iceddev.com/)","name":"pg-connection-string","version":"2.12.0","description":"Functions for dealing with a PostgresSQL connection string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pg-connection-string:pg-connection-string:2.12.0:*:*:*:*:*:*:*","purl":"pkg:npm/pg-connection-string@2.12.0","externalReferences":[{"url":"git://github.com/brianc/node-postgres.git","type":"distribution"},{"url":"https://github.com/brianc/node-postgres/tree/master/packages/pg-connection-string","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg-connection-string:pg_connection_string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection_string:pg-connection-string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection_string:pg_connection_string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg-connection:pg-connection-string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg-connection:pg_connection_string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection:pg-connection-string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg_connection:pg_connection_string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brianc:pg-connection-string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:brianc:pg_connection_string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg:pg-connection-string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pg:pg_connection_string:2.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pg-connection-string/package.json"}]},{"bom-ref":"pkg:npm/picocolors@1.1.1?package-id=d02f32d91d4af8a0","type":"library","author":"Alexey Raspopov","name":"picocolors","version":"1.1.1","description":"The tiniest and the fastest library for terminal output formatting with ANSI colors","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:picocolors:picocolors:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/picocolors@1.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/picocolors/package.json"}]},{"bom-ref":"pkg:npm/picomatch@2.3.2?package-id=b20eb66c8928f9be","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"picomatch","version":"2.3.2","description":"Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:picomatch:2.3.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/picomatch@2.3.2","externalReferences":[{"url":"https://github.com/micromatch/picomatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/picomatch/package.json"}]},{"bom-ref":"pkg:npm/picomatch@4.0.4?package-id=2d7f8db766fc3be7","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"picomatch","version":"4.0.4","description":"Blazing fast and accurate glob matcher written in JavaScript, with no dependencies and full support for standard and extended Bash glob features, including braces, extglobs, POSIX brackets, and regular expressions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:picomatch:4.0.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/picomatch@4.0.4","externalReferences":[{"url":"https://github.com/micromatch/picomatch","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json"}]},{"bom-ref":"pkg:npm/pify@2.3.0?package-id=0dfe147bb8a24d6a","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"pify","version":"2.3.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@2.3.0?package-id=ddba1125c77293de","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"pify","version":"2.3.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:2.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@2.3.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@3.0.0?package-id=74f6afcb29e33215","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"pify","version":"3.0.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@3.0.0?package-id=94b4540c59ceda21","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"pify","version":"3.0.0","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pify@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/got/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pify@4.0.1?package-id=14675684a3b19742","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"pify","version":"4.0.1","description":"Promisify a callback-style function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pify:pify:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pify@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pify/package.json"}]},{"bom-ref":"pkg:npm/pinkie@2.0.4?package-id=d2cce100ab18f798","type":"library","author":"Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)","name":"pinkie","version":"2.0.4","description":"Itty bitty little widdle twinkie pinkie ES2015 Promise implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pinkie:pinkie:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/pinkie@2.0.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pinkie/package.json"}]},{"bom-ref":"pkg:npm/pinkie-promise@2.0.1?package-id=cc6a968ba889b638","type":"library","author":"Vsevolod Strukchinsky <floatdrop@gmail.com> (github.com/floatdrop)","name":"pinkie-promise","version":"2.0.1","description":"ES2015 Promise ponyfill","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pinkie-promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pinkie-promise@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie-promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie_promise:pinkie-promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie_promise:pinkie_promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie:pinkie-promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pinkie:pinkie_promise:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pinkie-promise/package.json"}]},{"bom-ref":"pkg:npm/png-js@1.1.0?package-id=15ca37ad82f59e09","type":"library","author":"Devon Govett <devongovett@gmail.com> (http://badassjs.com/)","name":"png-js","version":"1.1.0","description":"A PNG decoder in JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:png-js:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/png-js@1.1.0","externalReferences":[{"url":"https://github.com/devongovett/png.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:png_js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png-js:png-js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png-js:png_js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png_js:png-js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png_js:png_js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png:png-js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:png:png_js:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/png-js/package.json"}]},{"bom-ref":"pkg:npm/possible-typed-array-names@1.1.0?package-id=fd2e1cd61be49f02","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"possible-typed-array-names","version":"1.1.0","description":"A simple list of possible Typed Array names.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:possible-typed-array-names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/possible-typed-array-names@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/possible-typed-array-names.git","type":"distribution"},{"url":"https://github.com/ljharb/possible-typed-array-names#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed-array-names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array_names:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array_names:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed-array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed-array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed_array:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible-typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible_typed:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:possible:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:possible-typed-array-names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:possible_typed_array_names:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/possible-typed-array-names/package.json"}]},{"bom-ref":"pkg:npm/prebuild-install@5.3.6?package-id=4dc75afb90a1e180","type":"library","author":"Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)","name":"prebuild-install","version":"5.3.6","description":"A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prebuild-install:prebuild-install:5.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/prebuild-install@5.3.6","externalReferences":[{"url":"https://github.com/prebuild/prebuild-install.git","type":"distribution"},{"url":"https://github.com/prebuild/prebuild-install","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild-install:prebuild_install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild-install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild_install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild-install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild_install:5.3.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/prebuild-install/package.json"}]},{"bom-ref":"pkg:npm/prebuild-install@7.1.3?package-id=3b6455381633cdb0","type":"library","author":"Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)","name":"prebuild-install","version":"7.1.3","description":"A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/prebuild-install@7.1.3","externalReferences":[{"url":"https://github.com/prebuild/prebuild-install.git","type":"distribution"},{"url":"https://github.com/prebuild/prebuild-install","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json"}]},{"bom-ref":"pkg:npm/prebuild-install@7.1.3?package-id=008da708a93ab8fd","type":"library","author":"Mathias Buus (@mafintosh), Julian Gruber <julian@juliangruber.com> (https://github.com/juliangruber), Brett Lawson <brett19@gmail.com> (https://github.com/brett19), Pieter Hintjens <ph@imatix.com> (https://github.com/hintjens), Lars-Magnus Skog <ralphtheninja@riseup.net> (https://github.com/ralphtheninja), Jesús Leganés Combarro <piranna@gmail.com> (https://github.com/piranna), Mathias Küsel <mathiask@hotmail.de> (https://github.com/mathiask88), Lukas Geiger <lukas.geiger94@gmail.com> (https://github.com/lgeiger)","name":"prebuild-install","version":"7.1.3","description":"A command line tool to easily install prebuilt binaries for multiple version of node/iojs on a specific platform","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prebuild-install:prebuild-install:7.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/prebuild-install@7.1.3","externalReferences":[{"url":"https://github.com/prebuild/prebuild-install.git","type":"distribution"},{"url":"https://github.com/prebuild/prebuild-install","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild-install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild_install:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild-install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prebuild:prebuild_install:7.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json"}]},{"bom-ref":"pkg:npm/prepend-http@2.0.0?package-id=b8fe3bfab62a882d","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"prepend-http","version":"2.0.0","description":"Prepend `http://` to humanized URLs like todomvc.com and localhost","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:prepend-http:prepend-http:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/prepend-http@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend-http:prepend_http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend_http:prepend-http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend_http:prepend_http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend:prepend-http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prepend:prepend_http:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/prepend-http/package.json"}]},{"bom-ref":"pkg:npm/pretty-bytes@4.0.2?package-id=4d91b0988d9fe55f","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"pretty-bytes","version":"4.0.2","description":"Convert bytes to a human readable string: 1337 → 1.34 kB","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pretty-bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/pretty-bytes@4.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty-bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty_bytes:pretty-bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty_bytes:pretty_bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty:pretty-bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pretty:pretty_bytes:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json"}]},{"bom-ref":"pkg:npm/proc-log@5.0.0?package-id=b7e53f78a8e3b5aa","type":"library","author":"GitHub Inc.","name":"proc-log","version":"5.0.0","description":"just emit 'log' events on the process object","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:proc-log:proc-log:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/proc-log@5.0.0","externalReferences":[{"url":"git+https://github.com/npm/proc-log.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc-log:proc_log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc_log:proc-log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc_log:proc_log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc:proc-log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proc:proc_log:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proc-log/package.json"}]},{"bom-ref":"pkg:npm/process@0.11.10?package-id=86b4e66d55ba762f","type":"library","author":"Roman Shtylman <shtylman@gmail.com>","name":"process","version":"0.11.10","description":"process information for node.js and browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:shtylman:process:0.11.10:*:*:*:*:*:*:*","purl":"pkg:npm/process@0.11.10","externalReferences":[{"url":"git://github.com/shtylman/node-process.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:process:process:0.11.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/process/package.json"}]},{"bom-ref":"pkg:npm/process-nextick-args@2.0.1?package-id=2736f58329e89e68","type":"library","name":"process-nextick-args","version":"2.0.1","description":"process.nextTick but always with args","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:process-nextick-args:process-nextick-args:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/process-nextick-args@2.0.1","externalReferences":[{"url":"https://github.com/calvinmetcalf/process-nextick-args.git","type":"distribution"},{"url":"https://github.com/calvinmetcalf/process-nextick-args","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:process-nextick-args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick_args:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick_args:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process-nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process-nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process_nextick:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:calvinmetcalf:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:calvinmetcalf:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process:process-nextick-args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:process:process_nextick_args:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/process-nextick-args/package.json"}]},{"bom-ref":"pkg:npm/prom-client@15.1.3?package-id=6ecaaf82659f7cf7","type":"library","author":"Simon Nyberg","name":"prom-client","version":"15.1.3","description":"Client for prometheus","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:prom-client:prom-client:15.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/prom-client@15.1.3","externalReferences":[{"url":"https://github.com/siimon/prom-client","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom-client:prom_client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom_client:prom-client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom_client:prom_client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:siimon:prom-client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:siimon:prom_client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom:prom-client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:prom:prom_client:15.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/prom-client/package.json"}]},{"bom-ref":"pkg:npm/promise@7.3.1?package-id=d0870412585e133d","type":"library","author":"ForbesLindesay","name":"promise","version":"7.3.1","description":"Bare bones Promises/A+ implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:promise:promise:7.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/promise@7.3.1","externalReferences":[{"url":"https://github.com/then/promise.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:then:promise:7.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/promise/package.json"}]},{"bom-ref":"pkg:npm/promise-inflight@1.0.1?package-id=cb2d8de0d226aacd","type":"library","author":"Rebecca Turner <me@re-becca.org> (http://re-becca.org/)","name":"promise-inflight","version":"1.0.1","description":"One promise for multiple requests in flight to avoid async duplication","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:promise-inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/promise-inflight@1.0.1","externalReferences":[{"url":"git+https://github.com/iarna/promise-inflight.git","type":"distribution"},{"url":"https://github.com/iarna/promise-inflight#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise-inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_inflight:promise-inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_inflight:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise-inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:promise-inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:promise_inflight:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/promise-inflight/package.json"}]},{"bom-ref":"pkg:npm/promise-retry@2.0.1?package-id=14baa7b321b17fc4","type":"library","author":"IndigoUnited <hello@indigounited.com> (http://indigounited.com)","name":"promise-retry","version":"2.0.1","description":"Retries a function that returns a promise, leveraging the power of the retry module.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:promise-retry:promise-retry:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/promise-retry@2.0.1","externalReferences":[{"url":"git://github.com/IndigoUnited/node-promise-retry.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise-retry:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_retry:promise-retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise_retry:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:promise-retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:IndigoUnited:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise-retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:promise:promise_retry:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/promise-retry/package.json"}]},{"bom-ref":"pkg:npm/proxy-addr@2.0.7?package-id=e9d03164ed043197","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"proxy-addr","version":"2.0.7","description":"Determine address of proxied request","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:proxy-addr:proxy-addr:2.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/proxy-addr@2.0.7","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy-addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy_addr:proxy-addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy_addr:proxy_addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy:proxy-addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:proxy:proxy_addr:2.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/proxy-addr/package.json"}]},{"bom-ref":"pkg:npm/pug@3.0.4?package-id=173ce8303d0e236e","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>, Forbes Lindesay <forbes@lindesay.co.uk>, Matthias Le Brun <mlbli@me.com>, Joshua Appelman <joshua@jbna.nl>, Jonathan Ong <jonathanrichardong@gmail.com>, Alex Kocharin <alex@kocharin.ru>, Hemanth <hemanth.hm@gmail.com>, Timothy Gu <timothygu99@gmail.com>, Andreas Lubbe <git@lubbe.org>","name":"pug","version":"3.0.4","description":"A clean, whitespace-sensitive template language for writing HTML","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pugjs:pug:3.0.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/pug@3.0.4","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug","type":"distribution"},{"url":"https://pugjs.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug/package.json"}]},{"bom-ref":"pkg:npm/pug-attrs@3.0.0?package-id=8ccd7e8a2286d99c","type":"library","author":"Forbes Lindesay","name":"pug-attrs","version":"3.0.0","description":"Generate code for Pug attributes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-attrs@3.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-attrs","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_attrs:pug-attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_attrs:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_attrs:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-attrs/package.json"}]},{"bom-ref":"pkg:npm/pug-code-gen@3.0.4?package-id=56b653fbff8f32dc","type":"library","author":"Forbes Lindesay","name":"pug-code-gen","version":"3.0.4","description":"Default code-generator for pug.  It generates HTML via a JavaScript template function.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pugjs:pug-code-gen:3.0.4:*:*:*:*:node.js:*:*","purl":"pkg:npm/pug-code-gen@3.0.4","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-code-gen","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-code-gen/package.json"}]},{"bom-ref":"pkg:npm/pug-error@2.1.0?package-id=06722d2c34c689cc","type":"library","author":"Forbes Lindesay","name":"pug-error","version":"2.1.0","description":"Standard error objects for pug","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-error:pug-error:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-error@2.1.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-error","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-error:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_error:pug-error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_error:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_error:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-error/package.json"}]},{"bom-ref":"pkg:npm/pug-filters@4.0.0?package-id=5d3376b6724b0ba5","type":"library","author":"Forbes Lindesay","name":"pug-filters","version":"4.0.0","description":"Code for processing filters in pug templates","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-filters:pug-filters:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-filters@4.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-filters","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-filters:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_filters:pug-filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_filters:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_filters:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-filters/package.json"}]},{"bom-ref":"pkg:npm/pug-lexer@5.0.1?package-id=5dc82d87668bae8e","type":"library","author":"ForbesLindesay","name":"pug-lexer","version":"5.0.1","description":"The pug lexer (takes a string and converts it to an array of tokens)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pug-lexer@5.0.1","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-lexer","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_lexer:pug-lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_lexer:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_lexer:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-lexer/package.json"}]},{"bom-ref":"pkg:npm/pug-linker@4.0.0?package-id=e949463e431e1776","type":"library","author":"Forbes Lindesay","name":"pug-linker","version":"4.0.0","description":"Link multiple pug ASTs together using include/extends","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-linker:pug-linker:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-linker@4.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-linker","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-linker:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_linker:pug-linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_linker:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_linker:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-linker/package.json"}]},{"bom-ref":"pkg:npm/pug-load@3.0.0?package-id=b831a94ec83ee646","type":"library","author":"ForbesLindesay","name":"pug-load","version":"3.0.0","description":"The Pug loader is responsible for loading the depenendencies of a given Pug file.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-load:pug-load:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-load@3.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-load","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-load:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_load:pug-load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_load:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_load:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-load/package.json"}]},{"bom-ref":"pkg:npm/pug-parser@6.0.0?package-id=ae3ce07497258f6e","type":"library","author":"ForbesLindesay","name":"pug-parser","version":"6.0.0","description":"The pug parser (takes an array of tokens and converts it to an abstract syntax tree)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-parser:pug-parser:6.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-parser@6.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-parser","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-parser:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_parser:pug-parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_parser:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_parser:6.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-parser/package.json"}]},{"bom-ref":"pkg:npm/pug-runtime@3.0.1?package-id=eff466aded883d14","type":"library","author":"ForbesLindesay","name":"pug-runtime","version":"3.0.1","description":"The runtime components for the pug templating language","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/pug-runtime@3.0.1","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-runtime","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_runtime:pug-runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_runtime:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_runtime:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-runtime/package.json"}]},{"bom-ref":"pkg:npm/pug-strip-comments@2.0.0?package-id=678b3dbf2205543b","type":"library","author":"Timothy Gu <timothygu99@gmail.com>","name":"pug-strip-comments","version":"2.0.0","description":"Strip comments from a Pug token stream (from the lexer)","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-strip-comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-strip-comments@2.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-strip-comments","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-strip-comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip_comments:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip_comments:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_strip:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-strip-comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_strip_comments:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-strip-comments/package.json"}]},{"bom-ref":"pkg:npm/pug-walk@2.0.0?package-id=8da935ca9924488f","type":"library","author":"ForbesLindesay","name":"pug-walk","version":"2.0.0","description":"Walk and transform a pug AST","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pug-walk:pug-walk:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/pug-walk@2.0.0","externalReferences":[{"url":"https://github.com/pugjs/pug/tree/master/packages/pug-walk","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug-walk:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_walk:pug-walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug_walk:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug-walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug-walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pug:pug_walk:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pug-walk/package.json"}]},{"bom-ref":"pkg:npm/pump@3.0.4?package-id=6a087f9980559301","type":"library","author":"Mathias Buus Madsen <mathiasbuus@gmail.com>","name":"pump","version":"3.0.4","description":"pipe streams together and close all of them if one of them closes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mafintosh:pump:3.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/pump@3.0.4","externalReferences":[{"url":"git://github.com/mafintosh/pump.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:pump:pump:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/pump/package.json"}]},{"bom-ref":"pkg:npm/qs@6.15.1?package-id=0d0b4cfd63c59995","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"qs","version":"6.15.1","description":"A querystring parser that supports nesting and arrays, with a depth limit","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:qs_project:qs:6.15.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/qs@6.15.1","externalReferences":[{"url":"https://github.com/ljharb/qs.git","type":"distribution"},{"url":"https://github.com/ljharb/qs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/qs/package.json"}]},{"bom-ref":"pkg:npm/query-string@5.1.1?package-id=853a5626da6a5619","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"query-string","version":"5.1.1","description":"Parse and stringify URL query strings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:query-string:query-string:5.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/query-string@5.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:query-string:query_string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query_string:query-string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query_string:query_string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query:query-string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:query:query_string:5.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/query-string/package.json"}]},{"bom-ref":"pkg:npm/range-parser@1.2.1?package-id=044253d4d9efad62","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca> (http://tjholowaychuk.com), Douglas Christopher Wilson <doug@somethingdoug.com>, James Wyatt Cready <wyatt.cready@lanetix.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"range-parser","version":"1.2.1","description":"Range header field string parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:range-parser:range-parser:1.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/range-parser@1.2.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:range-parser:range_parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_parser:range-parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_parser:range_parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range-parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range_parser:1.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/range-parser/package.json"}]},{"bom-ref":"pkg:npm/range_check@2.0.4?package-id=af0ebff91edbc1f3","type":"library","author":"Kevin Whitman (https://github.com/keverw)","name":"range_check","version":"2.0.4","description":"This is a simple module to validate IP address, check ip address version, check if ip is within a range.","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:range-check:range-check:2.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/range_check@2.0.4","externalReferences":[{"url":"https://github.com/keverw/range_check","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:range-check:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_check:range-check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range_check:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:keverw:range-check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:keverw:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range-check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:range:range_check:2.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/range_check/package.json"}]},{"bom-ref":"pkg:npm/raw-body@2.5.3?package-id=41029ea60f8d5a8e","type":"library","author":"Jonathan Ong <me@jongleberry.com> (http://jongleberry.com), Douglas Christopher Wilson <doug@somethingdoug.com>, Raynos <raynos2@gmail.com>","name":"raw-body","version":"2.5.3","description":"Get and validate the raw body of a readable stream.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:raw-body:raw-body:2.5.3:*:*:*:*:*:*:*","purl":"pkg:npm/raw-body@2.5.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw-body:raw_body:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw_body:raw-body:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw_body:raw_body:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw:raw-body:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:raw:raw_body:2.5.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/raw-body/package.json"}]},{"bom-ref":"pkg:npm/rc@1.2.8?package-id=2d76d88e8720a8a1","type":"library","author":"Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)","name":"rc","version":"1.2.8","description":"hardwired configuration loader","licenses":[{"expression":"BSD-2-Clause OR MIT OR Apache-2.0"}],"cpe":"cpe:2.3:a:dominictarr:rc:1.2.8:*:*:*:*:*:*:*","purl":"pkg:npm/rc@1.2.8","externalReferences":[{"url":"https://github.com/dominictarr/rc.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:rc:rc:1.2.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rc/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@1.0.34?package-id=8348cfc6c7b64606","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"readable-stream","version":"1.0.34","description":"Streams2, a user-land copy of the stream library from Node.js v0.10.x","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:1.0.34:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@1.0.34","externalReferences":[{"url":"git://github.com/isaacs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:readable-stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:readable_stream:1.0.34:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@2.3.8?package-id=e45800b68fe2e352","type":"library","name":"readable-stream","version":"2.3.8","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:2.3.8:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@2.3.8","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=b2a0b92f8db52b84","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=3b2c974f056cc985","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=187f639f1f03fced","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@3.6.2?package-id=885d0609cac9e686","type":"library","name":"readable-stream","version":"3.6.2","description":"Streams3, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:3.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@3.6.2","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:3.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-stream@4.7.0?package-id=2735fe3b5acbeffc","type":"library","name":"readable-stream","version":"4.7.0","description":"Node.js Streams, a user-land copy of the stream library from Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-stream:readable-stream:4.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/readable-stream@4.7.0","externalReferences":[{"url":"git://github.com/nodejs/readable-stream","type":"distribution"},{"url":"https://github.com/nodejs/readable-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-stream:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable-stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_stream:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable-stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:readable_stream:4.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json"}]},{"bom-ref":"pkg:npm/readable-web-to-node-stream@3.0.4?package-id=09082485e53cd98e","type":"library","author":"Borewit (https://github.com/Borewit)","name":"readable-web-to-node-stream","version":"3.0.4","description":"Converts a Web-API readable-stream into a Node readable-stream.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:readable-web-to-node-stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*","purl":"pkg:npm/readable-web-to-node-stream@3.0.4","externalReferences":[{"url":"https://github.com/Borewit/readable-web-to-node-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to-node-stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node_stream:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node_stream:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to-node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to-node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to_node:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web-to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web_to:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable-web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable_web:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:readable:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:readable-web-to-node-stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:readable_web_to_node_stream:3.0.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/package.json"}]},{"bom-ref":"pkg:npm/rechoir@0.7.1?package-id=2518eea3acdbfbf5","type":"library","author":"Gulp Team <team@gulpjs.com> (http://gulpjs.com/), Blaine Bublitz <blaine.bublitz@gmail.com>, Tyler Kellen <tyler@sleekcode.net> (http://goingslowly.com/)","name":"rechoir","version":"0.7.1","description":"Prepare a node environment to require files with different extensions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:rechoir:rechoir:0.7.1:*:*:*:*:*:*:*","purl":"pkg:npm/rechoir@0.7.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rechoir/package.json"}]},{"bom-ref":"pkg:npm/recursedir-comparisons@0.0.0?package-id=d87f050eb47957d6","type":"library","author":"Ryan Day <soldair@gmail.com>","name":"recursedir-comparisons","version":"0.0.0","cpe":"cpe:2.3:a:recursedir-comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/recursedir-comparisons@0.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir-comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir_comparisons:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir_comparisons:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir:recursedir-comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:recursedir:recursedir_comparisons:0.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/walkdir/test/comparison/package.json"}]},{"bom-ref":"pkg:npm/regexp.prototype.flags@1.5.4?package-id=6817e470495335ca","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"regexp.prototype.flags","version":"1.5.4","description":"ES6 spec-compliant RegExp.prototype.flags shim.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:regexp.prototype.flags:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*","purl":"pkg:npm/regexp.prototype.flags@1.5.4","externalReferences":[{"url":"git://github.com/es-shims/RegExp.prototype.flags.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:es-shims:regexp.prototype.flags:1.5.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/regexp.prototype.flags/package.json"}]},{"bom-ref":"pkg:npm/remove-trailing-separator@1.1.0?package-id=2861850f21cfc870","type":"library","author":"darsain","name":"remove-trailing-separator","version":"1.1.0","description":"Removes separators from the end of the string.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:remove-trailing-separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/remove-trailing-separator@1.1.0","externalReferences":[{"url":"git+https://github.com/darsain/remove-trailing-separator.git","type":"distribution"},{"url":"https://github.com/darsain/remove-trailing-separator#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove-trailing-separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing_separator:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing_separator:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove-trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove-trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove_trailing:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:darsain:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:darsain:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove:remove-trailing-separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:remove:remove_trailing_separator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/remove-trailing-separator/package.json"}]},{"bom-ref":"pkg:npm/replace@1.2.2?package-id=ca8eb97223e41afa","type":"library","author":"Alessandro Maclaine <almaclaine@gmail.com>","name":"replace","version":"1.2.2","description":"Command line search and replace utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ALMaclaine:replace:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/replace@1.2.2","externalReferences":[{"url":"https://github.com/ALMaclaine/replace","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:replace:replace:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/package.json"}]},{"bom-ref":"pkg:npm/require-directory@2.1.1?package-id=9e446f6c303bc48a","type":"library","author":"Troy Goode <troygoode@gmail.com> (http://github.com/troygoode/), Troy Goode <troygoode@gmail.com>","name":"require-directory","version":"2.1.1","description":"Recursively iterates over specified directory, require()'ing each file, and returning a nested hash structure containing those modules.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:require-directory:require-directory:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/require-directory@2.1.1","externalReferences":[{"url":"git://github.com/troygoode/node-require-directory.git","type":"distribution"},{"url":"https://github.com/troygoode/node-require-directory/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-directory:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_directory:require-directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_directory:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:troygoode:require-directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:troygoode:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require-directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require_directory:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/require-directory/package.json"}]},{"bom-ref":"pkg:npm/require-main-filename@2.0.0?package-id=b1e08cf266302e36","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"require-main-filename","version":"2.0.0","description":"shim for require.main.filename() that works in as many environments as possible","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:require-main-filename:require-main-filename:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/require-main-filename@2.0.0","externalReferences":[{"url":"git+ssh://git@github.com/yargs/require-main-filename.git","type":"distribution"},{"url":"https://github.com/yargs/require-main-filename#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-main-filename:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main_filename:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main_filename:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-main:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require-main:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require_main:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:require:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:require-main-filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:require_main_filename:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/require-main-filename/package.json"}]},{"bom-ref":"pkg:npm/resolve@1.22.12?package-id=94b6a37008593cc8","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"resolve","version":"1.22.12","description":"resolve like require.resolve() on behalf of files asynchronously and synchronously","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:resolve:resolve:1.22.12:*:*:*:*:*:*:*","purl":"pkg:npm/resolve@1.22.12","externalReferences":[{"url":"ssh://github.com/browserify/resolve.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve/package.json"}]},{"bom-ref":"pkg:npm/resolve-dir@1.0.1?package-id=9f75a3edbb3cad1f","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"resolve-dir","version":"1.0.1","description":"Resolve a directory that is either local, global or in the user's home directory.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jonschlinkert:resolve-dir:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/resolve-dir@1.0.1","externalReferences":[{"url":"https://github.com/jonschlinkert/resolve-dir","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jonschlinkert:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve-dir:resolve-dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve-dir:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve_dir:resolve-dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve_dir:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve-dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:resolve:resolve_dir:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/resolve-dir/package.json"}]},{"bom-ref":"pkg:npm/responselike@1.0.2?package-id=ed930aa2536ba676","type":"library","author":"lukechilds","name":"responselike","version":"1.0.2","description":"A response-like object for mocking a Node.js HTTP response stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:responselike:responselike:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/responselike@1.0.2","externalReferences":[{"url":"https://github.com/lukechilds/responselike.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:lukechilds:responselike:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/responselike/package.json"}]},{"bom-ref":"pkg:npm/restructure@2.0.1?package-id=72439ad06e2b3313","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"restructure","version":"2.0.1","description":"Declaratively encode and decode binary data","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:devongovett:restructure:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/restructure@2.0.1","externalReferences":[{"url":"git://github.com/devongovett/restructure.git","type":"distribution"},{"url":"https://github.com/devongovett/restructure","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:restructure:restructure:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/restructure/package.json"}]},{"bom-ref":"pkg:npm/retry@0.12.0?package-id=94d18c1fed85159e","type":"library","author":"Tim Koschützki <tim@debuggable.com> (http://debuggable.com/)","name":"retry","version":"0.12.0","description":"Abstraction for exponential and custom retry strategies for failed operations.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tim-kos:retry:0.12.0:*:*:*:*:*:*:*","purl":"pkg:npm/retry@0.12.0","externalReferences":[{"url":"git://github.com/tim-kos/node-retry.git","type":"distribution"},{"url":"https://github.com/tim-kos/node-retry","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry:0.12.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/retry/package.json"}]},{"bom-ref":"pkg:npm/retry-as-promised@7.1.1?package-id=de1666362d2f9e71","type":"library","author":"Mick Hansen <maker@mhansen.io>","name":"retry-as-promised","version":"7.1.1","description":"Retry a failed promise","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:retry-as-promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/retry-as-promised@7.1.1","externalReferences":[{"url":"https://github.com/mickhansen/retry-as-promised.git","type":"distribution"},{"url":"https://github.com/mickhansen/retry-as-promised","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry-as-promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as_promised:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as_promised:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mickhansen:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mickhansen:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry-as:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry-as:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry_as:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry-as-promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:retry:retry_as_promised:7.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/retry-as-promised/package.json"}]},{"bom-ref":"pkg:npm/rimraf@2.7.1?package-id=fa27392938c188d1","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"rimraf","version":"2.7.1","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:2.7.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@2.7.1","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/rimraf@3.0.2?package-id=e119954f59e90c15","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"rimraf","version":"3.0.2","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@3.0.2","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@npmcli/move-file/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/rimraf@3.0.2?package-id=6698d750e2cc2430","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"rimraf","version":"3.0.2","description":"A deep deletion module for node (like `rm -rf`)","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:rimraf:3.0.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/rimraf@3.0.2","externalReferences":[{"url":"git://github.com/isaacs/rimraf.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/rimraf/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.1.2?package-id=3e1c131315fc7e3a","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (http://feross.org)","name":"safe-buffer","version":"5.1.2","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.1.2","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/basic-auth/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.1.2?package-id=73c00d57a0c43943","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (http://feross.org)","name":"safe-buffer","version":"5.1.2","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.1.2","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.1.2?package-id=82e1e95a5f60492f","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (http://feross.org)","name":"safe-buffer","version":"5.1.2","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.1.2","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-buffer@5.2.1?package-id=f430730abde414bf","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org)","name":"safe-buffer","version":"5.2.1","description":"Safer Node.js Buffer API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/safe-buffer@5.2.1","externalReferences":[{"url":"git://github.com/feross/safe-buffer.git","type":"distribution"},{"url":"https://github.com/feross/safe-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe-buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_buffer:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe-buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_buffer:5.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-buffer/package.json"}]},{"bom-ref":"pkg:npm/safe-regex-test@1.1.0?package-id=5b11c5020ef5c373","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"safe-regex-test","version":"1.1.0","description":"Give a regex, get a robust predicate function that tests it against a string.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-regex-test:safe-regex-test:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/safe-regex-test@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/safe-regex-test.git","type":"distribution"},{"url":"https://github.com/ljharb/safe-regex-test#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex-test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex_test:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex_test:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_regex:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-regex-test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_regex_test:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-regex-test/package.json"}]},{"bom-ref":"pkg:npm/safe-stable-stringify@2.5.0?package-id=e703782eb7d38cbf","type":"library","author":"Ruben Bridgewater","name":"safe-stable-stringify","version":"2.5.0","description":"Deterministic and safely JSON.stringify to quickly serialize JavaScript objects","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safe-stable-stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/safe-stable-stringify@2.5.0","externalReferences":[{"url":"git+https://github.com/BridgeAR/safe-stable-stringify.git","type":"distribution"},{"url":"https://github.com/BridgeAR/safe-stable-stringify#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-stable-stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable_stringify:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable_stringify:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe-stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe_stable:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:BridgeAR:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:BridgeAR:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe-stable-stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safe:safe_stable_stringify:2.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safe-stable-stringify/package.json"}]},{"bom-ref":"pkg:npm/safer-buffer@2.1.2?package-id=f5a29320fdbea1eb","type":"library","author":"Nikita Skovoroda <chalkerx@gmail.com> (https://github.com/ChALkeR)","name":"safer-buffer","version":"2.1.2","description":"Modern Buffer API polyfill without footguns","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:safer-buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/safer-buffer@2.1.2","externalReferences":[{"url":"git+https://github.com/ChALkeR/safer-buffer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer-buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer_buffer:safer-buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer_buffer:safer_buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer:safer-buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:safer:safer_buffer:2.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/safer-buffer/package.json"}]},{"bom-ref":"pkg:npm/sanitize-filename@1.6.4?package-id=8f7189e9ea8b019c","type":"library","author":"Parsha Pourkhomami","name":"sanitize-filename","version":"1.6.4","description":"Sanitize a string for use as a filename","licenses":[{"expression":"WTFPL OR ISC"}],"cpe":"cpe:2.3:a:sanitize-filename:sanitize-filename:1.6.4:*:*:*:*:*:*:*","purl":"pkg:npm/sanitize-filename@1.6.4","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize-filename:sanitize_filename:1.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize_filename:sanitize-filename:1.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize_filename:sanitize_filename:1.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize:sanitize-filename:1.6.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sanitize:sanitize_filename:1.6.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-filename/package.json"}]},{"bom-ref":"pkg:npm/sanitize-html@1.4.2?package-id=5de04e7baabe2ecd","type":"library","author":"P'unk Avenue LLC","name":"sanitize-html","version":"1.4.2","description":"Clean up user-submitted HTML, preserving whitelisted elements and whitelisted attributes on a per-element basis","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:apostrophecms:sanitize-html:1.4.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/sanitize-html@1.4.2","externalReferences":[{"url":"https://github.com/punkave/sanitize-html.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:punkave:sanitize-html:1.4.2:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/package.json"}]},{"bom-ref":"pkg:npm/sax@1.6.0?package-id=7cfb92a0ae05c66c","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"sax","version":"1.6.0","description":"An evented streaming XML parser in JavaScript","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:sax:sax:1.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/sax@1.6.0","externalReferences":[{"url":"git+ssh://git@github.com/isaacs/sax-js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sax/package.json"}]},{"bom-ref":"pkg:npm/seek-bzip@1.0.6?package-id=f8fdf612dd1ad055","type":"library","author":"C. Scott Ananian (http://cscott.net), Eli Skeggs, Kevin Kwok, Rob Landley (http://landley.net)","name":"seek-bzip","version":"1.0.6","description":"a pure-JavaScript Node.JS module for random-access decoding bzip2 data","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:seek-bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/seek-bzip@1.0.6","externalReferences":[{"url":"https://github.com/cscott/seek-bzip.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek-bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek_bzip:seek-bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek_bzip:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cscott:seek-bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:cscott:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek:seek-bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:seek:seek_bzip:1.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/seek-bzip/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=f25d9bd3bec76c56","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/make-dir/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=4d834fe9188f916e","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-abi/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@5.7.2?package-id=27467d214748b540","type":"library","author":"GitHub Inc.","name":"semver","version":"5.7.2","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:5.7.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@5.7.2","externalReferences":[{"url":"https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/semver@7.8.0?package-id=30727ed13c96ffb8","type":"library","author":"GitHub Inc.","name":"semver","version":"7.8.0","description":"The semantic version parser used by npm.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:npmjs:semver:7.8.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/semver@7.8.0","externalReferences":[{"url":"git+https://github.com/npm/node-semver.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/semver/package.json"}]},{"bom-ref":"pkg:npm/send@0.19.2?package-id=aa9850506e52a313","type":"library","author":"TJ Holowaychuk <tj@vision-media.ca>, Douglas Christopher Wilson <doug@somethingdoug.com>, James Wyatt Cready <jcready@gmail.com>, Jesús Leganés Combarro <piranna@gmail.com>","name":"send","version":"0.19.2","description":"Better streaming static file server with Range and conditional-GET support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:send_project:send:0.19.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/send@0.19.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/send/package.json"}]},{"bom-ref":"pkg:npm/sequelize@6.37.8?package-id=bb72ef8e57680a9d","type":"library","name":"sequelize","version":"6.37.8","description":"Sequelize is a promise-based Node.js ORM tool for Postgres, MySQL, MariaDB, SQLite, Microsoft SQL Server, Amazon Redshift and Snowflake’s Data Cloud. It features solid transaction support, relations, eager and lazy loading, read replication and more.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sequelizejs:sequelize:6.37.8:*:*:*:*:node.js:*:*","purl":"pkg:npm/sequelize@6.37.8","externalReferences":[{"url":"https://github.com/sequelize/sequelize.git","type":"distribution"},{"url":"https://sequelize.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sequelize/package.json"}]},{"bom-ref":"pkg:npm/sequelize-pool@7.1.0?package-id=02439a31995a1856","type":"library","author":"Sushant <sushantdhiman@outlook.com>","name":"sequelize-pool","version":"7.1.0","description":"Resource pooling for Node.JS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sequelize-pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/sequelize-pool@7.1.0","externalReferences":[{"url":"http://github.com/sushantdhiman/sequelize-pool.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize-pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize_pool:sequelize-pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize_pool:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sushantdhiman:sequelize-pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sushantdhiman:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize:sequelize-pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sequelize:sequelize_pool:7.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sequelize-pool/package.json"}]},{"bom-ref":"pkg:npm/serve-index@1.9.2?package-id=f4af9e8d984cc854","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"serve-index","version":"1.9.2","description":"Serve directory listings","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:serve-index:serve-index:1.9.2:*:*:*:*:*:*:*","purl":"pkg:npm/serve-index@1.9.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve-index:serve_index:1.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_index:serve-index:1.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_index:serve_index:1.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve-index:1.9.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve_index:1.9.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/package.json"}]},{"bom-ref":"pkg:npm/serve-static@1.16.3?package-id=8f932da3bf38c77d","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"serve-static","version":"1.16.3","description":"Serve static files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:serve-static:serve-static:1.16.3:*:*:*:*:*:*:*","purl":"pkg:npm/serve-static@1.16.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve-static:serve_static:1.16.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_static:serve-static:1.16.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve_static:serve_static:1.16.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve-static:1.16.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:serve:serve_static:1.16.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-static/package.json"}]},{"bom-ref":"pkg:npm/set-blocking@2.0.0?package-id=ed8a734f12c4bdef","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"set-blocking","version":"2.0.0","description":"set blocking stdio and stderr ensuring that terminal output does not truncate","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:set-blocking:set-blocking:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/set-blocking@2.0.0","externalReferences":[{"url":"git+https://github.com/yargs/set-blocking.git","type":"distribution"},{"url":"https://github.com/yargs/set-blocking#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_blocking:set-blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_blocking:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:set-blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yargs:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set-blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set_blocking:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-blocking/package.json"}]},{"bom-ref":"pkg:npm/set-function-length@1.2.2?package-id=3b436f83ca3e3766","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"set-function-length","version":"1.2.2","description":"Set a function's length property","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:set-function-length:set-function-length:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/set-function-length@1.2.2","externalReferences":[{"url":"git+https://github.com/ljharb/set-function-length.git","type":"distribution"},{"url":"https://github.com/ljharb/set-function-length#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function-length:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_length:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_length:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set-function-length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set_function_length:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-function-length/package.json"}]},{"bom-ref":"pkg:npm/set-function-name@2.0.2?package-id=f58313a577d972b0","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"set-function-name","version":"2.0.2","description":"Set a function's name property","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:set-function-name:set-function-name:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/set-function-name@2.0.2","externalReferences":[{"url":"git+https://github.com/ljharb/set-function-name.git","type":"distribution"},{"url":"https://github.com/ljharb/set-function-name#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function-name:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_name:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function_name:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set-function:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set_function:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set-function-name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:set:set_function_name:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/set-function-name/package.json"}]},{"bom-ref":"pkg:npm/setimmediate@1.0.5?package-id=ec3a9ad5b1e8d26c","type":"library","author":"YuzuJS, Domenic Denicola <d@domenic.me> (https://domenic.me), Donavon West <github@donavon.com> (http://donavon.com), Yaffle","name":"setimmediate","version":"1.0.5","description":"A shim for the setImmediate efficient script yielding API","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:setimmediate:setimmediate:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/setimmediate@1.0.5","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/setimmediate/package.json"}]},{"bom-ref":"pkg:npm/setprototypeof@1.2.0?package-id=8282dcab8a58f243","type":"library","author":"Wes Todd","name":"setprototypeof","version":"1.2.0","description":"A small polyfill for Object.setprototypeof","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:setprototypeof:setprototypeof:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/setprototypeof@1.2.0","externalReferences":[{"url":"https://github.com/wesleytodd/setprototypeof.git","type":"distribution"},{"url":"https://github.com/wesleytodd/setprototypeof","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wesleytodd:setprototypeof:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/setprototypeof/package.json"}]},{"bom-ref":"pkg:npm/shebang-command@2.0.0?package-id=1625df5bb6d67d3b","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)","name":"shebang-command","version":"2.0.0","description":"Get the command from a shebang","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:shebang-command:shebang-command:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/shebang-command@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang-command:shebang_command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_command:shebang-command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_command:shebang_command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang-command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang_command:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/shebang-command/package.json"}]},{"bom-ref":"pkg:npm/shebang-regex@3.0.0?package-id=4afda12e39d13082","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"shebang-regex","version":"3.0.0","description":"Regular expression for matching a shebang line","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:shebang-regex:shebang-regex:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/shebang-regex@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang-regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_regex:shebang-regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang_regex:shebang_regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang-regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:shebang:shebang_regex:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/shebang-regex/package.json"}]},{"bom-ref":"pkg:npm/side-channel@1.1.0?package-id=b33fdebcaaec79ca","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"side-channel","version":"1.1.0","description":"Store information about any JS value in a side channel. Uses WeakMap if available.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel:side-channel:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel/package.json"}]},{"bom-ref":"pkg:npm/side-channel-list@1.0.1?package-id=3a95570939e06e56","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"side-channel-list","version":"1.0.1","description":"Store information about any JS value in a side channel, using a linked list","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel-list:side-channel-list:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel-list@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel-list.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel-list#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel-list:side_channel_list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_list:side-channel-list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_list:side_channel_list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side-channel-list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel_list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel-list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel_list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel-list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel_list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel-list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel_list:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel-list/package.json"}]},{"bom-ref":"pkg:npm/side-channel-map@1.0.1?package-id=8a935a259e64ccfc","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"side-channel-map","version":"1.0.1","description":"Store information about any JS value in a side channel, using a Map","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel-map:side-channel-map:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel-map@1.0.1","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel-map.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel-map#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel-map:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_map:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_map:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel-map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel_map:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel-map/package.json"}]},{"bom-ref":"pkg:npm/side-channel-weakmap@1.0.2?package-id=13aa929d93fe8b96","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"side-channel-weakmap","version":"1.0.2","description":"Store information about any JS value in a side channel. Uses WeakMap if available.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:side-channel-weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/side-channel-weakmap@1.0.2","externalReferences":[{"url":"git+https://github.com/ljharb/side-channel-weakmap.git","type":"distribution"},{"url":"https://github.com/ljharb/side-channel-weakmap#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel-weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_weakmap:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel_weakmap:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side-channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side_channel:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side-channel-weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:side:side_channel_weakmap:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/side-channel-weakmap/package.json"}]},{"bom-ref":"pkg:npm/signal-exit@3.0.7?package-id=4235b1d4cc91c7c5","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"signal-exit","version":"3.0.7","description":"when you want to fire an event no matter how a process exits.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:signal-exit:signal-exit:3.0.7:*:*:*:*:*:*:*","purl":"pkg:npm/signal-exit@3.0.7","externalReferences":[{"url":"https://github.com/tapjs/signal-exit.git","type":"distribution"},{"url":"https://github.com/tapjs/signal-exit","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal-exit:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal-exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal-exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal-exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal_exit:3.0.7:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/signal-exit/package.json"}]},{"bom-ref":"pkg:npm/signal-exit@4.1.0?package-id=b6edaee708ce8837","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"signal-exit","version":"4.1.0","description":"when you want to fire an event no matter how a process exits.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:signal-exit:signal-exit:4.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/signal-exit@4.1.0","externalReferences":[{"url":"https://github.com/tapjs/signal-exit.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal-exit:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal-exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal_exit:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal-exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:signal:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal-exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tapjs:signal_exit:4.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json"}]},{"bom-ref":"pkg:npm/simple-concat@1.0.1?package-id=624063d4723a4b13","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org)","name":"simple-concat","version":"1.0.1","description":"Super-minimalist version of `concat-stream`. Less than 15 lines!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-concat:simple-concat:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/simple-concat@1.0.1","externalReferences":[{"url":"git://github.com/feross/simple-concat.git","type":"distribution"},{"url":"https://github.com/feross/simple-concat","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple-concat:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple_concat:simple-concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple_concat:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:simple-concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:feross:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple:simple-concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:simple:simple_concat:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-concat/package.json"}]},{"bom-ref":"pkg:npm/simple-get@3.1.1?package-id=9f219d07ad41b5a4","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (http://feross.org/)","name":"simple-get","version":"3.1.1","description":"Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-get_project:simple-get:3.1.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/simple-get@3.1.1","externalReferences":[{"url":"git://github.com/feross/simple-get.git","type":"distribution"},{"url":"https://github.com/feross/simple-get","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/simple-get/package.json"}]},{"bom-ref":"pkg:npm/simple-get@4.0.1?package-id=cd263772050b70e4","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org)","name":"simple-get","version":"4.0.1","description":"Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/simple-get@4.0.1","externalReferences":[{"url":"git://github.com/feross/simple-get.git","type":"distribution"},{"url":"https://github.com/feross/simple-get","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json"}]},{"bom-ref":"pkg:npm/simple-get@4.0.1?package-id=cb8ca3d0298b8a6e","type":"library","author":"Feross Aboukhadijeh <feross@feross.org> (https://feross.org)","name":"simple-get","version":"4.0.1","description":"Simplest way to make http get requests. Supports HTTPS, redirects, gzip/deflate, streams in < 100 lines.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:simple-get_project:simple-get:4.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/simple-get@4.0.1","externalReferences":[{"url":"git://github.com/feross/simple-get.git","type":"distribution"},{"url":"https://github.com/feross/simple-get","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json"}]},{"bom-ref":"pkg:npm/smart-buffer@4.2.0?package-id=cc002822c0639ab4","type":"library","author":"Josh Glazebrook, syvita","name":"smart-buffer","version":"4.2.0","description":"smart-buffer is a Buffer wrapper that adds automatic read & write offset tracking, string operations, data insertions, and more.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:JoshGlazebrook:smart-buffer:4.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/smart-buffer@4.2.0","externalReferences":[{"url":"https://github.com/JoshGlazebrook/smart-buffer.git","type":"distribution"},{"url":"https://github.com/JoshGlazebrook/smart-buffer/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:JoshGlazebrook:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart-buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart-buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart_buffer:smart-buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart_buffer:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart:smart-buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:smart:smart_buffer:4.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/smart-buffer/package.json"}]},{"bom-ref":"pkg:npm/socket.io@3.1.2?package-id=a59f241f8d484687","type":"library","author":"Guillermo Rauch <rauchg@gmail.com>, Arnout Kazemier <info@3rd-eden.com>, Vladimir Dronnikov <dronnikov@gmail.com>, Einar Otto Stangvik <einaros@gmail.com>","name":"socket.io","version":"3.1.2","description":"node.js realtime framework server","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket:socket.io:3.1.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/socket.io@3.1.2","externalReferences":[{"url":"git://github.com/socketio/socket.io","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io/package.json"}]},{"bom-ref":"pkg:npm/socket.io-adapter@2.1.0?package-id=22a992bc812c1a27","type":"library","name":"socket.io-adapter","version":"2.1.0","description":"default socket.io in-memory adapter","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket.io-adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/socket.io-adapter@2.1.0","externalReferences":[{"url":"git://github.com/socketio/socket.io-adapter.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io-adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io_adapter:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io_adapter:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socket.io:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:socket.io-adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socketio:socket.io_adapter:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io-adapter/package.json"}]},{"bom-ref":"pkg:npm/socket.io-parser@4.0.5?package-id=dd154d7bfbaea09c","type":"library","name":"socket.io-parser","version":"4.0.5","description":"socket.io protocol parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socket:socket.io-parser:4.0.5:*:*:*:*:node.js:*:*","purl":"pkg:npm/socket.io-parser@4.0.5","externalReferences":[{"url":"https://github.com/socketio/socket.io-parser.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socket.io-parser/package.json"}]},{"bom-ref":"pkg:npm/socks@2.8.9?package-id=95be61d6a7e8c888","type":"library","author":"Josh Glazebrook, castorw","name":"socks","version":"2.8.9","description":"Fully featured SOCKS proxy client supporting SOCKSv4, SOCKSv4a, and SOCKSv5. Includes Bind and Associate functionality.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:JoshGlazebrook:socks:2.8.9:*:*:*:*:*:*:*","purl":"pkg:npm/socks@2.8.9","externalReferences":[{"url":"git+https://github.com/JoshGlazebrook/socks.git","type":"distribution"},{"url":"https://github.com/JoshGlazebrook/socks/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks:2.8.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks/package.json"}]},{"bom-ref":"pkg:npm/socks-proxy-agent@6.2.1?package-id=98b91bbcbff567ab","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>","name":"socks-proxy-agent","version":"6.2.1","description":"A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/socks-proxy-agent@6.2.1","externalReferences":[{"url":"git://github.com/TooTallNate/node-socks-proxy-agent.git","type":"distribution"},{"url":"https://github.com/TooTallNate/node-socks-proxy-agent#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks-proxy-agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks_proxy_agent:6.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/socks-proxy-agent@8.0.5?package-id=9ee05fc4d21b00fc","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/), Kiko Beats <josefrancisco.verdu@gmail.com>, Josh Glazebrook <josh@joshglazebrook.com>, talmobi <talmobi@users.noreply.github.com>, Indospace.io <justin@indospace.io>, Kilian von Pflugk <github@jumoog.io>, Kyle <admin@hk1229.cn>, Matheus Fernandes <matheus.frndes@gmail.com>, Ricky Miller <richardkazuomiller@gmail.com>, Shantanu Sharma <shantanu34@outlook.com>, Tim Perry <pimterry@gmail.com>, Vadim Baryshev <vadimbaryshev@gmail.com>, jigu <luo1257857309@gmail.com>, Alba Mendez <me@jmendeth.com>, Дмитрий Гуденков <Dimangud@rambler.ru>, Andrei Bitca <63638922+andrei-bitca-dc@users.noreply.github.com>, Andrew Casey <amcasey@users.noreply.github.com>, Brandon Ros <brandonros1@gmail.com>, Dang Duy Thanh <thanhdd.it@gmail.com>, Dimitar Nestorov <8790386+dimitarnestorov@users.noreply.github.com>","name":"socks-proxy-agent","version":"8.0.5","description":"A SOCKS proxy `http.Agent` implementation for HTTP and HTTPS","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:socks-proxy-agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/socks-proxy-agent@8.0.5","externalReferences":[{"url":"https://github.com/TooTallNate/proxy-agents.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy-agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy_agent:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks-proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks_proxy:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks-proxy-agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:socks:socks_proxy_agent:8.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/socks-proxy-agent/package.json"}]},{"bom-ref":"pkg:npm/sort-keys@1.1.2?package-id=7e91429fd26a7768","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"sort-keys","version":"1.1.2","description":"Sort the keys of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sort-keys:sort-keys:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/sort-keys@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort_keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort-keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort_keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort-keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort_keys:1.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json"}]},{"bom-ref":"pkg:npm/sort-keys@2.0.0?package-id=b56ffa404313992b","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"sort-keys","version":"2.0.0","description":"Sort the keys of an object","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sort-keys:sort-keys:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/sort-keys@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort_keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort-keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort_keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort-keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort_keys:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sort-keys/package.json"}]},{"bom-ref":"pkg:npm/sort-keys-length@1.0.1?package-id=aa05cbb52d62e94f","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (https://github.com/kevva)","name":"sort-keys-length","version":"1.0.1","description":"Sort objecy keys by length","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:sort-keys-length:sort-keys-length:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/sort-keys-length@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys-length:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys_length:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys_length:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort-keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort_keys:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort-keys-length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sort:sort_keys_length:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sort-keys-length/package.json"}]},{"bom-ref":"pkg:npm/source-map@0.6.1?package-id=a22583dd96c04327","type":"library","author":"Nick Fitzgerald <nfitzgerald@mozilla.com>, Tobias Koppers <tobias.koppers@googlemail.com>, Duncan Beevers <duncan@dweebd.com>, Stephen Crane <scrane@mozilla.com>, Ryan Seddon <seddon.ryan@gmail.com>, Miles Elam <miles.elam@deem.com>, Mihai Bazon <mihai.bazon@gmail.com>, Michael Ficarra <github.public.email@michael.ficarra.me>, Todd Wolfson <todd@twolfson.com>, Alexander Solovyov <alexander@solovyov.net>, Felix Gnass <fgnass@gmail.com>, Conrad Irwin <conrad.irwin@gmail.com>, usrbincc <usrbincc@yahoo.com>, David Glasser <glasser@davidglasser.net>, Chase Douglas <chase@newrelic.com>, Evan Wallace <evan.exe@gmail.com>, Heather Arthur <fayearthur@gmail.com>, Hugh Kennedy <hughskennedy@gmail.com>, David Glasser <glasser@davidglasser.net>, Simon Lydell <simon.lydell@gmail.com>, Jmeas Smith <jellyes2@gmail.com>, Michael Z Goddard <mzgoddard@gmail.com>, azu <azu@users.noreply.github.com>, John Gozde <john@gozde.ca>, Adam Kirkton <akirkton@truefitinnovation.com>, Chris Montgomery <christopher.montgomery@dowjones.com>, J. Ryan Stinnett <jryans@gmail.com>, Jack Herrington <jherrington@walmartlabs.com>, Chris Truter <jeffpalentine@gmail.com>, Daniel Espeset <daniel@danielespeset.com>, Jamie Wong <jamie.lf.wong@gmail.com>, Eddy Bruël <ejpbruel@mozilla.com>, Hawken Rives <hawkrives@gmail.com>, Gilad Peleg <giladp007@gmail.com>, djchie <djchie.dev@gmail.com>, Gary Ye <garysye@gmail.com>, Nicolas Lalevée <nicolas.lalevee@hibnet.org>","name":"source-map","version":"0.6.1","description":"Generates and consumes source maps","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:source-map:source-map:0.6.1:*:*:*:*:*:*:*","purl":"pkg:npm/source-map@0.6.1","externalReferences":[{"url":"http://github.com/mozilla/source-map.git","type":"distribution"},{"url":"https://github.com/mozilla/source-map","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:source-map:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source-map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source_map:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:source-map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mozilla:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source-map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:source:source_map:0.6.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/source-map/package.json"}]},{"bom-ref":"pkg:npm/sprintf-js@1.0.3?package-id=acaf709db1d54fbd","type":"library","author":"Alexandru Marasteanu <hello@alexei.ro> (http://alexei.ro/)","name":"sprintf-js","version":"1.0.3","description":"JavaScript sprintf implementation","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:sprintf-js:sprintf-js:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/sprintf-js@1.0.3","externalReferences":[{"url":"https://github.com/alexei/sprintf.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf-js:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf-js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf-js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf-js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf_js:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json"}]},{"bom-ref":"pkg:npm/sprintf-js@1.1.3?package-id=5b70795e4e884b57","type":"library","author":"Alexandru Mărășteanu <hello@alexei.ro>","name":"sprintf-js","version":"1.1.3","description":"JavaScript sprintf implementation","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:sprintf-js:sprintf-js:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/sprintf-js@1.1.3","externalReferences":[{"url":"https://github.com/alexei/sprintf.js.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf-js:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf-js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf_js:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf-js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:sprintf:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf-js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:alexei:sprintf_js:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sprintf-js/package.json"}]},{"bom-ref":"pkg:npm/sqlite3@5.1.7?package-id=2f561aa54725d063","type":"library","author":"Mapbox (https://mapbox.com/), Daniel Lockyer <hi@daniellockyer.com>, Konstantin Käfer <mail@kkaefer.com>, Dane Springmeyer <dane@mapbox.com>, Will White <will@mapbox.com>, Orlando Vazquez <ovazquez@gmail.com>, Artem Kustikov <kustikoff@gmail.com>, Eric Fredricksen <efredricksen@gmail.com>, John Wright <mrjjwright@gmail.com>, Ryan Dahl <ry@tinyclouds.org>, Tom MacWright <tom@mapbox.com>, Carter Thaxton <carter.thaxton@gmail.com>, Audrius Kažukauskas <audrius@neutrino.lt>, Johannes Schauer <josch@pyneo.org>, Nathan Rajlich <nathan@tootallnate.net>, AJ ONeal <coolaj86@gmail.com>, Mithgol, Ben Noordhuis <ben@strongloop.com>","name":"sqlite3","version":"5.1.7","description":"Asynchronous, non-blocking SQLite3 bindings","licenses":[{"license":{"id":"BSD-3-Clause"}}],"cpe":"cpe:2.3:a:ghost:sqlite3:5.1.7:*:*:*:*:node.js:*:*","purl":"pkg:npm/sqlite3@5.1.7","externalReferences":[{"url":"https://github.com/TryGhost/node-sqlite3.git","type":"distribution"},{"url":"https://github.com/TryGhost/node-sqlite3","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/package.json"}]},{"bom-ref":"pkg:npm/ssri@12.0.0?package-id=64aa6df27671ee44","type":"library","author":"GitHub Inc.","name":"ssri","version":"12.0.0","description":"Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ssri_project:ssri:12.0.0:*:*:*:*:node.js:*:*","purl":"pkg:npm/ssri@12.0.0","externalReferences":[{"url":"git+https://github.com/npm/ssri.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ssri/package.json"}]},{"bom-ref":"pkg:npm/ssri@8.0.1?package-id=fbd6a143588415b6","type":"library","author":"Kat Marchán <kzm@sykosomatic.org>","name":"ssri","version":"8.0.1","description":"Standard Subresource Integrity library -- parses, serializes, generates, and verifies integrity metadata according to the SRI spec.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:ssri_project:ssri:8.0.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ssri@8.0.1","externalReferences":[{"url":"https://github.com/npm/ssri","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json"}]},{"bom-ref":"pkg:npm/stack-trace@0.0.10?package-id=fce264c6e73c9eee","type":"library","author":"Felix Geisendörfer <felix@debuggable.com> (http://debuggable.com/)","name":"stack-trace","version":"0.0.10","description":"Get v8 stack traces as an array of CallSite objects.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:stack-trace:stack-trace:0.0.10:*:*:*:*:*:*:*","purl":"pkg:npm/stack-trace@0.0.10","externalReferences":[{"url":"git://github.com/felixge/node-stack-trace.git","type":"distribution"},{"url":"https://github.com/felixge/node-stack-trace","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack-trace:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack_trace:stack-trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack_trace:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:felixge:stack-trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:felixge:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack:stack-trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stack:stack_trace:0.0.10:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/stack-trace/package.json"}]},{"bom-ref":"pkg:npm/statuses@1.5.0?package-id=b4d4d67376e5fdaa","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"statuses","version":"1.5.0","description":"HTTP status utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:statuses:statuses:1.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/statuses@1.5.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/serve-index/node_modules/statuses/package.json"}]},{"bom-ref":"pkg:npm/statuses@2.0.2?package-id=8d4d2ca32d3f538f","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"statuses","version":"2.0.2","description":"HTTP status utility","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:statuses:statuses:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/statuses@2.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/statuses/package.json"}]},{"bom-ref":"pkg:npm/stop-iteration-iterator@1.1.0?package-id=061c21bad20f372c","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"stop-iteration-iterator","version":"1.1.0","description":"Firefox 17-26 iterators throw a StopIteration object to indicate \"done\". This normalizes it.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:stop-iteration-iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/stop-iteration-iterator@1.1.0","externalReferences":[{"url":"git+https://github.com/ljharb/stop-iteration-iterator.git","type":"distribution"},{"url":"https://github.com/ljharb/stop-iteration-iterator#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop-iteration-iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration_iterator:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration_iterator:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop-iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop-iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop_iteration:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ljharb:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop:stop-iteration-iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stop:stop_iteration_iterator:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/stop-iteration-iterator/package.json"}]},{"bom-ref":"pkg:npm/stream-buffers@2.2.0?package-id=f849555d7c5b59d6","type":"library","author":"Sam Day <me@samcday.com.au>","name":"stream-buffers","version":"2.2.0","description":"Buffer-backed Streams for reading and writing.","licenses":[{"license":{"id":"Unlicense"}}],"cpe":"cpe:2.3:a:stream-buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/stream-buffers@2.2.0","externalReferences":[{"url":"https://github.com/samcday/node-stream-buffer.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream-buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream_buffers:stream-buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream_buffers:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:samcday:stream-buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:samcday:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream:stream-buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:stream:stream_buffers:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/stream-buffers/package.json"}]},{"bom-ref":"pkg:npm/streamsearch@1.1.0?package-id=28156c8426d889b2","type":"library","author":"Brian White <mscdex@mscdex.net>","name":"streamsearch","version":"1.1.0","description":"Streaming Boyer-Moore-Horspool searching for node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:streamsearch:streamsearch:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/streamsearch@1.1.0","externalReferences":[{"url":"http://github.com/mscdex/streamsearch.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mscdex:streamsearch:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/streamsearch/package.json"}]},{"bom-ref":"pkg:npm/strict-uri-encode@1.1.0?package-id=bfd4ac772360c13b","type":"library","author":"Kevin Mårtensson <kevinmartensson@gmail.com> (github.com/kevva)","name":"strict-uri-encode","version":"1.1.0","description":"A stricter URI encode adhering to RFC 3986","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strict-uri-encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/strict-uri-encode@1.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict-uri-encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri_encode:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri_encode:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict-uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict-uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict_uri:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict:strict-uri-encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strict:strict_uri_encode:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strict-uri-encode/package.json"}]},{"bom-ref":"pkg:npm/string-width@1.0.2?package-id=09f44aae6ef25a0d","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"string-width","version":"1.0.2","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@1.0.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@2.1.1?package-id=beec204c676c8c6e","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"string-width","version":"2.1.1","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:2.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@2.1.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:2.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@4.2.3?package-id=24ea7bc5fffd0612","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"string-width","version":"4.2.3","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@4.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string-width-cjs/package.json"}]},{"bom-ref":"pkg:npm/string-width@4.2.3?package-id=e0a74a03ae38698c","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"string-width","version":"4.2.3","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:4.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@4.2.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:4.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@5.1.2?package-id=8d5950086fa52115","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"string-width","version":"5.1.2","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@5.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string-width@5.1.2?package-id=6762f33de5ae377a","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"string-width","version":"5.1.2","description":"Get the visual width of a string - the number of columns required to display it","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-width:string-width:5.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/string-width@5.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_width:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_width:5.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json"}]},{"bom-ref":"pkg:npm/string_decoder@0.10.31?package-id=be69fa4a2025b786","type":"library","name":"string_decoder","version":"0.10.31","description":"The string_decoder module from Node core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-decoder:string-decoder:0.10.31:*:*:*:*:*:*:*","purl":"pkg:npm/string_decoder@0.10.31","externalReferences":[{"url":"git://github.com/rvagg/string_decoder.git","type":"distribution"},{"url":"https://github.com/rvagg/string_decoder","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string-decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rvagg:string-decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:rvagg:string_decoder:0.10.31:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json"}]},{"bom-ref":"pkg:npm/string_decoder@1.1.1?package-id=248eaf9a5e34fe07","type":"library","name":"string_decoder","version":"1.1.1","description":"The string_decoder module from Node core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-decoder:string-decoder:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/string_decoder@1.1.1","externalReferences":[{"url":"git://github.com/nodejs/string_decoder.git","type":"distribution"},{"url":"https://github.com/nodejs/string_decoder","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string-decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string-decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_decoder:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/string_decoder/package.json"}]},{"bom-ref":"pkg:npm/string_decoder@1.3.0?package-id=17cc9cb9f2e4a5f7","type":"library","name":"string_decoder","version":"1.3.0","description":"The string_decoder module from Node core","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:string-decoder:string-decoder:1.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/string_decoder@1.3.0","externalReferences":[{"url":"git://github.com/nodejs/string_decoder.git","type":"distribution"},{"url":"https://github.com/nodejs/string_decoder","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:string-decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string-decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string_decoder:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string-decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nodejs:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string-decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:string:string_decoder:1.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@3.0.1?package-id=e8cc4c7f389e7e46","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Boy Nicolai Appelman <joshua@jbna.nl> (jbna.nl), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)","name":"strip-ansi","version":"3.0.1","description":"Strip ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@3.0.1?package-id=c99f26ed95d84d11","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Boy Nicolai Appelman <joshua@jbna.nl> (jbna.nl), JD Ballard <i.am.qix@gmail.com> (github.com/qix-)","name":"strip-ansi","version":"3.0.1","description":"Strip ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@3.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:3.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@4.0.0?package-id=0db8e8830d694c97","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"strip-ansi","version":"4.0.0","description":"Strip ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@4.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@6.0.1?package-id=896f6ac46d9def2e","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"strip-ansi","version":"6.0.1","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@6.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-ansi-cjs/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@6.0.1?package-id=e831e8124e9a00e0","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"strip-ansi","version":"6.0.1","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@6.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:6.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@7.2.0?package-id=bb988586409773ff","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"strip-ansi","version":"7.2.0","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@7.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-ansi@7.2.0?package-id=e98758605fc01f28","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"strip-ansi","version":"7.2.0","description":"Strip ANSI escape codes from a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-ansi@7.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip-ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_ansi:strip_ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_ansi:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json"}]},{"bom-ref":"pkg:npm/strip-dirs@2.1.0?package-id=5785975b198f29c2","type":"library","author":"Shinnosuke Watanabe (https://github.com/shinnn)","name":"strip-dirs","version":"2.1.0","description":"Remove leading directory components from a path, like tar's --strip-components option","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/strip-dirs@2.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_dirs:strip-dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_dirs:strip_dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_dirs:2.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-dirs/package.json"}]},{"bom-ref":"pkg:npm/strip-json-comments@2.0.1?package-id=31c6a53852db87ef","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"strip-json-comments","version":"2.0.1","description":"Strip comments from JSON. Lets you use comments in your JSON files!","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-json-comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-json-comments@2.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json-comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json_comments:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json_comments:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_json:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-json-comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_json_comments:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json"}]},{"bom-ref":"pkg:npm/strip-outer@1.0.1?package-id=0701c91ca3e3ef97","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"strip-outer","version":"1.0.1","description":"Strip a substring from the start/end of a string","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:strip-outer:strip-outer:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/strip-outer@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip-outer:strip_outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_outer:strip-outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip_outer:strip_outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip-outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:strip:strip_outer:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strip-outer/package.json"}]},{"bom-ref":"pkg:npm/strtok3@6.3.0?package-id=9ac4af59fde6dd22","type":"library","author":"Borewit (https://github.com/Borewit)","name":"strtok3","version":"6.3.0","description":"A promise based streaming tokenizer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Borewit:strtok3:6.3.0:*:*:*:*:*:*:*","purl":"pkg:npm/strtok3@6.3.0","externalReferences":[{"url":"https://github.com/Borewit/strtok3.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:strtok3:strtok3:6.3.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/strtok3/package.json"}]},{"bom-ref":"pkg:npm/supports-color@2.0.0?package-id=c66316949c16138d","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com), Joshua Appelman <jappelman@xebia.com> (jbnicolai.com)","name":"supports-color","version":"2.0.0","description":"Detect whether a terminal supports color","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-color:supports-color:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-color@2.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-color:supports_color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports-color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports_color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_color:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json"}]},{"bom-ref":"pkg:npm/supports-color@5.5.0?package-id=28a6f20e2aed3314","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"supports-color","version":"5.5.0","description":"Detect whether a terminal supports color","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-color:supports-color:5.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-color@5.5.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-color:supports_color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports-color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports_color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_color:5.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/chalk/node_modules/supports-color/package.json"}]},{"bom-ref":"pkg:npm/supports-color@7.2.0?package-id=24cdad729d3395c4","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"supports-color","version":"7.2.0","description":"Detect whether a terminal supports color","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-color:supports-color:7.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-color@7.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-color:supports_color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports-color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_color:supports_color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_color:7.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json"}]},{"bom-ref":"pkg:npm/supports-preserve-symlinks-flag@1.0.0?package-id=d91ba967be33db59","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"supports-preserve-symlinks-flag","version":"1.0.0","description":"Determine if the current node version supports the `--preserve-symlinks` flag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:supports-preserve-symlinks-flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/supports-preserve-symlinks-flag@1.0.0","externalReferences":[{"url":"git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git","type":"distribution"},{"url":"https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve-symlinks-flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks_flag:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks_flag:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve-symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve-symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve_symlinks:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports-preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports_preserve:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports-preserve-symlinks-flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:supports:supports_preserve_symlinks_flag:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json"}]},{"bom-ref":"pkg:npm/svg-captcha@1.4.0?package-id=6baae9ff00daeb07","type":"library","author":"Weilin Shi <934587911@qq.com>","name":"svg-captcha","version":"1.4.0","description":"generate svg captcha in node.js or express.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:svg-captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*","purl":"pkg:npm/svg-captcha@1.4.0","externalReferences":[{"url":"git+https://github.com/steambap/svg-captcha.git","type":"distribution"},{"url":"https://github.com/steambap/svg-captcha#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg-captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg_captcha:svg-captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg_captcha:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:steambap:svg-captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:steambap:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg:svg-captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:svg:svg_captcha:1.4.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/svg-captcha/package.json"}]},{"bom-ref":"pkg:npm/swagger-ui-dist@5.32.6?package-id=d6abe07e25de9930","type":"library","author":", Anna Bodnia <anna.bodnia@gmail.com>, Buu Nguyen <buunguyen@gmail.com>, Josh Ponelat <jponelat@gmail.com>, Kyle Shockey <kyleshockey1@gmail.com>, Robert Barnwell <robert@robertismy.name>, Sahar Jafari <shr.jafari@gmail.com>","name":"swagger-ui-dist","version":"5.32.6","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:smartbear:swagger-ui-dist:5.32.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/swagger-ui-dist@5.32.6","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/swagger-ui-dist/package.json"}]},{"bom-ref":"pkg:npm/swagger-ui-express@5.0.1?package-id=daeaf740a273c980","type":"library","author":"Stephen Scott <scottie1984@gmail.com>","name":"swagger-ui-express","version":"5.0.1","description":"Swagger UI Express","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:swagger-ui-express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/swagger-ui-express@5.0.1","externalReferences":[{"url":"https://github.com/scottie1984/swagger-ui-express","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger-ui-express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui_express:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui_express:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scottie1984:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:scottie1984:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger-ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger-ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger_ui:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger:swagger-ui-express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:swagger:swagger_ui_express:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/swagger-ui-express/package.json"}]},{"bom-ref":"pkg:npm/tar@4.4.19?package-id=f42c59d94c10b95d","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"tar","version":"4.4.19","description":"tar for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:node.js:*:*","purl":"pkg:npm/tar@4.4.19","externalReferences":[{"url":"https://github.com/npm/node-tar.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_project:tar:4.4.19:*:*:*:*:rust:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:tar:4.4.19:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json"}]},{"bom-ref":"pkg:npm/tar@6.2.1?package-id=09de397807f7641f","type":"library","author":"GitHub Inc.","name":"tar","version":"6.2.1","description":"tar for node","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:tar_project:tar:6.2.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/tar@6.2.1","externalReferences":[{"url":"https://github.com/isaacs/node-tar.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_project:tar:6.2.1:*:*:*:*:rust:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:tar:6.2.1:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/tar/package.json"}]},{"bom-ref":"pkg:npm/tar@7.5.15?package-id=c1e644e32c96e7f7","type":"library","author":"Isaac Z. Schlueter","name":"tar","version":"7.5.15","description":"tar for node","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:tar_project:tar:7.5.15:*:*:*:*:node.js:*:*","purl":"pkg:npm/tar@7.5.15","externalReferences":[{"url":"https://github.com/isaacs/node-tar.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_project:tar:7.5.15:*:*:*:*:rust:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:isaacs:tar:7.5.15:*:*:*:*:node.js:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar/package.json"}]},{"bom-ref":"pkg:npm/tar-fs@2.1.4?package-id=67bb886fa3adbf45","type":"library","author":"Mathias Buus","name":"tar-fs","version":"2.1.4","description":"filesystem bindings for tar-stream","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:mafintosh:tar-fs:2.1.4:*:*:*:*:*:*:*","purl":"pkg:npm/tar-fs@2.1.4","externalReferences":[{"url":"https://github.com/mafintosh/tar-fs.git","type":"distribution"},{"url":"https://github.com/mafintosh/tar-fs","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar_fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-fs:tar-fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-fs:tar_fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_fs:tar-fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_fs:tar_fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar-fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar_fs:2.1.4:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/package.json"}]},{"bom-ref":"pkg:npm/tar-stream@1.6.2?package-id=d4b09eea4b25031e","type":"library","author":"Mathias Buus <mathiasbuus@gmail.com>","name":"tar-stream","version":"1.6.2","description":"tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tar-stream:tar-stream:1.6.2:*:*:*:*:*:*:*","purl":"pkg:npm/tar-stream@1.6.2","externalReferences":[{"url":"git+https://github.com/mafintosh/tar-stream.git","type":"distribution"},{"url":"https://github.com/mafintosh/tar-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-stream:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar-stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar_stream:1.6.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-stream/package.json"}]},{"bom-ref":"pkg:npm/tar-stream@2.2.0?package-id=61ca2e5df0334a0d","type":"library","author":"Mathias Buus <mathiasbuus@gmail.com>","name":"tar-stream","version":"2.2.0","description":"tar-stream is a streaming tar parser and generator and nothing else. It is streams2 and operates purely using streams which means you can easily extract/parse tarballs without ever hitting the file system.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tar-stream:tar-stream:2.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/tar-stream@2.2.0","externalReferences":[{"url":"git+https://github.com/mafintosh/tar-stream.git","type":"distribution"},{"url":"https://github.com/mafintosh/tar-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar-stream:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar-stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar_stream:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar-stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mafintosh:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar-stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tar:tar_stream:2.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json"}]},{"bom-ref":"pkg:npm/tdigest@0.1.2?package-id=035edc02e62ab7f9","type":"library","author":"Will Welch <welch@quietplease.com> (http://quietplease.com/)","name":"tdigest","version":"0.1.2","description":"javascript implementation of Dunning's T-Digest for streaming quantile approximation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tdigest:tdigest:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/tdigest@0.1.2","externalReferences":[{"url":"https://github.com/welch/tdigest.git","type":"distribution"},{"url":"https://github.com/welch/tdigest","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:welch:tdigest:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tdigest/package.json"}]},{"bom-ref":"pkg:npm/text-hex@1.0.0?package-id=5085c28e4a76cc5a","type":"library","author":"Arnout Kazemier","name":"text-hex","version":"1.0.0","description":"Generate a hex color from the given text","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:3rd-Eden:text-hex:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/text-hex@1.0.0","externalReferences":[{"url":"https://github.com/3rd-Eden/text-hex","type":"distribution"},{"url":"https://github.com/3rd-Eden/text-hex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:3rd-Eden:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text-hex:text-hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text-hex:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text_hex:text-hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text_hex:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text:text-hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:text:text_hex:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/text-hex/package.json"}]},{"bom-ref":"pkg:npm/through@2.3.8?package-id=2584a06da5c0bd83","type":"library","author":"Dominic Tarr <dominic.tarr@gmail.com> (dominictarr.com)","name":"through","version":"2.3.8","description":"simplified stream construction","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:dominictarr:through:2.3.8:*:*:*:*:*:*:*","purl":"pkg:npm/through@2.3.8","externalReferences":[{"url":"https://github.com/dominictarr/through.git","type":"distribution"},{"url":"https://github.com/dominictarr/through","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:through:through:2.3.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/through/package.json"}]},{"bom-ref":"pkg:npm/timed-out@4.0.1?package-id=d2308518418e1e08","type":"library","author":"Vsevolod Strukchinsky <floatdrop@gmail.com>","name":"timed-out","version":"4.0.1","description":"Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:timed-out:timed-out:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/timed-out@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed-out:timed_out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed_out:timed-out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed_out:timed_out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed:timed-out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:timed:timed_out:4.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/timed-out/package.json"}]},{"bom-ref":"pkg:npm/tiny-inflate@1.0.3?package-id=5831e10cf4d02fa2","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"tiny-inflate","version":"1.0.3","description":"A tiny inflate implementation","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tiny-inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/tiny-inflate@1.0.3","externalReferences":[{"url":"git://github.com/devongovett/tiny-inflate.git","type":"distribution"},{"url":"https://github.com/devongovett/tiny-inflate","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny-inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny_inflate:tiny-inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny_inflate:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:tiny-inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny:tiny-inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tiny:tiny_inflate:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tiny-inflate/package.json"}]},{"bom-ref":"pkg:npm/tinyglobby@0.2.16?package-id=3820bd963eb672f1","type":"library","author":"Superchupu","name":"tinyglobby","version":"0.2.16","description":"A fast and minimal alternative to globby and fast-glob","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:tinyglobby:tinyglobby:0.2.16:*:*:*:*:*:*:*","purl":"pkg:npm/tinyglobby@0.2.16","externalReferences":[{"url":"git+https://github.com/SuperchupuDev/tinyglobby.git","type":"distribution"},{"url":"https://superchupu.dev/tinyglobby","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tinyglobby/package.json"}]},{"bom-ref":"pkg:npm/to-buffer@1.2.2?package-id=0110d2ecb3a45afa","type":"library","author":"Mathias Buus (@mafintosh)","name":"to-buffer","version":"1.2.2","description":"Pass in a string, array, Buffer, Data View, or Uint8Array, and get a Buffer back.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:browserify:to-buffer:1.2.2:*:*:*:*:*:*:*","purl":"pkg:npm/to-buffer@1.2.2","externalReferences":[{"url":"https://github.com/browserify/to-buffer.git","type":"distribution"},{"url":"https://github.com/browserify/to-buffer","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:browserify:to_buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-buffer:to-buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-buffer:to_buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_buffer:to-buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_buffer:to_buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_buffer:1.2.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-buffer/package.json"}]},{"bom-ref":"pkg:npm/to-regex-range@5.0.1?package-id=71fde64046fd6197","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert), Jon Schlinkert (http://twitter.com/jonschlinkert), Rouven Weßling (www.rouvenwessling.de)","name":"to-regex-range","version":"5.0.1","description":"Pass two numbers, get a regex-compatible source string for matching ranges. Validated against more than 2.78 million test assertions.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:to-regex-range:to-regex-range:5.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/to-regex-range@5.0.1","externalReferences":[{"url":"https://github.com/micromatch/to-regex-range","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex-range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex_range:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:micromatch:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to-regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to_regex:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to-regex-range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:to:to_regex_range:5.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/to-regex-range/package.json"}]},{"bom-ref":"pkg:npm/toidentifier@1.0.1?package-id=4909a76552946483","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Douglas Christopher Wilson <doug@somethingdoug.com>, Nick Baugh <niftylettuce@gmail.com> (http://niftylettuce.com/)","name":"toidentifier","version":"1.0.1","description":"Convert a string of words to a JavaScript identifier","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:toidentifier:toidentifier:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/toidentifier@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/toidentifier/package.json"}]},{"bom-ref":"pkg:npm/token-stream@1.0.0?package-id=1121d220e3619b09","type":"library","author":"ForbesLindesay","name":"token-stream","version":"1.0.0","description":"Take an array of token and produce a more useful API to give to a parser","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:token-stream:token-stream:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/token-stream@1.0.0","externalReferences":[{"url":"https://github.com/pugjs/token-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:token-stream:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_stream:token-stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_stream:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:token-stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:pugjs:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token-stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token_stream:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/token-stream/package.json"}]},{"bom-ref":"pkg:npm/token-types@4.2.1?package-id=171e72fe36f2e133","type":"library","author":"Borewit (https://github.com/Borewit)","name":"token-types","version":"4.2.1","description":"Common token types for decoding and encoding numeric and string values","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:token-types:token-types:4.2.1:*:*:*:*:*:*:*","purl":"pkg:npm/token-types@4.2.1","externalReferences":[{"url":"https://github.com/Borewit/token-types","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:token-types:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_types:token-types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token_types:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:token-types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:Borewit:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token-types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:token:token_types:4.2.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/token-types/package.json"}]},{"bom-ref":"pkg:npm/traverse@0.3.9?package-id=8b1a05e62fb7f42a","type":"library","author":"James Halliday","name":"traverse","version":"0.3.9","description":"Traverse and transform objects by visiting every node on a recursive walk","licenses":[{"license":{"name":"MIT/X11"}}],"cpe":"cpe:2.3:a:substack:traverse:0.3.9:*:*:*:*:*:*:*","purl":"pkg:npm/traverse@0.3.9","externalReferences":[{"url":"http://github.com/substack/js-traverse.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:traverse:traverse:0.3.9:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/traverse/package.json"}]},{"bom-ref":"pkg:npm/trim-repeated@1.0.0?package-id=4707f97b4eb6a83b","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"trim-repeated","version":"1.0.0","description":"Trim a consecutively repeated substring: foo--bar---baz → foo-bar-baz","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:trim-repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/trim-repeated@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim-repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim_repeated:trim-repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim_repeated:trim_repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim:trim-repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:trim:trim_repeated:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/trim-repeated/package.json"}]},{"bom-ref":"pkg:npm/triple-beam@1.4.1?package-id=867ca1c3d07cb072","type":"library","author":"Charlie Robbins <charlie.robbins@gmail.com>","name":"triple-beam","version":"1.4.1","description":"Definitions of levels for logging purposes & shareable Symbol constants.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:triple-beam:triple-beam:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/triple-beam@1.4.1","externalReferences":[{"url":"git+https://github.com/winstonjs/triple-beam.git","type":"distribution"},{"url":"https://github.com/winstonjs/triple-beam#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple-beam:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple_beam:triple-beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple_beam:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:triple-beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple:triple-beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:triple:triple_beam:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/triple-beam/package.json"}]},{"bom-ref":"pkg:npm/truncate-utf8-bytes@1.0.2?package-id=a4cd60ed4d28ed9d","type":"library","author":"Carl Xiong <xiongc05@gmail.com>","name":"truncate-utf8-bytes","version":"1.0.2","description":"Truncate string to given length in bytes","licenses":[{"license":{"id":"WTFPL"}}],"cpe":"cpe:2.3:a:truncate-utf8-bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/truncate-utf8-bytes@1.0.2","externalReferences":[{"url":"git+https://github.com/parshap/truncate-utf8-bytes.git","type":"distribution"},{"url":"https://github.com/parshap/truncate-utf8-bytes#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate-utf8-bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8_bytes:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8_bytes:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate-utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate-utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate_utf8:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:truncate:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:truncate-utf8-bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:truncate_utf8_bytes:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/truncate-utf8-bytes/package.json"}]},{"bom-ref":"pkg:npm/tslib@2.7.0?package-id=d3f6878231388b72","type":"library","author":"Microsoft Corp.","name":"tslib","version":"2.7.0","description":"Runtime library for TypeScript helper functions","licenses":[{"license":{"id":"0BSD"}}],"cpe":"cpe:2.3:a:Microsoft:tslib:2.7.0:*:*:*:*:*:*:*","purl":"pkg:npm/tslib@2.7.0","externalReferences":[{"url":"https://github.com/Microsoft/tslib.git","type":"distribution"},{"url":"https://www.typescriptlang.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tslib:tslib:2.7.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tslib/package.json"}]},{"bom-ref":"pkg:npm/tunnel-agent@0.6.0?package-id=fdd564bd2943f5f4","type":"library","author":"Mikeal Rogers <mikeal.rogers@gmail.com> (http://www.futurealoof.com)","name":"tunnel-agent","version":"0.6.0","description":"HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone module.","licenses":[{"license":{"id":"Apache-2.0"}}],"cpe":"cpe:2.3:a:tunnel-agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*","purl":"pkg:npm/tunnel-agent@0.6.0","externalReferences":[{"url":"https://github.com/mikeal/tunnel-agent","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel-agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel_agent:tunnel-agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel_agent:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mikeal:tunnel-agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:mikeal:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel:tunnel-agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tunnel:tunnel_agent:0.6.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/tunnel-agent/package.json"}]},{"bom-ref":"pkg:npm/type-is@1.6.18?package-id=26b4bd4c5c1a13bb","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>, Jonathan Ong <me@jongleberry.com> (http://jongleberry.com)","name":"type-is","version":"1.6.18","description":"Infer the content-type of a request.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:type-is:type-is:1.6.18:*:*:*:*:*:*:*","purl":"pkg:npm/type-is@1.6.18","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:type-is:type_is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type_is:type-is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type_is:type_is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type:type-is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:type:type_is:1.6.18:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/type-is/package.json"}]},{"bom-ref":"pkg:npm/typecast@0.0.1?package-id=89d78b6ec74b159e","type":"library","name":"typecast","version":"0.0.1","description":"Simple typecasting","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:eivindfjeldstad:typecast:0.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/typecast@0.0.1","externalReferences":[{"url":"https://github.com/eivindfjeldstad/typecast.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:typecast:typecast:0.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typecast/package.json"}]},{"bom-ref":"pkg:npm/typed-array-buffer@1.0.3?package-id=131dc3292e117210","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"typed-array-buffer","version":"1.0.3","description":"Get the ArrayBuffer out of a TypedArray, robustly.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:typed-array-buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*","purl":"pkg:npm/typed-array-buffer@1.0.3","externalReferences":[{"url":"git+https://github.com/inspect-js/typed-array-buffer.git","type":"distribution"},{"url":"https://github.com/inspect-js/typed-array-buffer#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed-array-buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array_buffer:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array_buffer:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed-array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed-array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed_array:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed:typed-array-buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:typed:typed_array_buffer:1.0.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typed-array-buffer/package.json"}]},{"bom-ref":"pkg:npm/typedarray@0.0.6?package-id=34381d15eae55598","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"typedarray","version":"0.0.6","description":"TypedArray polyfill for old browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:typedarray:typedarray:0.0.6:*:*:*:*:*:*:*","purl":"pkg:npm/typedarray@0.0.6","externalReferences":[{"url":"git://github.com/substack/typedarray.git","type":"distribution"},{"url":"https://github.com/substack/typedarray","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:substack:typedarray:0.0.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/typedarray/package.json"}]},{"bom-ref":"pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=b579583c7128019b","type":"library","publisher":"GNU Libc Maintainers <debian-glibc@lists.debian.org>","name":"tzdata","version":"2026a-0+deb13u1","licenses":[{"license":{"name":"public-domain"}}],"cpe":"cpe:2.3:a:tzdata:tzdata:2026a-0\\+deb13u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/tzdata"},{"name":"syft:location:1:layerID","value":"sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7"},{"name":"syft:location:1:path","value":"/usr/share/doc/tzdata/copyright"},{"name":"syft:location:2:layerID","value":"sha256:ac2a91ec876dfaf2145e14b0b43ce6b3ea3d4edb28a0df9d91c52f2efbb8e1a7"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/tzdata.md5sums"},{"name":"syft:metadata:installedSize","value":"1361"}]},{"bom-ref":"pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=d9521b4a2d6d0070&upstream=tzdata","type":"library","publisher":"GNU Libc Maintainers <debian-glibc@lists.debian.org>","name":"tzdata-legacy","version":"2026a-0+deb13u1","licenses":[{"license":{"name":"public-domain"}}],"cpe":"cpe:2.3:a:tzdata-legacy:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&upstream=tzdata","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:cpe23","value":"cpe:2.3:a:tzdata-legacy:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tzdata_legacy:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tzdata_legacy:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tzdata:tzdata-legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:tzdata:tzdata_legacy:2026a-0\\+deb13u1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/tzdata-legacy"},{"name":"syft:location:1:layerID","value":"sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d"},{"name":"syft:location:1:path","value":"/usr/share/doc/tzdata-legacy/copyright"},{"name":"syft:location:2:layerID","value":"sha256:f15316efa9979a44eee43172e640630f60407180eff3d985274befd600bb227d"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/tzdata-legacy.md5sums"},{"name":"syft:metadata:installedSize","value":"1251"},{"name":"syft:metadata:source","value":"tzdata"}]},{"bom-ref":"pkg:npm/uglify-js@3.19.3?package-id=929f7bc81a430f59","type":"library","author":"Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/), Alex Lam <alexlamsl@gmail.com>, Mihai Bazon <mihai.bazon@gmail.com> (http://lisperator.net/)","name":"uglify-js","version":"3.19.3","description":"JavaScript parser, mangler/compressor and beautifier toolkit","licenses":[{"license":{"id":"BSD-2-Clause"}}],"cpe":"cpe:2.3:a:uglifyjs_project:uglifyjs:3.19.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/uglify-js@3.19.3","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/uglify-js/package.json"}]},{"bom-ref":"pkg:npm/unbzip2-stream@1.4.3?package-id=d5a42b3035bdd365","type":"library","author":"Jan Bölsche <jan@lagomorph.de>","name":"unbzip2-stream","version":"1.4.3","description":"streaming unbzip2 implementation in pure javascript for node and browsers","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unbzip2-stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*","purl":"pkg:npm/unbzip2-stream@1.4.3","externalReferences":[{"url":"https://github.com/regular/unbzip2-stream.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2-stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2_stream:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2_stream:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regular:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regular:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2:unbzip2-stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unbzip2:unbzip2_stream:1.4.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unbzip2-stream/package.json"}]},{"bom-ref":"pkg:npm/unc-path-regex@0.1.2?package-id=ac9aba0a81d8073c","type":"library","author":"Jon Schlinkert (https://github.com/jonschlinkert)","name":"unc-path-regex","version":"0.1.2","description":"Regular expression for testing if a file path is a windows UNC file path. Can also be used as a component of another regexp via the `.source` property.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unc-path-regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/unc-path-regex@0.1.2","externalReferences":[{"url":"https://github.com/regexhq/unc-path-regex.git","type":"distribution"},{"url":"https://github.com/regexhq/unc-path-regex","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc-path-regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path_regex:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path_regex:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc-path:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc-path:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc_path:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:regexhq:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc:unc-path-regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unc:unc_path_regex:0.1.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unc-path-regex/package.json"}]},{"bom-ref":"pkg:npm/underscore.string@3.3.6?package-id=719cbb15880d33d1","type":"library","author":"Esa-Matti Suuronen <esa-matti@suuronen.org> (http://esa-matti.suuronen.org/), Edward Tsech <edtsech@gmail.com>, Pavel Pravosud <pavel@pravosud.com> (<https://github.com/rwz>), Sasha Koss <kossnocorp@gmail.com> (http://koss.nocorp.me/), Vladimir Dronnikov <dronnikov@gmail.com>, Pete Kruckenberg (<https://github.com/kruckenb>), Paul Chavard <paul@chavard.net> (<http://tchak.net>), Ed Finkler <coj@funkatron.com> (<http://funkatron.com>), Christoph Hermann <schtoeffel@gmail.com> (<https://github.com/stoeffel>)","name":"underscore.string","version":"3.3.6","description":"String manipulation extensions for Underscore.js javascript library.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:underscore.string:underscore.string:3.3.6:*:*:*:*:*:*:*","purl":"pkg:npm/underscore.string@3.3.6","externalReferences":[{"url":"https://github.com/epeli/underscore.string.git","type":"distribution"},{"url":"http://epeli.github.com/underscore.string/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:epeli:underscore.string:3.3.6:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/underscore.string/package.json"}]},{"bom-ref":"pkg:npm/undici-types@6.19.8?package-id=c0ec3464366df4cf","type":"library","author":"Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)","name":"undici-types","version":"6.19.8","description":"A stand-alone types package for Undici","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:undici-types:undici-types:6.19.8:*:*:*:*:*:*:*","purl":"pkg:npm/undici-types@6.19.8","externalReferences":[{"url":"git+https://github.com/nodejs/undici.git","type":"distribution"},{"url":"https://undici.nodejs.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici-types:undici_types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici-types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici_types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici-types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici_types:6.19.8:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ethers/node_modules/undici-types/package.json"}]},{"bom-ref":"pkg:npm/undici-types@6.21.0?package-id=2ec7a147b1861e7e","type":"library","author":"Daniele Belardi (https://github.com/dnlup), Ethan Arrowood (https://github.com/ethan-arrowood), Matteo Collina (https://github.com/mcollina), Matthew Aitken (https://github.com/KhafraDev), Robert Nagy (https://github.com/ronag), Szymon Marczak (https://github.com/szmarczak), Tomas Della Vedova (https://github.com/delvedor)","name":"undici-types","version":"6.21.0","description":"A stand-alone types package for Undici","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:undici-types:undici-types:6.21.0:*:*:*:*:*:*:*","purl":"pkg:npm/undici-types@6.21.0","externalReferences":[{"url":"git+https://github.com/nodejs/undici.git","type":"distribution"},{"url":"https://undici.nodejs.org","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici-types:undici_types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici-types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici_types:undici_types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici-types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:undici:undici_types:6.21.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/undici-types/package.json"}]},{"bom-ref":"pkg:npm/unicode-properties@1.4.1?package-id=77f2f0a8f7df086b","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"unicode-properties","version":"1.4.1","description":"Provides fast access to unicode character properties","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unicode-properties:unicode-properties:1.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/unicode-properties@1.4.1","externalReferences":[{"url":"git://github.com/devongovett/unicode-properties.git","type":"distribution"},{"url":"https://github.com/devongovett/unicode-properties","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode-properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_properties:unicode-properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_properties:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode-properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode-properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode_properties:1.4.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unicode-properties/package.json"}]},{"bom-ref":"pkg:npm/unicode-trie@2.0.0?package-id=c0712c33eff88472","type":"library","author":"Devon Govett <devongovett@gmail.com>","name":"unicode-trie","version":"2.0.0","description":"Unicode Trie data structure for fast character metadata lookup, ported from ICU","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unicode-trie:unicode-trie:2.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unicode-trie@2.0.0","externalReferences":[{"url":"git://github.com/devongovett/unicode-trie.git","type":"distribution"},{"url":"https://github.com/devongovett/unicode-trie","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode-trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_trie:unicode-trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode_trie:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode-trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:devongovett:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode-trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unicode:unicode_trie:2.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unicode-trie/package.json"}]},{"bom-ref":"pkg:npm/unique-filename@1.1.1?package-id=cb6e79fb065b0164","type":"library","author":"Rebecca Turner <me@re-becca.org> (http://re-becca.org/)","name":"unique-filename","version":"1.1.1","description":"Generate a unique filename for use in temporary directories or caches.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-filename:unique-filename:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/unique-filename@1.1.1","externalReferences":[{"url":"https://github.com/iarna/unique-filename.git","type":"distribution"},{"url":"https://github.com/iarna/unique-filename","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-filename:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique-filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique-filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique_filename:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json"}]},{"bom-ref":"pkg:npm/unique-filename@4.0.0?package-id=deaed92dd166ac8d","type":"library","author":"GitHub Inc.","name":"unique-filename","version":"4.0.0","description":"Generate a unique filename for use in temporary directories or caches.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-filename:unique-filename:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unique-filename@4.0.0","externalReferences":[{"url":"git+https://github.com/npm/unique-filename.git","type":"distribution"},{"url":"https://github.com/iarna/unique-filename","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-filename:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique-filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_filename:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique-filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique_filename:4.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unique-filename/package.json"}]},{"bom-ref":"pkg:npm/unique-slug@2.0.2?package-id=930467346c7209f9","type":"library","author":"Rebecca Turner <me@re-becca.org> (http://re-becca.org)","name":"unique-slug","version":"2.0.2","description":"Generate a unique character string suitible for use in files and URLs.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-slug:unique-slug:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/unique-slug@2.0.2","externalReferences":[{"url":"git://github.com/iarna/unique-slug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-slug:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique-slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique-slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:unique_slug:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json"}]},{"bom-ref":"pkg:npm/unique-slug@5.0.0?package-id=b1297fb43211d6e6","type":"library","author":"GitHub Inc.","name":"unique-slug","version":"5.0.0","description":"Generate a unique character string suitible for use in files and URLs.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:unique-slug:unique-slug:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unique-slug@5.0.0","externalReferences":[{"url":"git+https://github.com/npm/unique-slug.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique-slug:unique_slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique-slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique_slug:unique_slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique-slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:unique:unique_slug:5.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unique-slug/package.json"}]},{"bom-ref":"pkg:npm/universalify@2.0.1?package-id=478e17a8d9d9e24d","type":"library","author":"Ryan Zimmerman <opensrc@ryanzim.com>","name":"universalify","version":"2.0.1","description":"Make a callback- or promise-based function support both promises and callbacks.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:universalify:universalify:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/universalify@2.0.1","externalReferences":[{"url":"git+https://github.com/RyanZim/universalify.git","type":"distribution"},{"url":"https://github.com/RyanZim/universalify#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:RyanZim:universalify:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/universalify/package.json"}]},{"bom-ref":"pkg:npm/unpipe@1.0.0?package-id=7bdc8da7ff6ad05b","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"unpipe","version":"1.0.0","description":"Unpipe a stream from all destinations","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unpipe:unpipe:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/unpipe@1.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unpipe/package.json"}]},{"bom-ref":"pkg:npm/unzipper@0.9.15?package-id=96d1f3567742fbab","type":"library","author":"Evan Oxfeld <eoxfeld@gmail.com>, Ziggy Jonsson <ziggy.jonsson.nyc@gmail.com>, Evan Oxfeld <eoxfeld@gmail.com>, Joe Ferner <joe.ferner@nearinfinity.com>","name":"unzipper","version":"0.9.15","description":"Unzip cross-platform streaming API ","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:unzipper_project:unzipper:0.9.15:*:*:*:*:node.js:*:*","purl":"pkg:npm/unzipper@0.9.15","externalReferences":[{"url":"https://github.com/ZJONSSON/node-unzipper.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/unzipper/package.json"}]},{"bom-ref":"pkg:npm/url-parse-lax@3.0.0?package-id=fe44fa8ce8ee75af","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"url-parse-lax","version":"3.0.0","description":"Lax url.parse() with support for protocol-less URLs & IPs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:url-parse-lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/url-parse-lax@3.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-parse-lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse_lax:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse_lax:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_parse:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url-parse-lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url_parse_lax:3.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/url-parse-lax/package.json"}]},{"bom-ref":"pkg:npm/url-to-options@1.0.1?package-id=e31e5498dbb100a3","type":"library","author":"Steven Vachon <contact@svachon.com> (https://www.svachon.com/)","name":"url-to-options","version":"1.0.1","description":"Convert a WHATWG URL to an http(s).request options object.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:url-to-options:url-to-options:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/url-to-options@1.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-to-options:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to_options:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to_options:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-to:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url-to:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url_to:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url-to-options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:url:url_to_options:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/url-to-options/package.json"}]},{"bom-ref":"pkg:npm/utf8-byte-length@1.0.5?package-id=91d2330fa076a0de","type":"library","author":"Carl Xiong <xiongc05@gmail.com>","name":"utf8-byte-length","version":"1.0.5","description":"Get utf8 byte length of string","licenses":[{"expression":"WTFPL OR MIT"}],"cpe":"cpe:2.3:a:utf8-byte-length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*","purl":"pkg:npm/utf8-byte-length@1.0.5","externalReferences":[{"url":"git+https://github.com/parshap/utf8-byte-length.git","type":"distribution"},{"url":"https://github.com/parshap/utf8-byte-length#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8-byte-length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte_length:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte_length:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8-byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8-byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8_byte:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:parshap:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8:utf8-byte-length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utf8:utf8_byte_length:1.0.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/utf8-byte-length/package.json"}]},{"bom-ref":"pkg:npm/util-deprecate@1.0.2?package-id=5aa8474b38ae743a","type":"library","author":"Nathan Rajlich <nathan@tootallnate.net> (http://n8.io/)","name":"util-deprecate","version":"1.0.2","description":"The Node.js `util.deprecate()` function with browser support","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:util-deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/util-deprecate@1.0.2","externalReferences":[{"url":"git://github.com/TooTallNate/util-deprecate.git","type":"distribution"},{"url":"https://github.com/TooTallNate/util-deprecate","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:util-deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util_deprecate:util-deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util_deprecate:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:util-deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:TooTallNate:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util:util-deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:util:util_deprecate:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/util-deprecate/package.json"}]},{"bom-ref":"pkg:npm/utils-merge@1.0.1?package-id=6f20808d27c78dba","type":"library","author":"Jared Hanson <jaredhanson@gmail.com> (http://www.jaredhanson.net/)","name":"utils-merge","version":"1.0.1","description":"merge() utility function","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:jaredhanson:utils-merge:1.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/utils-merge@1.0.1","externalReferences":[{"url":"git://github.com/jaredhanson/utils-merge.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:jaredhanson:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils-merge:utils-merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils-merge:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils_merge:utils-merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils_merge:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils:utils-merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:utils:utils_merge:1.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/utils-merge/package.json"}]},{"bom-ref":"pkg:npm/uuid@8.3.2?package-id=75276f930d3cfafc","type":"library","name":"uuid","version":"8.3.2","description":"RFC4122 (v1, v4, and v5) UUIDs","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:uuidjs:uuid:8.3.2:*:*:*:*:node.js:*:*","purl":"pkg:npm/uuid@8.3.2","externalReferences":[{"url":"https://github.com/uuidjs/uuid.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/uuid/package.json"}]},{"bom-ref":"pkg:npm/v8flags@4.0.1?package-id=60ade9588799c895","type":"library","author":"Gulp Team <team@gulpjs.com> (https://gulpjs.com/), Tyler Kellen <tyler@sleekcode.net>, Blaine Bublitz <blaine.bublitz@gmail.com>, Nicolò Ribaudo <nicolo.ribaudo@gmail.com>, Selwyn <talk@selwyn.cc>, Leo Zhang <leo@leozhang.me>","name":"v8flags","version":"4.0.1","description":"Get available v8 and Node.js flags.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:v8flags:v8flags:4.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/v8flags@4.0.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/v8flags/package.json"}]},{"bom-ref":"pkg:npm/validate@4.5.1?package-id=ccebf638e9fd3787","type":"library","author":"Eivind Fjeldstad","name":"validate","version":"4.5.1","description":"Validate object properties in javascript.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:validate:validate:4.5.1:*:*:*:*:*:*:*","purl":"pkg:npm/validate@4.5.1","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/validate/package.json"}]},{"bom-ref":"pkg:npm/validator@13.15.35?package-id=d86489c4bc1d875a","type":"library","author":"Chris O'Hara <cohara87@gmail.com>, Anthony Nandaa (https://github.com/profnandaa)","name":"validator","version":"13.15.35","description":"String validation and sanitization","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:validator_project:validator:13.15.35:*:*:*:*:node.js:*:*","purl":"pkg:npm/validator@13.15.35","externalReferences":[{"url":"git+https://github.com/validatorjs/validator.js.git","type":"distribution"},{"url":"https://github.com/validatorjs/validator.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/validator/package.json"}]},{"bom-ref":"pkg:npm/vary@1.1.2?package-id=ef1054337f6d6829","type":"library","author":"Douglas Christopher Wilson <doug@somethingdoug.com>","name":"vary","version":"1.1.2","description":"Manipulate the HTTP Vary header","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:vary:vary:1.1.2:*:*:*:*:*:*:*","purl":"pkg:npm/vary@1.1.2","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/vary/package.json"}]},{"bom-ref":"pkg:npm/void-elements@3.1.0?package-id=c20f7d8a863db46e","type":"library","author":"hemanth.hm","name":"void-elements","version":"3.1.0","description":"Array of \"void elements\" defined by the HTML specification.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:void-elements:void-elements:3.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/void-elements@3.1.0","externalReferences":[{"url":"https://github.com/jadejs/void-elements","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:void-elements:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void_elements:void-elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void_elements:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:void-elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:jadejs:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void:void-elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:void:void_elements:3.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/void-elements/package.json"}]},{"bom-ref":"pkg:npm/walk@2.3.15?package-id=01da09009ec4151e","type":"library","author":"AJ ONeal <coolaj86@gmail.com>","name":"walk","version":"2.3.15","description":"A node port of python's os.walk","licenses":[{"expression":"MIT OR Apache-2.0"}],"cpe":"cpe:2.3:a:walk:walk:2.3.15:*:*:*:*:*:*:*","purl":"pkg:npm/walk@2.3.15","externalReferences":[{"url":"https://git.coolaj86.com/coolaj86/fs-walk.js.git","type":"distribution"},{"url":"https://git.coolaj86.com/coolaj86/fs-walk.js","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/walk/package.json"}]},{"bom-ref":"pkg:npm/walkdir@0.0.11?package-id=f1205193f13f39ea","type":"library","author":"Ryan Day <soldair@gmail.com>, tjfontaine","name":"walkdir","version":"0.0.11","description":"Find files simply. Walks a directory tree emitting events based on what it finds. Presents a familiar callback/emitter/a+sync interface. Walk a tree of any depth.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:soldair:walkdir:0.0.11:*:*:*:*:*:*:*","purl":"pkg:npm/walkdir@0.0.11","externalReferences":[{"url":"git://github.com/soldair/node-walkdir.git","type":"distribution"},{"url":"http://github.com/soldair/node-walkdir","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:walkdir:walkdir:0.0.11:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/walkdir/package.json"}]},{"bom-ref":"pkg:npm/which@1.3.1?package-id=41ea0ec5c3df6504","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)","name":"which","version":"1.3.1","description":"Like which(1) unix command. Find the first instance of an executable in the PATH.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:which:1.3.1:*:*:*:*:*:*:*","purl":"pkg:npm/which@1.3.1","externalReferences":[{"url":"git://github.com/isaacs/node-which.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which:1.3.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/global-prefix/node_modules/which/package.json"}]},{"bom-ref":"pkg:npm/which@2.0.2?package-id=1222522e2e485736","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me)","name":"which","version":"2.0.2","description":"Like which(1) unix command. Find the first instance of an executable in the PATH.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:isaacs:which:2.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/which@2.0.2","externalReferences":[{"url":"git://github.com/isaacs/node-which.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which:2.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which/package.json"}]},{"bom-ref":"pkg:npm/which@5.0.0?package-id=35565647196cbf3c","type":"library","author":"GitHub Inc.","name":"which","version":"5.0.0","description":"Like which(1) unix command. Find the first instance of an executable in the PATH.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:which:which:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/which@5.0.0","externalReferences":[{"url":"git+https://github.com/npm/node-which.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-gyp/node_modules/which/package.json"}]},{"bom-ref":"pkg:npm/which-boxed-primitive@1.1.1?package-id=1c5150f5622ba818","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"which-boxed-primitive","version":"1.1.1","description":"Which kind of boxed JS primitive is this?","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-boxed-primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/which-boxed-primitive@1.1.1","externalReferences":[{"url":"git+https://github.com/inspect-js/which-boxed-primitive.git","type":"distribution"},{"url":"https://github.com/inspect-js/which-boxed-primitive#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-boxed-primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed_primitive:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed_primitive:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_boxed:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-boxed-primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_boxed_primitive:1.1.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-boxed-primitive/package.json"}]},{"bom-ref":"pkg:npm/which-collection@1.0.2?package-id=15815161b3b5c910","type":"library","author":"Jordan Harband <ljharb@gmail.com>","name":"which-collection","version":"1.0.2","description":"Which kind of Collection (Map, Set, WeakMap, WeakSet) is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-collection:which-collection:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/which-collection@1.0.2","externalReferences":[{"url":"git+https://github.com/inspect-js/which-collection.git","type":"distribution"},{"url":"https://github.com/inspect-js/which-collection#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-collection:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_collection:which-collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_collection:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which-collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_collection:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-collection/package.json"}]},{"bom-ref":"pkg:npm/which-module@2.0.1?package-id=17fef2e739c99bd0","type":"library","author":"nexdrew","name":"which-module","version":"2.0.1","description":"Find the module object for something that was require()d","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:which-module:which-module:2.0.1:*:*:*:*:*:*:*","purl":"pkg:npm/which-module@2.0.1","externalReferences":[{"url":"git+https://github.com/nexdrew/which-module.git","type":"distribution"},{"url":"https://github.com/nexdrew/which-module#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-module:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_module:which-module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_module:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nexdrew:which-module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:nexdrew:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_module:2.0.1:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-module/package.json"}]},{"bom-ref":"pkg:npm/which-pm-runs@1.1.0?package-id=511b12aae9b5f098","type":"library","author":"Zoltan Kochan","name":"which-pm-runs","version":"1.1.0","description":"Detects what package manager executes the process","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-pm-runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/which-pm-runs@1.1.0","externalReferences":[{"url":"https://github.com/zkochan/packages/tree/main/which-pm-runs","type":"distribution"},{"url":"https://github.com/zkochan/packages/tree/main/which-pm-runs#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-pm-runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm_runs:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm_runs:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_pm:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zkochan:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zkochan:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-pm-runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_pm_runs:1.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-pm-runs/package.json"}]},{"bom-ref":"pkg:npm/which-typed-array@1.1.20?package-id=fcae901f7f234cb1","type":"library","author":"Jordan Harband <ljharb@gmail.com> (http://ljharb.codes), Jordan Harband <ljharb@gmail.com> (http://ljharb.codes)","name":"which-typed-array","version":"1.1.20","description":"Which kind of Typed Array is this JavaScript value? Works cross-realm, without `instanceof`, and despite Symbol.toStringTag.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:which-typed-array:which-typed-array:1.1.20:*:*:*:*:*:*:*","purl":"pkg:npm/which-typed-array@1.1.20","externalReferences":[{"url":"git://github.com/inspect-js/which-typed-array.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-typed-array:which_typed_array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed_array:which-typed-array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed_array:which_typed_array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-typed:which-typed-array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which-typed:which_typed_array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed:which-typed-array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which_typed:which_typed_array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which-typed-array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:inspect-js:which_typed_array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which-typed-array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:which:which_typed_array:1.1.20:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/which-typed-array/package.json"}]},{"bom-ref":"pkg:npm/wide-align@1.1.3?package-id=5c7edf2206958f5d","type":"library","author":"Rebecca Turner <me@re-becca.org> (http://re-becca.org/)","name":"wide-align","version":"1.1.3","description":"A wide-character aware text alignment function for use on the console or with fixed width fonts.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:wide-align:wide-align:1.1.3:*:*:*:*:*:*:*","purl":"pkg:npm/wide-align@1.1.3","externalReferences":[{"url":"https://github.com/iarna/wide-align","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide-align:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide-align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide-align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide-align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide_align:1.1.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wide-align/package.json"}]},{"bom-ref":"pkg:npm/wide-align@1.1.5?package-id=2f5deab669904e50","type":"library","author":"Rebecca Turner <me@re-becca.org> (http://re-becca.org/)","name":"wide-align","version":"1.1.5","description":"A wide-character aware text alignment function for use on the console or with fixed width fonts.","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:wide-align:wide-align:1.1.5:*:*:*:*:*:*:*","purl":"pkg:npm/wide-align@1.1.5","externalReferences":[{"url":"https://github.com/iarna/wide-align","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide-align:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide-align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide_align:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide-align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:iarna:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide-align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wide:wide_align:1.1.5:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json"}]},{"bom-ref":"pkg:npm/winston@3.19.0?package-id=af1d6f4cfc747231","type":"library","author":"Charlie Robbins <charlie.robbins@gmail.com>, David Hyde <dabh@alumni.stanford.edu>","name":"winston","version":"3.19.0","description":"A logger for just about everything.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:winstonjs:winston:3.19.0:*:*:*:*:*:*:*","purl":"pkg:npm/winston@3.19.0","externalReferences":[{"url":"https://github.com/winstonjs/winston.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston:winston:3.19.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston/package.json"}]},{"bom-ref":"pkg:npm/winston-transport@4.9.0?package-id=365414d23adfc5d2","type":"library","author":"Charlie Robbins <charlie.robbins@gmail.com>","name":"winston-transport","version":"4.9.0","description":"Base stream implementations for winston@3 and up.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:winston-transport:winston-transport:4.9.0:*:*:*:*:*:*:*","purl":"pkg:npm/winston-transport@4.9.0","externalReferences":[{"url":"https://github.com/winstonjs/winston-transport#readme","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston-transport:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston_transport:winston-transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston_transport:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:winston-transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winstonjs:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston:winston-transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:winston:winston_transport:4.9.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/winston-transport/package.json"}]},{"bom-ref":"pkg:npm/with@7.0.2?package-id=f241c9ed4f41ff10","type":"library","author":"ForbesLindesay","name":"with","version":"7.0.2","description":"Compile time `with` for strict mode JavaScript","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:pugjs:with:7.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/with@7.0.2","externalReferences":[{"url":"https://github.com/pugjs/with.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:with:with:7.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/with/package.json"}]},{"bom-ref":"pkg:npm/wkx@0.5.0?package-id=842b66eb903e3244","type":"library","author":"Christian Schwarz","name":"wkx","version":"0.5.0","description":"A WKT/WKB/EWKT/EWKB/TWKB/GeoJSON parser and serializer","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:cschwarz:wkx:0.5.0:*:*:*:*:*:*:*","purl":"pkg:npm/wkx@0.5.0","externalReferences":[{"url":"http://github.com/cschwarz/wkx.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wkx:wkx:0.5.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wkx/package.json"}]},{"bom-ref":"pkg:npm/wordwrap@1.0.0?package-id=b911c29de2bf7ea1","type":"library","author":"James Halliday <mail@substack.net> (http://substack.net)","name":"wordwrap","version":"1.0.0","description":"Wrap those words. Show them at what columns to start and stop.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:substack:wordwrap:1.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/wordwrap@1.0.0","externalReferences":[{"url":"git://github.com/substack/node-wordwrap.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wordwrap:wordwrap:1.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wordwrap/package.json"}]},{"bom-ref":"pkg:npm/wrap-ansi@6.2.0?package-id=cbfbb7822072903f","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)","name":"wrap-ansi","version":"6.2.0","description":"Wordwrap a string with ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wrap-ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/wrap-ansi@6.2.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap-ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap-ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap_ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap-ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap_ansi:6.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json"}]},{"bom-ref":"pkg:npm/wrap-ansi@7.0.0?package-id=b15a62ebd4d4ca1c","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"wrap-ansi","version":"7.0.0","description":"Wordwrap a string with ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wrap-ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/wrap-ansi@7.0.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap-ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap-ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap_ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap-ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap_ansi:7.0.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi-cjs/package.json"}]},{"bom-ref":"pkg:npm/wrap-ansi@8.1.0?package-id=3e75b684ded1ef93","type":"library","author":"Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)","name":"wrap-ansi","version":"8.1.0","description":"Wordwrap a string with ANSI escape codes","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:wrap-ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*","purl":"pkg:npm/wrap-ansi@8.1.0","properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap-ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap-ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap_ansi:wrap_ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap-ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:wrap:wrap_ansi:8.1.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrap-ansi/package.json"}]},{"bom-ref":"pkg:npm/wrappy@1.0.2?package-id=9e7700cc01592b12","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"wrappy","version":"1.0.2","description":"Callback wrapping utility","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:wrappy:wrappy:1.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/wrappy@1.0.2","externalReferences":[{"url":"https://github.com/npm/wrappy","type":"distribution"},{"url":"https://github.com/npm/wrappy","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:npm:wrappy:1.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/wrappy/package.json"}]},{"bom-ref":"pkg:npm/ws@7.4.6?package-id=670482146c83d660","type":"library","author":"Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)","name":"ws","version":"7.4.6","description":"Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ws_project:ws:7.4.6:*:*:*:*:node.js:*:*","purl":"pkg:npm/ws@7.4.6","externalReferences":[{"url":"https://github.com/websockets/ws","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/engine.io/node_modules/ws/package.json"}]},{"bom-ref":"pkg:npm/ws@8.17.1?package-id=c740f277708480a9","type":"library","author":"Einar Otto Stangvik <einaros@gmail.com> (http://2x.io)","name":"ws","version":"8.17.1","description":"Simple to use, blazing fast and thoroughly tested websocket client and server for Node.js","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:ws_project:ws:8.17.1:*:*:*:*:node.js:*:*","purl":"pkg:npm/ws@8.17.1","externalReferences":[{"url":"git+https://github.com/websockets/ws.git","type":"distribution"},{"url":"https://github.com/websockets/ws","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/ws/package.json"}]},{"bom-ref":"pkg:npm/xtend@4.0.2?package-id=961b704b394b9dda","type":"library","author":"Raynos <raynos2@gmail.com>, Jake Verbaten, Matt Esch","name":"xtend","version":"4.0.2","description":"extend like a boss","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:Raynos:xtend:4.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/xtend@4.0.2","externalReferences":[{"url":"git://github.com/Raynos/xtend.git","type":"distribution"},{"url":"https://github.com/Raynos/xtend","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:xtend:xtend:4.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/xtend/package.json"}]},{"bom-ref":"pkg:npm/y18n@4.0.3?package-id=cb7009f90513c997","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"y18n","version":"4.0.3","description":"the bare-bones internationalization library used by yargs","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:y18n_project:y18n:4.0.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/y18n@4.0.3","externalReferences":[{"url":"https://github.com/yargs/y18n","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/y18n/package.json"}]},{"bom-ref":"pkg:npm/yallist@3.1.1?package-id=91c0363893b76787","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"yallist","version":"3.1.1","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:3.1.1:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@3.1.1","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/node-pre-gyp/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=6ff65ae32fc308b3","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=ebf539c8f0cfa1bf","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=88bb3e58ef355edf","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@4.0.0?package-id=d66798877c986375","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"yallist","version":"4.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yallist:yallist:4.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@4.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yallist@5.0.0?package-id=0b515ba55614743d","type":"library","author":"Isaac Z. Schlueter <i@izs.me> (http://blog.izs.me/)","name":"yallist","version":"5.0.0","description":"Yet Another Linked List","licenses":[{"license":{"id":"BlueOak-1.0.0"}}],"cpe":"cpe:2.3:a:yallist:yallist:5.0.0:*:*:*:*:*:*:*","purl":"pkg:npm/yallist@5.0.0","externalReferences":[{"url":"git+https://github.com/isaacs/yallist.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yallist/package.json"}]},{"bom-ref":"pkg:npm/yaml-schema-validator@1.2.3?package-id=aaef2ad8ce881f0a","type":"library","author":"Ketan Saxena","name":"yaml-schema-validator","version":"1.2.3","description":"Schema validator for yaml files","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:yaml-schema-validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*","purl":"pkg:npm/yaml-schema-validator@1.2.3","externalReferences":[{"url":"https://github.com/ketanTechracers/schema-validator","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml-schema-validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema_validator:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema_validator:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ketanTechracers:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:ketanTechracers:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml-schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml-schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml_schema:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml:yaml-schema-validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:yaml:yaml_schema_validator:1.2.3:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yaml-schema-validator/package.json"}]},{"bom-ref":"pkg:npm/yargs@15.4.1?package-id=2f0e67180312e9e4","type":"library","author":"Yargs Contributors (https://github.com/yargs/yargs/graphs/contributors)","name":"yargs","version":"15.4.1","description":"yargs the modern, pirate-themed, successor to optimist.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:yargs:yargs:15.4.1:*:*:*:*:*:*:*","purl":"pkg:npm/yargs@15.4.1","externalReferences":[{"url":"https://github.com/yargs/yargs.git","type":"distribution"},{"url":"https://yargs.js.org/","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/yargs/package.json"}]},{"bom-ref":"pkg:npm/yargs-parser@18.1.3?package-id=827c460c5ebe0ff3","type":"library","author":"Ben Coe <ben@npmjs.com>","name":"yargs-parser","version":"18.1.3","description":"the mighty option parser used by yargs","licenses":[{"license":{"id":"ISC"}}],"cpe":"cpe:2.3:a:yargs:yargs-parser:18.1.3:*:*:*:*:node.js:*:*","purl":"pkg:npm/yargs-parser@18.1.3","externalReferences":[{"url":"https://github.com/yargs/yargs-parser.git","type":"distribution"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json"}]},{"bom-ref":"pkg:npm/yauzl@2.10.0?package-id=7c6e4166ba89d3cf","type":"library","author":"Josh Wolfe <thejoshwolfe@gmail.com>","name":"yauzl","version":"2.10.0","description":"yet another unzip library for node","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:thejoshwolfe:yauzl:2.10.0:*:*:*:*:*:*:*","purl":"pkg:npm/yauzl@2.10.0","externalReferences":[{"url":"https://github.com/thejoshwolfe/yauzl.git","type":"distribution"},{"url":"https://github.com/thejoshwolfe/yauzl","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:yauzl:yauzl:2.10.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/yauzl/package.json"}]},{"bom-ref":"pkg:npm/z85@0.0.2?package-id=866e9bab4ee23af1","type":"library","author":"Michael Sealand <msealand@gmail.com>","name":"z85","version":"0.0.2","description":"ZeroMQ Base-85 Encoding","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:msealand:z85:0.0.2:*:*:*:*:*:*:*","purl":"pkg:npm/z85@0.0.2","externalReferences":[{"url":"https://github.com/msealand/z85.node.git","type":"distribution"},{"url":"https://github.com/msealand/z85.node","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:z85:z85:0.0.2:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/z85/package.json"}]},{"bom-ref":"pkg:npm/zip-stream@1.2.0?package-id=0180651c6d08c060","type":"library","author":"Chris Talkington (http://christalkington.com/)","name":"zip-stream","version":"1.2.0","description":"a streaming zip archive generator.","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:archiverjs:zip-stream:1.2.0:*:*:*:*:*:*:*","purl":"pkg:npm/zip-stream@1.2.0","externalReferences":[{"url":"https://github.com/archiverjs/node-zip-stream.git","type":"distribution"},{"url":"https://github.com/archiverjs/node-zip-stream","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:cpe23","value":"cpe:2.3:a:archiverjs:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip-stream:zip-stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip-stream:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip_stream:zip-stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip_stream:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip:zip-stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:cpe23","value":"cpe:2.3:a:zip:zip_stream:1.2.0:*:*:*:*:*:*:*"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/zip-stream/package.json"}]},{"bom-ref":"pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&package-id=90e7d5b74b631f9d&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1","type":"library","publisher":"Mark Brown <broonie@debian.org>","name":"zlib1g","version":"1:1.3.dfsg+really1.3.1-1+b1","licenses":[{"license":{"id":"Zlib"}}],"cpe":"cpe:2.3:a:zlib1g:zlib1g:1\\:1.3.dfsg\\+really1.3.1-1\\+b1:*:*:*:*:*:*:*","purl":"pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1","properties":[{"name":"syft:package:foundBy","value":"dpkg-db-cataloger"},{"name":"syft:package:type","value":"deb"},{"name":"syft:package:metadataType","value":"dpkg-db-entry"},{"name":"syft:location:0:layerID","value":"sha256:7b57942929394e731b49e8f1863a4da2cbd1b9fda48d9f1e75a0a28b2d89d01a"},{"name":"syft:location:0:path","value":"/var/lib/dpkg/status.d/zlib1g"},{"name":"syft:location:1:layerID","value":"sha256:7b57942929394e731b49e8f1863a4da2cbd1b9fda48d9f1e75a0a28b2d89d01a"},{"name":"syft:location:1:path","value":"/usr/share/doc/zlib1g/copyright"},{"name":"syft:location:2:layerID","value":"sha256:7b57942929394e731b49e8f1863a4da2cbd1b9fda48d9f1e75a0a28b2d89d01a"},{"name":"syft:location:2:path","value":"/var/lib/dpkg/status.d/zlib1g.md5sums"},{"name":"syft:metadata:installedSize","value":"181"},{"name":"syft:metadata:source","value":"zlib"},{"name":"syft:metadata:sourceVersion","value":"1:1.3.dfsg+really1.3.1-1"}]},{"bom-ref":"pkg:npm/zod@3.25.76?package-id=ea8efe4fe69bdf44","type":"library","author":"Colin McDonnell <zod@colinhacks.com>","name":"zod","version":"3.25.76","description":"TypeScript-first schema declaration and validation library with static type inference","licenses":[{"license":{"id":"MIT"}}],"cpe":"cpe:2.3:a:zod:zod:3.25.76:*:*:*:*:*:*:*","purl":"pkg:npm/zod@3.25.76","externalReferences":[{"url":"git+https://github.com/colinhacks/zod.git","type":"distribution"},{"url":"https://zod.dev","type":"website"}],"properties":[{"name":"syft:package:foundBy","value":"javascript-package-cataloger"},{"name":"syft:package:language","value":"javascript"},{"name":"syft:package:type","value":"npm"},{"name":"syft:package:metadataType","value":"javascript-npm-package"},{"name":"syft:location:0:layerID","value":"sha256:2889a4b2c21d2b3505a9c4fa7c4710492b7ce6d22a870229f271d5e814362d01"},{"name":"syft:location:0:path","value":"/juice-shop/node_modules/zod/package.json"}]},{"bom-ref":"os:debian@13.4","type":"operating-system","name":"debian","version":"13.4","description":"Distroless","swid":{"tagId":"debian","name":"debian","version":"13.4"},"externalReferences":[{"url":"https://github.com/GoogleContainerTools/distroless/issues/new","type":"issue-tracker"},{"url":"https://github.com/GoogleContainerTools/distroless","type":"website"},{"url":"https://github.com/GoogleContainerTools/distroless/blob/master/README.md","comment":"support","type":"other"}],"properties":[{"name":"syft:distro:extendedSupport","value":"false"},{"name":"syft:distro:id","value":"debian"},{"name":"syft:distro:prettyName","value":"Distroless"},{"name":"syft:distro:versionID","value":"13.4"}]},{"bom-ref":"645fbadb402adfd1","type":"file","name":"/usr/share/base-files/dot.bashrc","hashes":[{"alg":"SHA-1","content":"ba135c7bf840c9171bd3a3aea4156b45324d8d38"},{"alg":"SHA-256","content":"3dee894213fc1183318d254b1b3fcb21f41e7fc879ba81d39252f7996b67f980"}]},{"bom-ref":"7c1faa88b37a0b2f","type":"file","name":"/usr/share/base-files/dot.profile","hashes":[{"alg":"SHA-1","content":"1d979f382adb7b03d225cd4d3d3b64d0375c99eb"},{"alg":"SHA-256","content":"996f60727f48cbe1496fa20bffd5a434a190407db2cafc2c1bfdf54d3bfc0372"}]},{"bom-ref":"875619b4fafa262e","type":"file","name":"/usr/share/base-files/dot.profile.md5sums","hashes":[{"alg":"SHA-1","content":"e1da45f59b221ace5d2cc31ea5ddd6de7c83968f"},{"alg":"SHA-256","content":"70c70cffea32e8a79118d592f94727b24e9cf36c82ed8abca536d59224147b92"}]},{"bom-ref":"b9770ca454ec535b","type":"file","name":"/usr/share/base-files/info.dir","hashes":[{"alg":"SHA-1","content":"3551f8dfbf114c159f692d5e823099cdd53b16cf"},{"alg":"SHA-256","content":"c58a258cb9c410c29486aa8fa37f4e5b738bfeedc2b8e97be1cd6cff1df28459"}]},{"bom-ref":"63c9c6b9e3414d4f","type":"file","name":"/usr/share/base-files/motd","hashes":[{"alg":"SHA-1","content":"8b55aac644e9e6f2701805584cc391ff81d3ecec"},{"alg":"SHA-256","content":"a378977155fb42bb006496321cbe31f74cbda803c3f6ca590f30e76d1afad921"}]},{"bom-ref":"b0396e84284f3840","type":"file","name":"/usr/share/base-files/profile","hashes":[{"alg":"SHA-1","content":"069fd424829b7f75706af3fc9303a5fe2ece0bff"},{"alg":"SHA-256","content":"8fec28102e0c371e6f2ecb949b95c1ba802260766b18c2445882b082418428b9"}]},{"bom-ref":"71dcc053fad82738","type":"file","name":"/usr/share/base-files/profile.md5sums","hashes":[{"alg":"SHA-1","content":"f564180899b7b160eef0a52331b0ad44c5cc677c"},{"alg":"SHA-256","content":"c8a3222782665785755e9a58a61468f3aaf6e2bfd62101b7ac80c3b4f8984532"}]},{"bom-ref":"ae2c4df74484923b","type":"file","name":"/usr/share/base-files/staff-group-for-usr-local","hashes":[{"alg":"SHA-1","content":"e2bdd9c1f6bff4d437032d71154e32d0c74a2c09"},{"alg":"SHA-256","content":"24f49f765b6363ba8326121b46cabad2ac5c34532cc8322a645d60afe158c4f0"}]},{"bom-ref":"4fe40fbc0e42723c","type":"file","name":"/usr/share/common-licenses/Apache-2.0","hashes":[{"alg":"SHA-1","content":"2b8b815229aa8a61e483fb4ba0588b8b6c491890"},{"alg":"SHA-256","content":"cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30"}]},{"bom-ref":"a47fba0f5eb20554","type":"file","name":"/usr/share/common-licenses/Artistic","hashes":[{"alg":"SHA-1","content":"be0627fff2e8aef3d2a14d5d7486babc8a4873ba"},{"alg":"SHA-256","content":"b7fd9b73ea99602016a326e0b62e6646060d18febdd065ceca8bb482208c3d88"}]},{"bom-ref":"182f22847c7d4e61","type":"file","name":"/usr/share/common-licenses/BSD","hashes":[{"alg":"SHA-1","content":"095d1f504f6fd8add73a4e4964e37f260f332b6a"},{"alg":"SHA-256","content":"5d588eb3b157d52112afea935c88a7ff9efddc1e2d95a42c25d3b96ad9055008"}]},{"bom-ref":"fd9923521ddbe901","type":"file","name":"/usr/share/common-licenses/CC0-1.0","hashes":[{"alg":"SHA-1","content":"82da472f6d00dc5f0a651f33ebb320aa9c7b08d0"},{"alg":"SHA-256","content":"a2010f343487d3f7618affe54f789f5487602331c0a8d03f49e9a7c547cf0499"}]},{"bom-ref":"62e421449e582d9a","type":"file","name":"/usr/share/common-licenses/GFDL-1.2","hashes":[{"alg":"SHA-1","content":"b1d77f84fb2bc29ed2482774473b77764fdd8968"},{"alg":"SHA-256","content":"2652c22ba086f92e55ae4a9f9c890ad4766ffd7814a73d318e22a597edf857a4"}]},{"bom-ref":"728ab4b2891a2020","type":"file","name":"/usr/share/common-licenses/GFDL-1.3","hashes":[{"alg":"SHA-1","content":"715f995f11805ee85601834220c43b082f457ea3"},{"alg":"SHA-256","content":"110535522396708cea37c72a802c5e7e81391139f5f7985631c93ef242b206a4"}]},{"bom-ref":"8e569324d51d9bf4","type":"file","name":"/usr/share/common-licenses/GPL-1","hashes":[{"alg":"SHA-1","content":"7ef34515d063318cbf05464cb043757f54ea5520"},{"alg":"SHA-256","content":"49c007bafb5ad6dd9f9d4dae4d3ac0461975498150c05d684c551f0914ab486c"}]},{"bom-ref":"1c3f290f835ad6d0","type":"file","name":"/usr/share/common-licenses/GPL-2","hashes":[{"alg":"SHA-1","content":"5b48b90e1bafdbede57b01227ade30d51f4b2a3c"},{"alg":"SHA-256","content":"edaef632cbb643e4e7a221717a6c441a4c1a7c918e6e4d56debc3d8739b233f6"}]},{"bom-ref":"d543c9cf269978e8","type":"file","name":"/usr/share/common-licenses/GPL-3","hashes":[{"alg":"SHA-1","content":"31a3d460bb3c7d98845187c716a30db81c44b615"},{"alg":"SHA-256","content":"3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986"}]},{"bom-ref":"ff542199b74e0346","type":"file","name":"/usr/share/common-licenses/LGPL-2","hashes":[{"alg":"SHA-1","content":"23b6c0407391cbcd669f3be57101abf490f3f2dd"},{"alg":"SHA-256","content":"cc535c21133c895b56b374c8a1dc1eb948d99003ed2b47372069456b62f42b24"}]},{"bom-ref":"2dfdc7b293e35fad","type":"file","name":"/usr/share/common-licenses/LGPL-2.1","hashes":[{"alg":"SHA-1","content":"714f44a04b7807f4207e645d57aa73240e7e5d69"},{"alg":"SHA-256","content":"20e50fe7aae3e56378ebf0417d9de904f55a0e61e4df315333e632a4d3555d95"}]},{"bom-ref":"2093ed44a29036f7","type":"file","name":"/usr/share/common-licenses/LGPL-3","hashes":[{"alg":"SHA-1","content":"a8a12e6867d7ee39c21d9b11a984066099b6fb6b"},{"alg":"SHA-256","content":"e3a994d82e644b03a792a930f574002658412f62407f5fee083f2555c5f23118"}]},{"bom-ref":"cb164ccea6c834a4","type":"file","name":"/usr/share/common-licenses/MPL-1.1","hashes":[{"alg":"SHA-1","content":"ee93a1907dafcb7901b28f14ee05e49176ab7c87"},{"alg":"SHA-256","content":"f849fc26a7a99981611a3a370e83078deb617d12a45776d6c4cada4d338be469"}]},{"bom-ref":"50cde292034d9a9f","type":"file","name":"/usr/share/common-licenses/MPL-2.0","hashes":[{"alg":"SHA-1","content":"9744cedce099f727b327cd9913a1fdc58a7f5599"},{"alg":"SHA-256","content":"fab3dd6bdab226f1c08630b1dd917e11fcb4ec5e1e020e2c16f83a0a13863e85"}]},{"bom-ref":"53d7c642525bcba8","type":"file","name":"/usr/share/doc/base-files/NEWS.Debian.gz","hashes":[{"alg":"SHA-1","content":"a8cc23a89c0864b822229b6c26c66d9dcba59445"},{"alg":"SHA-256","content":"2d5dcea919681d92d097ef4f0556224d05fbda98d2ee73e1294121627f367cd8"}]},{"bom-ref":"1b41ab1f2f9905c6","type":"file","name":"/usr/share/doc/base-files/README","hashes":[{"alg":"SHA-1","content":"59c09bdd86c7ad0b8fba2c580a2ade685c40c25e"},{"alg":"SHA-256","content":"95552e3c597929b3c436a2de2225c3685f740484212e3f944726c3c937447aba"}]},{"bom-ref":"c7083f1c0f2c05a1","type":"file","name":"/usr/share/doc/base-files/README.FHS","hashes":[{"alg":"SHA-1","content":"6564fdf9f9f97e17460f5d55e4a6118077e1ae7e"},{"alg":"SHA-256","content":"099e7f4bdeb4ff34ee8d4ef7f158a21adbc59db46a354fd2051f6d1959e70fbc"}]},{"bom-ref":"9d257875a299ad55","type":"file","name":"/usr/share/doc/base-files/changelog.gz","hashes":[{"alg":"SHA-1","content":"5ca9ce32097409e1d8edb4a8dbf6763eb72ce229"},{"alg":"SHA-256","content":"42c66effcf1a179c3b23451729dc59bf3735e5c41dc59e0a228c588cb3587ec6"}]},{"bom-ref":"9ce78145f07537f3","type":"file","name":"/usr/share/doc/base-files/copyright","hashes":[{"alg":"SHA-1","content":"48a964e14ee8c52aa1529efc1040d358e384ecec"},{"alg":"SHA-256","content":"576859a65409c99cb1632c8b3de4b3deb26910800832beda76aca33d00720134"}]},{"bom-ref":"13dafd0f418fd5c4","type":"file","name":"/usr/share/lintian/overrides/base-files","hashes":[{"alg":"SHA-1","content":"87bc8764445c236005a958394fe768dc52c8c3a8"},{"alg":"SHA-256","content":"02120b9c96091120933c60555f951a206cfd75fd70d5aabe388202033eddd2fc"}]},{"bom-ref":"bc2dc78124d01b24","type":"file","name":"/var/lib/dpkg/status.d/base-files","hashes":[{"alg":"SHA-1","content":"390c7f804ac0d1bbfcd4bf4b614c6dc637d59d8d"},{"alg":"SHA-256","content":"8389ac1cafe7547811e35183094f34470b238605f41f673d53e9b0102d1c261b"}]},{"bom-ref":"b7ce0ef4c483e546","type":"file","name":"/var/lib/dpkg/status.d/base-files.md5sums","hashes":[{"alg":"SHA-1","content":"65e556a0d358e2f85fbd00a488580125367dc2fc"},{"alg":"SHA-256","content":"604c0593fe8573f900f603521224d55b0e4b99978f0197892eede80334fd16d1"}]},{"bom-ref":"522a23aa553979d9","type":"file","name":"/usr/share/doc/netbase/changelog.gz","hashes":[{"alg":"SHA-1","content":"82d77f071e25ad1d6744919eb61af82f0cc4474f"},{"alg":"SHA-256","content":"f12000167f242ed7c722889e37e3ab8eee5133ac0c6861fcbe3b51499027a294"}]},{"bom-ref":"fc8ad845573d9aa9","type":"file","name":"/usr/share/doc/netbase/copyright","hashes":[{"alg":"SHA-1","content":"ed888a1f31b753739cde9435ff17fbab81aef830"},{"alg":"SHA-256","content":"795b66147ea5ad692991caa7008ece551fb0fa88b9c53656223bd1518dc58ab2"}]},{"bom-ref":"eda4d4cf0900f9a5","type":"file","name":"/var/lib/dpkg/status.d/netbase","hashes":[{"alg":"SHA-1","content":"225bb01a2cd2e4237ade61611d7a41abdde5911f"},{"alg":"SHA-256","content":"1b44f4feb536c195a150c6b83001dfa016cb40f35ed1a5972248eddd8677a254"}]},{"bom-ref":"feeedbf2bec912ff","type":"file","name":"/var/lib/dpkg/status.d/netbase.md5sums","hashes":[{"alg":"SHA-1","content":"2dda7038760c2debb3e769a27d26dfd7f8ef8a14"},{"alg":"SHA-256","content":"ef0276ef8c499705809b3f72480078d8065ba28da0fb99e5c12bfedbe1e2f4cc"}]},{"bom-ref":"960ecd94748092ba","type":"file","name":"/usr/share/doc/tzdata/NEWS.Debian.gz","hashes":[{"alg":"SHA-1","content":"214a8f9bc8c950365011c2f9514ab9c0d8c713c1"},{"alg":"SHA-256","content":"70b372edce5f0ddf6436f1e8a95af03cb5e8002f25a565b4a6ad0eb3de24045f"}]},{"bom-ref":"9f56b91843fadf1a","type":"file","name":"/usr/share/doc/tzdata/README.Debian","hashes":[{"alg":"SHA-1","content":"f78a0e53523eb3cd58d2ba9a189350e6e2f95629"},{"alg":"SHA-256","content":"7b1f0b2ab552f13ad6cf8aef7e1f02fcd6cdc0a1be967db13f29d1285e4a4d87"}]},{"bom-ref":"6d61df55cdf6d2ce","type":"file","name":"/usr/share/doc/tzdata/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"8d2dd1b873150d8033fc9a4f6f868e50cd5cdece"},{"alg":"SHA-256","content":"c0c09cbe1c10a3c9e3d6e4b541a54ab9220252a1a9a222161ac0115d192774fe"}]},{"bom-ref":"f8502e9326bbf6de","type":"file","name":"/usr/share/doc/tzdata/changelog.gz","hashes":[{"alg":"SHA-1","content":"410db8f100d8aebe8b238e0e1632439de13aef1f"},{"alg":"SHA-256","content":"3da6f4ed54559c6f7d4d53ad239f470bed0ccb7e407eb6c9026b59114884f0e1"}]},{"bom-ref":"000d7c34ed64f1f8","type":"file","name":"/usr/share/doc/tzdata/copyright","hashes":[{"alg":"SHA-1","content":"aea2b97caa943cd88b5c1e03d1ac7055425f9aec"},{"alg":"SHA-256","content":"cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a"}]},{"bom-ref":"1ba8c24218d61635","type":"file","name":"/usr/share/lintian/overrides/tzdata","hashes":[{"alg":"SHA-1","content":"945bf790174b5c29a79045dcdbf8c4e4028ee9fe"},{"alg":"SHA-256","content":"8a5727695ce21f9c8ce9e111d20475268f426caf82b8a1b68e0775de5fbdf093"}]},{"bom-ref":"930363af98bc4a15","type":"file","name":"/usr/share/zoneinfo/Africa/Abidjan","hashes":[{"alg":"SHA-1","content":"5cc9b028b5bd2222200e20091a18868ea62c4f18"},{"alg":"SHA-256","content":"d2efac4e5f23d88c95d72c1db42807170f52f43dd98a205af5a92a91b9f2d997"}]},{"bom-ref":"5a927005ae47556c","type":"file","name":"/usr/share/zoneinfo/Africa/Accra","hashes":[{"alg":"SHA-1","content":"e51b14ae73c9ceba6b940ab31fc39566d5e392d7"},{"alg":"SHA-256","content":"7346770dc7af569c724fd1ce816d7149ffdff3e303420059faa1557cc959e115"}]},{"bom-ref":"b363c80dcf5dbb14","type":"file","name":"/usr/share/zoneinfo/Africa/Addis_Ababa","hashes":[{"alg":"SHA-1","content":"c3ec6c02b82cdb393255b31b88841e58585c7d6a"},{"alg":"SHA-256","content":"fc87a606ec2e31f061a7806193472eb39181dd3b1a8a3563f404992bc693a77b"}]},{"bom-ref":"61ed18def11e051e","type":"file","name":"/usr/share/zoneinfo/Africa/Algiers","hashes":[{"alg":"SHA-1","content":"edb95d3dc9238b5545f4f1d85d8bc879cdacdec8"},{"alg":"SHA-256","content":"bda1698cd542c0e6e76dfbbcdab390cdd26f37a9d5826a57a50d5aab37f3b2a6"}]},{"bom-ref":"bbd56c59e295b87f","type":"file","name":"/usr/share/zoneinfo/Africa/Asmara","hashes":[{"alg":"SHA-1","content":"da26c35de6001f6ce436ed72481197975da7ef62"},{"alg":"SHA-256","content":"65af76431c1dd400e1ada6687e648e0fba1f80138acccdf7987cd3e1cd01b199"}]},{"bom-ref":"31cf91a0b78f3472","type":"file","name":"/usr/share/zoneinfo/Africa/Bamako","hashes":[{"alg":"SHA-1","content":"d7015e94ea3ea52f57df9fde2988ddbfffd785c8"},{"alg":"SHA-256","content":"a212ea76ad201e8a956438bd008cd333ead81dac3ebcd2df4fcddc5b0f59165e"}]},{"bom-ref":"4c0373f72ef2ff61","type":"file","name":"/usr/share/zoneinfo/Africa/Bangui","hashes":[{"alg":"SHA-1","content":"95e4df1f88558c46071352063438fd7efd740d24"},{"alg":"SHA-256","content":"a72ce103a74d3432bfd869efa0276a8eb4f83398f93d94e922f793b9ef7beaef"}]},{"bom-ref":"7dc92d204f9526c5","type":"file","name":"/usr/share/zoneinfo/Africa/Banjul","hashes":[{"alg":"SHA-1","content":"8a756377248320782695b94c651f9f38435957c1"},{"alg":"SHA-256","content":"f511d8d1785320b80330d02f1d8ff3a6619f71f09539a73daba97f91cf630f5e"}]},{"bom-ref":"1218c605df61c46a","type":"file","name":"/usr/share/zoneinfo/Africa/Bissau","hashes":[{"alg":"SHA-1","content":"adca16c6998258a9ccabcc8d4bcfe883a8d848f5"},{"alg":"SHA-256","content":"223bb10cfe846620c716f97f6c74ba34deec751c4b297965a28042f36f69a1a9"}]},{"bom-ref":"6d955bbbd7c78917","type":"file","name":"/usr/share/zoneinfo/Africa/Blantyre","hashes":[{"alg":"SHA-1","content":"e86f9fd7e39b1cfb6823edcb39dd1164df936bdf"},{"alg":"SHA-256","content":"de96b327c8198764a41bc035efd36b63075f618e7db479ebf451226a54d4bd42"}]},{"bom-ref":"04fc66ff95ee8f9f","type":"file","name":"/usr/share/zoneinfo/Africa/Brazzaville","hashes":[{"alg":"SHA-1","content":"a15d91431af650e7aafdedf68d45ec31d86f1e0e"},{"alg":"SHA-256","content":"4680eb49f8aa6b167969f6e27221d859792357cefe0285eb03f60725db664d57"}]},{"bom-ref":"e94fb8d13d9d3a61","type":"file","name":"/usr/share/zoneinfo/Africa/Bujumbura","hashes":[{"alg":"SHA-1","content":"eccd392d987e133182ce336005a4714e9e5fad6a"},{"alg":"SHA-256","content":"c880a655aba172cecd4ae8eddd5f8d4cdde07686f00223e4adcc086dad320e7e"}]},{"bom-ref":"ab8f2fcc06b89158","type":"file","name":"/usr/share/zoneinfo/Africa/Cairo","hashes":[{"alg":"SHA-1","content":"428e1f5f708eb4c131f29185bd602223027b3eac"},{"alg":"SHA-256","content":"2dfb7e1822d085a4899bd56a526b041681c84b55617daee91499fd1990a989fb"}]},{"bom-ref":"49e2b13b851b37f0","type":"file","name":"/usr/share/zoneinfo/Africa/Casablanca","hashes":[{"alg":"SHA-1","content":"8299b0d609b0f62013f4320df4b92583c21071fc"},{"alg":"SHA-256","content":"e11a956f0fc5dd9b9ca29202da2bc027c583c23e7044e0c007aeed0697577200"}]},{"bom-ref":"04a00c1b9d30aa12","type":"file","name":"/usr/share/zoneinfo/Africa/Ceuta","hashes":[{"alg":"SHA-1","content":"029ce64badb36722c9e2191f3ce858c514aabbc1"},{"alg":"SHA-256","content":"0b0fb6fe714319b37c5aa22c56971abb2668a165fc8f72a6c763e70b47c7badf"}]},{"bom-ref":"6ead8d9af9a49fbc","type":"file","name":"/usr/share/zoneinfo/Africa/Conakry","hashes":[{"alg":"SHA-1","content":"d9eef5864a0db2b82c647282aae34c3152de54a1"},{"alg":"SHA-256","content":"93b62b3d76c1d4a477d84d232c576f9b9f21e428a42635db94eaca2c59b7b2ec"}]},{"bom-ref":"8286349c50aecce8","type":"file","name":"/usr/share/zoneinfo/Africa/Dakar","hashes":[{"alg":"SHA-1","content":"cc33bc67d266dc2d49dd08b413605d6e974eecb3"},{"alg":"SHA-256","content":"40733be9374ab5a9bd38be2be2664e538f97a265bbe7d898a6167d3800cb228b"}]},{"bom-ref":"156743ea3e029aef","type":"file","name":"/usr/share/zoneinfo/Africa/Dar_es_Salaam","hashes":[{"alg":"SHA-1","content":"3ece541c6f4d5b8c6407a3ea0c83ac812970912a"},{"alg":"SHA-256","content":"4fc4f312a5287024c7f8473d753b6d1bcde396138d778adf5fce60dddcc9b53f"}]},{"bom-ref":"96013442d50b23fe","type":"file","name":"/usr/share/zoneinfo/Africa/Djibouti","hashes":[{"alg":"SHA-1","content":"7f985b7ced38006f4cad1c92ebfd87f35f5c9e1f"},{"alg":"SHA-256","content":"b92bac77f2dd9edd59397c0315e116fd0dc4fbc1ae6cd266687a2822877959f1"}]},{"bom-ref":"7edacc1f330cabb1","type":"file","name":"/usr/share/zoneinfo/Africa/Douala","hashes":[{"alg":"SHA-1","content":"d0225f31e516a27e2c3e3bb4f1a92995c95a6bee"},{"alg":"SHA-256","content":"3b014a5d1cbee2524ae309a895cbe0fe47da87c12016fe8cc2562ac79906590b"}]},{"bom-ref":"ae5ce8356bb3edc1","type":"file","name":"/usr/share/zoneinfo/Africa/El_Aaiun","hashes":[{"alg":"SHA-1","content":"30b58415b36d7646e0a3a3c2b04738f778bafa09"},{"alg":"SHA-256","content":"516082a902c9c5df2ab13630f36933f56d6cbb05b94d1827670df5b03583cf6d"}]},{"bom-ref":"f4360374575d5edd","type":"file","name":"/usr/share/zoneinfo/Africa/Freetown","hashes":[{"alg":"SHA-1","content":"7687166d1782cd3455d5552766a083f9729b4688"},{"alg":"SHA-256","content":"77d05b2ed586a9d22f6e4a791ec0634256dc919faac6279bdb7db388a9c1f67b"}]},{"bom-ref":"3c42877fae3a0c6a","type":"file","name":"/usr/share/zoneinfo/Africa/Gaborone","hashes":[{"alg":"SHA-1","content":"867be7affa61e2f3f2c7b18896ad5b897d3f2ddc"},{"alg":"SHA-256","content":"3ca27c9dd26ccfd118a270eaee39195154cd63f15700d14de650bf7493cec628"}]},{"bom-ref":"fadbbdbe0bc5e9c2","type":"file","name":"/usr/share/zoneinfo/Africa/Harare","hashes":[{"alg":"SHA-1","content":"c5447a74c8348dd55bce2544becd5e94db494814"},{"alg":"SHA-256","content":"22720486f3e24b8e4b4f746afd2e0020f22d3a6c055b79579457e3efc2373ee5"}]},{"bom-ref":"2786fc6cef2b60fa","type":"file","name":"/usr/share/zoneinfo/Africa/Johannesburg","hashes":[{"alg":"SHA-1","content":"65c0d4ab314cb72b8d8c768e3d0c3218848b61f1"},{"alg":"SHA-256","content":"6c1bcc752668e77585a308ae8543bd0bccd8e813865626e809bf94f3fe3d977e"}]},{"bom-ref":"af574014161bf1c9","type":"file","name":"/usr/share/zoneinfo/Africa/Juba","hashes":[{"alg":"SHA-1","content":"48173811f532aabc17b3798c40fad46a3df0e543"},{"alg":"SHA-256","content":"5159c8a843c9c072d3302fabe6a6501cdbfda29a1856c29dabeb5aff95d4c3f4"}]},{"bom-ref":"cfdfb1cf2c4146bd","type":"file","name":"/usr/share/zoneinfo/Africa/Kampala","hashes":[{"alg":"SHA-1","content":"ff253770d5916b2b1e96aa2585c07e47e1b2f4f1"},{"alg":"SHA-256","content":"5e23eb14b36a74840f4490a272ffc7b1f271a5829a349015f878ddb2bf34d9aa"}]},{"bom-ref":"462fd5036800fb45","type":"file","name":"/usr/share/zoneinfo/Africa/Khartoum","hashes":[{"alg":"SHA-1","content":"7cde30d5acfd99119ef22162c1f8bcafb86eaf03"},{"alg":"SHA-256","content":"318583a09dc070222d65d029a1e3a0b565830f1aaec13a27e6fe533863fbd3ea"}]},{"bom-ref":"5cfdfaa737430528","type":"file","name":"/usr/share/zoneinfo/Africa/Kigali","hashes":[{"alg":"SHA-1","content":"648695b8be4b148b52f35dcfc294529efcbb7b06"},{"alg":"SHA-256","content":"8cd9c1bb40c4452e61520a9dfc9a409a67109bad6f41f413c786998d00cbc9cf"}]},{"bom-ref":"0832911c93cb2032","type":"file","name":"/usr/share/zoneinfo/Africa/Kinshasa","hashes":[{"alg":"SHA-1","content":"3724d5c3dd6dfcaafb01d9cebc8a087cbd2a39b8"},{"alg":"SHA-256","content":"7ae6d0e96d674a4c232cb01faf61a954340d84ea92a71a63ebd060e1c67d8c08"}]},{"bom-ref":"365b0eca13e56c6c","type":"file","name":"/usr/share/zoneinfo/Africa/Lagos","hashes":[{"alg":"SHA-1","content":"30ba925b4670235915dddfa1dd824dd9d7295eac"},{"alg":"SHA-256","content":"cffeb0282ccbd7fba0e493ff8677a1e5a6dd5197885042e437f95a773f844846"}]},{"bom-ref":"9ad3ef65b1721e2d","type":"file","name":"/usr/share/zoneinfo/Africa/Libreville","hashes":[{"alg":"SHA-1","content":"2b9ba63e019dacff0390829874008955a6ade749"},{"alg":"SHA-256","content":"44575c7c30a1281ec495adb7a404888ed4d7e41c0234f13767ae7b1a1458be73"}]},{"bom-ref":"af628ff420a9c6cb","type":"file","name":"/usr/share/zoneinfo/Africa/Lome","hashes":[{"alg":"SHA-1","content":"68eb6f1e3a7769a5929611e8784299f588d33d3b"},{"alg":"SHA-256","content":"5b031c585ed04311c7c7c14b2ee23ba49cb22ded8ddee8adffc9f14de68d2ba8"}]},{"bom-ref":"bccca30a036452ce","type":"file","name":"/usr/share/zoneinfo/Africa/Luanda","hashes":[{"alg":"SHA-1","content":"c137669c8f29e290a40f2283ea8da6410ccf09b8"},{"alg":"SHA-256","content":"c87aa48fc0f0043c6d101335acc8c7ab4ffc2707c14a8f5b1d6d1abf3bdec69a"}]},{"bom-ref":"2b1127fce9c76f38","type":"file","name":"/usr/share/zoneinfo/Africa/Lubumbashi","hashes":[{"alg":"SHA-1","content":"c2519e82a4e4a1f7cc483375f8a0be9677b2c9c7"},{"alg":"SHA-256","content":"ed509eccb6e51d5cd529388c57692a641a5b9313233897a1bfabdb612a415c04"}]},{"bom-ref":"01ad221fc97af4ca","type":"file","name":"/usr/share/zoneinfo/Africa/Lusaka","hashes":[{"alg":"SHA-1","content":"5f2aba3bc50e1b5fca46c49942dba5580dbaaa95"},{"alg":"SHA-256","content":"fac7c446a8dcddffc75a7dca5c762444f74df9f83c70cc505b138db85242dea4"}]},{"bom-ref":"b73a4ce7a3eb375d","type":"file","name":"/usr/share/zoneinfo/Africa/Malabo","hashes":[{"alg":"SHA-1","content":"1dbc54024377111937bd6e111ae482445d3b935f"},{"alg":"SHA-256","content":"8d17cee7263820e7a14499ba087cd792f4f4b358bb4c874f24c42537ce975704"}]},{"bom-ref":"db9bd6192d15ce49","type":"file","name":"/usr/share/zoneinfo/Africa/Maputo","hashes":[{"alg":"SHA-1","content":"b0ff96d087e4c86adb55b851c0d3800dfbb05e9a"},{"alg":"SHA-256","content":"444ed3a710414bc6bf43eb27e591da49d3be3db153449a6a0c9473f7e39fdbcb"}]},{"bom-ref":"fc36bc45d1e90fa5","type":"file","name":"/usr/share/zoneinfo/Africa/Maseru","hashes":[{"alg":"SHA-1","content":"ec8714963f44f02c100bafb8d8def8cf5b3a177b"},{"alg":"SHA-256","content":"be0b75733f8dfc6ff35bd69c3d0f94abc72e1d6897c81f53d0ba7da1d72227b6"}]},{"bom-ref":"2e524ff6eab33662","type":"file","name":"/usr/share/zoneinfo/Africa/Mbabane","hashes":[{"alg":"SHA-1","content":"c426025717e52a7a341db2a5d8f03d2734480b6c"},{"alg":"SHA-256","content":"b0b8a11ab3cc1a97295b0bcde33b1129de82616b2f83987687926e100d3adf91"}]},{"bom-ref":"3027a76bdfd1630c","type":"file","name":"/usr/share/zoneinfo/Africa/Mogadishu","hashes":[{"alg":"SHA-1","content":"abe168cbcc5083974ad6c71c9353384a8e0e4340"},{"alg":"SHA-256","content":"cf5c8032414fd86bdafddb2cdfd6813730f7ec4a08cb92b22a5f1403490fa7e2"}]},{"bom-ref":"35d7102b50403ed9","type":"file","name":"/usr/share/zoneinfo/Africa/Monrovia","hashes":[{"alg":"SHA-1","content":"81b045ed68f73a8806c5f2104b573b0479c19bd0"},{"alg":"SHA-256","content":"f95b095b9714e0a76f7e061a415bf895cbb399a28854531de369cee915ce05d5"}]},{"bom-ref":"ff962043cfed976e","type":"file","name":"/usr/share/zoneinfo/Africa/Nairobi","hashes":[{"alg":"SHA-1","content":"289d1fb5a419107bc1d23a84a9e06ad3f9ee8403"},{"alg":"SHA-256","content":"c89b2e253a8926a6cecf7eff34e4bfcdb7fe24daff22d84718c30deec0ea4968"}]},{"bom-ref":"0d519021656e438f","type":"file","name":"/usr/share/zoneinfo/Africa/Ndjamena","hashes":[{"alg":"SHA-1","content":"035072509f30da9a5a27b48910ae180f9c6b4b15"},{"alg":"SHA-256","content":"f13dc0d199bd1a3d01be6eab77cf2ddc60172a229d1947c7948a98964608d0a3"}]},{"bom-ref":"5cbb88297ad3dbb6","type":"file","name":"/usr/share/zoneinfo/Africa/Niamey","hashes":[{"alg":"SHA-1","content":"a6200d9483bd6a84a86eeae28d1e87cf48360cf0"},{"alg":"SHA-256","content":"78a49cb93c76e4f036933c36ace93e46ea1d7ccf58c7b086dd8f1c5eb441a400"}]},{"bom-ref":"4e3aa097249fe6eb","type":"file","name":"/usr/share/zoneinfo/Africa/Nouakchott","hashes":[{"alg":"SHA-1","content":"8d1be259ee1a362657c8cf41a697666f3f527497"},{"alg":"SHA-256","content":"7fde47dac81d3d51ed1bf257f8834faa4da20d4ba1d85b824f86bf2cd79ac801"}]},{"bom-ref":"3ae30f6e45505a4a","type":"file","name":"/usr/share/zoneinfo/Africa/Ouagadougou","hashes":[{"alg":"SHA-1","content":"a9307b0a57ad23ee7866849d5d088b09a398cd29"},{"alg":"SHA-256","content":"fe2dc2c6ab2ef71c41bb3542802a3c18a2d657befa39f3e61321c12677d16caf"}]},{"bom-ref":"f8f4ec48e2454571","type":"file","name":"/usr/share/zoneinfo/Africa/Porto-Novo","hashes":[{"alg":"SHA-1","content":"334499ff26ab816d7e15aef1606d3aaaa034b86b"},{"alg":"SHA-256","content":"30a8a8c8c9337afff37986d7c36afe814c8b56cb75e958dd89bca1ef6dff731d"}]},{"bom-ref":"446bc400ebfd57ad","type":"file","name":"/usr/share/zoneinfo/Africa/Sao_Tome","hashes":[{"alg":"SHA-1","content":"7d2cac076d99bc5e38ba27b67113317ad496d3b1"},{"alg":"SHA-256","content":"31d8f1a50dbaf2ecc9ed9c7566ba0552d454c2ab09e85ff263701857d157c352"}]},{"bom-ref":"83526b59152d9a82","type":"file","name":"/usr/share/zoneinfo/Africa/Tripoli","hashes":[{"alg":"SHA-1","content":"fabf4010ab003c26947df60b5e359781670caa70"},{"alg":"SHA-256","content":"5b5769b460fbd13ee9a46a28d1f733150783888a749ee96d2cd3d5eba3300767"}]},{"bom-ref":"da41d69a7df5e77d","type":"file","name":"/usr/share/zoneinfo/Africa/Tunis","hashes":[{"alg":"SHA-1","content":"c44e2d3c1e351f1004ab69ea559feb8ccdd65f64"},{"alg":"SHA-256","content":"38554c10ce1e613d84cf46deba1114093488a5c165756c6c576b84a1364850d2"}]},{"bom-ref":"efc273427bb8b58d","type":"file","name":"/usr/share/zoneinfo/Africa/Windhoek","hashes":[{"alg":"SHA-1","content":"f7cab3d13d3213a13658ce399f74cc878cf8953d"},{"alg":"SHA-256","content":"c6e86fb9dacc1f86a59d59a8b924d023c60bf05fc76e0b05d8443b0192b3b87b"}]},{"bom-ref":"36173dd37a983041","type":"file","name":"/usr/share/zoneinfo/America/Adak","hashes":[{"alg":"SHA-1","content":"be58a7c839146fa675eeb6dad748c08d0647542c"},{"alg":"SHA-256","content":"201d4387025000a6e13c9f631cb7fccd6e4369dec7224052f9d86feb81353a53"}]},{"bom-ref":"0a3d75e6777da23d","type":"file","name":"/usr/share/zoneinfo/America/Anchorage","hashes":[{"alg":"SHA-1","content":"275760f2eb22160c578089566f68042a5f4d2f57"},{"alg":"SHA-256","content":"a190353523d2d8159dca66299c21c53bc0656154be965e4a2e0d84cfd09b113b"}]},{"bom-ref":"f15f1c9faa133d5a","type":"file","name":"/usr/share/zoneinfo/America/Anguilla","hashes":[{"alg":"SHA-1","content":"b56405c5331a039220756566b1420ecd5fe74926"},{"alg":"SHA-256","content":"434fbfb6b97c6d6ef4a036030bb901a49c74b7a4df8b6e0a1dcfd3cedf8a1fc1"}]},{"bom-ref":"756fb2218fcc70e7","type":"file","name":"/usr/share/zoneinfo/America/Antigua","hashes":[{"alg":"SHA-1","content":"cf3bc75f6436818554f2f960bc375e1d66936d80"},{"alg":"SHA-256","content":"d63c0dde8af51ad22539678225d3f58c760f0f8971dc5e43783644853087b14e"}]},{"bom-ref":"b18b2faca873687f","type":"file","name":"/usr/share/zoneinfo/America/Araguaina","hashes":[{"alg":"SHA-1","content":"c2cafe3c9cc0e76ef48bd039886653c87ef1af50"},{"alg":"SHA-256","content":"1babfdc18159f040785907c8b2a45b6e288a7766f6ee3ed9b797458c16f3c76a"}]},{"bom-ref":"b9c078d124499d36","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Buenos_Aires","hashes":[{"alg":"SHA-1","content":"b6abf99d18117ac9f9f85da86569a11b6e57aa32"},{"alg":"SHA-256","content":"26653c941c26cb6f6047a3a67b2b6f15d311c7a39b24a9d834798bc8c9975f63"}]},{"bom-ref":"cec92e6aba3c1ce8","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Catamarca","hashes":[{"alg":"SHA-1","content":"8c0ab8c1684ecbb2b92ed2d37273ee9eced805d7"},{"alg":"SHA-256","content":"b8c0895d719898d1121d5be3e5160167431cace744d788709b5ee5db9320456d"}]},{"bom-ref":"a4d886a4203cf900","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Cordoba","hashes":[{"alg":"SHA-1","content":"839495859f8144c95a8900b3f966957c4a6fa589"},{"alg":"SHA-256","content":"ba788d8a184c1e7af85cae16a7088f527ac04f460f9afcea07a7f48512ed5ef6"}]},{"bom-ref":"e5e78fc1995ac529","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Jujuy","hashes":[{"alg":"SHA-1","content":"68cac9239d1e2b3dc9f558e7ac9b9c88e1f28756"},{"alg":"SHA-256","content":"3c69807a1ca90b18f45c27a70925aaca50c83db28b2b40e5af024aff6e03e7dd"}]},{"bom-ref":"cad2b9a2d9949757","type":"file","name":"/usr/share/zoneinfo/America/Argentina/La_Rioja","hashes":[{"alg":"SHA-1","content":"153ec9a9448ab7546772546ec75da4d6822544df"},{"alg":"SHA-256","content":"526e97a155e1b2beb669dd665ae79b7ba358d191dab81751f6d3060e0a823878"}]},{"bom-ref":"708e7e640084b522","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Mendoza","hashes":[{"alg":"SHA-1","content":"88785394dcc03b8944e17b2f11314df6bfd29de5"},{"alg":"SHA-256","content":"c5c395b6f47255814053dd32d90630a72421a4c2f2029efe171be4bb89209747"}]},{"bom-ref":"ed6a1adeb250a6f0","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Rio_Gallegos","hashes":[{"alg":"SHA-1","content":"3ebbc01799ce451c6a335bd9b2eb47c2b01fed19"},{"alg":"SHA-256","content":"17d64a478a3c80b1d7ed006e22331aa4621d9b3271a6ac1ba2e3e067932a0e96"}]},{"bom-ref":"03dc15384b42e8d1","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Salta","hashes":[{"alg":"SHA-1","content":"f1d5d7fc65c024eefe057a7d13c74486877a0d0a"},{"alg":"SHA-256","content":"875298ac33486a9bc3918862d4f681f160f5a9639ee2f8618032560c2195e237"}]},{"bom-ref":"4966dabf3f39d6a6","type":"file","name":"/usr/share/zoneinfo/America/Argentina/San_Juan","hashes":[{"alg":"SHA-1","content":"249fa2bdee94870c9b91fba646178f6a2c7bef04"},{"alg":"SHA-256","content":"008d8696d03cd263cdce11f163272e13021b3b500d5f222a05064ca63a8aa9d4"}]},{"bom-ref":"5d96f0208ee68056","type":"file","name":"/usr/share/zoneinfo/America/Argentina/San_Luis","hashes":[{"alg":"SHA-1","content":"c26fd1f57a712d60e6a799aa5afde207f208c05c"},{"alg":"SHA-256","content":"d88b4645c2d52b6c31f0cc89b076c8041780914e01f8c379c7567137267b5091"}]},{"bom-ref":"30ad3dc182f5935c","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Tucuman","hashes":[{"alg":"SHA-1","content":"764ae9765ecd997f840efc9f361cd0a29427d986"},{"alg":"SHA-256","content":"b703be16ab4d255f173b3593bc543ec6711c582a035076378295481b43336dff"}]},{"bom-ref":"4233433a95e49368","type":"file","name":"/usr/share/zoneinfo/America/Argentina/Ushuaia","hashes":[{"alg":"SHA-1","content":"df4328f70c770b73f3b708f9c1bf7b163f7a4839"},{"alg":"SHA-256","content":"03a21ba55958f4820fa1228c15147d0cc44e7705d44837361ec012b9e3929eaa"}]},{"bom-ref":"535cbcc46ce1af47","type":"file","name":"/usr/share/zoneinfo/America/Aruba","hashes":[{"alg":"SHA-1","content":"7617563c6fe86e6b8c1c2ac36fe9fb001f362453"},{"alg":"SHA-256","content":"e05ef0b458a717e7c83d8bc16c50e3a74a719fb5f3725b1c4fe7569a1b07fcfc"}]},{"bom-ref":"2a8601cc74ab0a4e","type":"file","name":"/usr/share/zoneinfo/America/Asuncion","hashes":[{"alg":"SHA-1","content":"05cea6a80b81602d4443860bfa93ada62b4bc76c"},{"alg":"SHA-256","content":"f727c68843615cd81ddbfd311d5b05fa12de264192a91b3ecc3f4ef78e4a2567"}]},{"bom-ref":"98bf3b10589f76e1","type":"file","name":"/usr/share/zoneinfo/America/Atikokan","hashes":[{"alg":"SHA-1","content":"c29c262e36f69ff18874e0df8f46c7af5508c1ff"},{"alg":"SHA-256","content":"e1af781ad3c751d43edac773f568a7b0a9fd57f4223385e6163e3c1533cc7920"}]},{"bom-ref":"bb6e4064dee0db08","type":"file","name":"/usr/share/zoneinfo/America/Bahia","hashes":[{"alg":"SHA-1","content":"685af2a0b61116c06655987805a46c466c7106bf"},{"alg":"SHA-256","content":"aa2edd03a1687c384bc553267762fc6cadc779a42773d5fe8e28a3c327e1b378"}]},{"bom-ref":"78d0ee1fd408de72","type":"file","name":"/usr/share/zoneinfo/America/Bahia_Banderas","hashes":[{"alg":"SHA-1","content":"33e0f3d5c7eace9077bacfa4f2b6e1e4b374fdb5"},{"alg":"SHA-256","content":"32fad7189e4bcda1ce7a0b89ab1b33c63c4c85569f1956e4fa88d711ceff6042"}]},{"bom-ref":"cbbbf1b3e7b781d5","type":"file","name":"/usr/share/zoneinfo/America/Barbados","hashes":[{"alg":"SHA-1","content":"5904a49c6c0ce8f10178fe13174ed9c964a8312a"},{"alg":"SHA-256","content":"8a66be42bae16b3bb841fbeed99d3e7ba13e193898927b8906ee9cdb2546f4b1"}]},{"bom-ref":"531f9881dfc53268","type":"file","name":"/usr/share/zoneinfo/America/Belem","hashes":[{"alg":"SHA-1","content":"b30f11c517b9a6bc6c4e551c81b42f5c1395c2e1"},{"alg":"SHA-256","content":"69931482d1437473484a9ab241161b992d88043f81012dc26899e1bbaa272c26"}]},{"bom-ref":"c41264e73529cb1d","type":"file","name":"/usr/share/zoneinfo/America/Belize","hashes":[{"alg":"SHA-1","content":"4728ee967fe9745f4b614e5b511da1c08bd3689c"},{"alg":"SHA-256","content":"a647cb63629f3dc85b7896b5a56717996030a7866546fc562d57b35e7adb930b"}]},{"bom-ref":"cc46986c8218f0c3","type":"file","name":"/usr/share/zoneinfo/America/Blanc-Sablon","hashes":[{"alg":"SHA-1","content":"247313b6f6c2e1ad65a0a3006d951e0a436ae57d"},{"alg":"SHA-256","content":"b5537964f9883b7bdcdff6b2a3083aa9bbe385e838389b43153f72f08b96df7e"}]},{"bom-ref":"bdf481aa3df157e2","type":"file","name":"/usr/share/zoneinfo/America/Boa_Vista","hashes":[{"alg":"SHA-1","content":"26f298366ec94e19abd9bf582760eaa0ed4f34d3"},{"alg":"SHA-256","content":"74cb5a1b5d641a526b8092601961036590269cefc77d3dcbe17f2923bd8b2c56"}]},{"bom-ref":"1cd9402eab5d8113","type":"file","name":"/usr/share/zoneinfo/America/Bogota","hashes":[{"alg":"SHA-1","content":"41393f1eb00480acda3e4b7e3c179b6d07891450"},{"alg":"SHA-256","content":"6757ab9d9646431ba513c28558761670cdd25758e7dbf404735434389cc745a9"}]},{"bom-ref":"6e90dad068718794","type":"file","name":"/usr/share/zoneinfo/America/Boise","hashes":[{"alg":"SHA-1","content":"e0608b89be80aaa6660eee5964203ad760b0659a"},{"alg":"SHA-256","content":"ec742c34f262521790805cf99152ef4e77f9c615c061a78036a0ec9312b3d95b"}]},{"bom-ref":"ab8f9bf6ec29e6b2","type":"file","name":"/usr/share/zoneinfo/America/Cambridge_Bay","hashes":[{"alg":"SHA-1","content":"dcfc3c07c7366b75916af1dccd366fd1077e5b18"},{"alg":"SHA-256","content":"ff8c51957dd6755a4472aa13ea6c83ecd7930979e7f4e624fe21f4d3a6f050ba"}]},{"bom-ref":"ce6b15872c7b301f","type":"file","name":"/usr/share/zoneinfo/America/Campo_Grande","hashes":[{"alg":"SHA-1","content":"8eda418d84bf314b30e7092f5332e4aaf395b57f"},{"alg":"SHA-256","content":"8083625e0e62d9ee9187635ba366c5aa13c024be05e1c02a1a705a9e45d30d7c"}]},{"bom-ref":"ee590185b8644ab3","type":"file","name":"/usr/share/zoneinfo/America/Cancun","hashes":[{"alg":"SHA-1","content":"cf74e0c9c8ba2365819123eaddd6817606064eaf"},{"alg":"SHA-256","content":"11d574370d968cced59e3147a2ae63b126cbbae13b78fd4e13be2eb44c96246e"}]},{"bom-ref":"473ec27ded4b5d00","type":"file","name":"/usr/share/zoneinfo/America/Caracas","hashes":[{"alg":"SHA-1","content":"a2c3809eed6fd4ead7c2e161460b7c2245e3064c"},{"alg":"SHA-256","content":"99434c15d0f364b6affde3c0d68701766a950627ab91e12ccd3205a4d0a6e49d"}]},{"bom-ref":"c99a431e12b5fad9","type":"file","name":"/usr/share/zoneinfo/America/Cayenne","hashes":[{"alg":"SHA-1","content":"2c881b996db473d14f43e61ca76810b5dfc2069c"},{"alg":"SHA-256","content":"e24ec8bf5c285f86ada9e3caadcbcc403d9593d4e699aeeb5bf016fd1eb6a427"}]},{"bom-ref":"86e6a23b458ac94e","type":"file","name":"/usr/share/zoneinfo/America/Cayman","hashes":[{"alg":"SHA-1","content":"19d734b426acc9a6693adf04984ed7997f331e9b"},{"alg":"SHA-256","content":"8a2ab69b8045ea3681c799a08704335f1111f7373e21f4ee08e8ae84eb408fc9"}]},{"bom-ref":"ca7ca0ffeb959a32","type":"file","name":"/usr/share/zoneinfo/America/Chicago","hashes":[{"alg":"SHA-1","content":"0a037f985f6fa0b392c95c7afb247f16a3925a7e"},{"alg":"SHA-256","content":"feba326ebe88eac20017a718748c46c68469a1e7f5e7716dcb8f1d43a6e6f686"}]},{"bom-ref":"3e54f49e0c3aadaa","type":"file","name":"/usr/share/zoneinfo/America/Chihuahua","hashes":[{"alg":"SHA-1","content":"e0c67cc4ed5fe366fb39d9e55b02082254606e47"},{"alg":"SHA-256","content":"dcd8336de760f00cc0ab1b1b4121b48d5471f8bc58970d62de4c7e63397ed887"}]},{"bom-ref":"506f71f2d0e6f6b5","type":"file","name":"/usr/share/zoneinfo/America/Ciudad_Juarez","hashes":[{"alg":"SHA-1","content":"fe11c20a18788db4260afcaa5d952c219f4777d2"},{"alg":"SHA-256","content":"8abe1bdbb0e216b84bd07e1f650f769c46be041a0f7cb588cf7a61537ef77601"}]},{"bom-ref":"5548cf230167b730","type":"file","name":"/usr/share/zoneinfo/America/Costa_Rica","hashes":[{"alg":"SHA-1","content":"2d1fd66de0198ddfcc1958fbaaaaba9cdb7b1d8f"},{"alg":"SHA-256","content":"ef8ad86ba96b80893296cf4f907a3c482625f683aa8ae1b94bb31676725e94fe"}]},{"bom-ref":"1a7ddc62e933c1c8","type":"file","name":"/usr/share/zoneinfo/America/Coyhaique","hashes":[{"alg":"SHA-1","content":"5ab8432e1c16003678c884db36dbd93ce3def42e"},{"alg":"SHA-256","content":"6de65753a2f0e63c765a9ddd3519058a87d71a66b674ce83b2abc94fd0921dd7"}]},{"bom-ref":"1812b123548d199c","type":"file","name":"/usr/share/zoneinfo/America/Creston","hashes":[{"alg":"SHA-1","content":"4f0aa95a64b82c5cd06dc73afb3fffa37e145ec3"},{"alg":"SHA-256","content":"74d39aef5420436779ba1edc97ec5999efbcbb79cc47d189ecf4a4b562033914"}]},{"bom-ref":"c43b09a433730507","type":"file","name":"/usr/share/zoneinfo/America/Cuiaba","hashes":[{"alg":"SHA-1","content":"ed31161916635d36d8a24e97bb43c83cecb02319"},{"alg":"SHA-256","content":"19126a92145736c3947208d975d43144825d4586b0f6933f60b59bba7f3c7648"}]},{"bom-ref":"68c52c15ae467f8a","type":"file","name":"/usr/share/zoneinfo/America/Curacao","hashes":[{"alg":"SHA-1","content":"88581cc94985e8f6692d43d148c1c793fb220360"},{"alg":"SHA-256","content":"646108ca5019e62cbfac806c5d112d1ff65f5912242c8f5d4233ff108ca7dec6"}]},{"bom-ref":"209dbea6fab77bde","type":"file","name":"/usr/share/zoneinfo/America/Danmarkshavn","hashes":[{"alg":"SHA-1","content":"3bfae70ff7ffa8b928ba4bf0bcb5452d09ec0407"},{"alg":"SHA-256","content":"6116407d40a856d68bd4bf8c60c60c1f5c3239a5509df528fe0167bcc5d2bb3c"}]},{"bom-ref":"65d0f0b05dfa61d6","type":"file","name":"/usr/share/zoneinfo/America/Dawson","hashes":[{"alg":"SHA-1","content":"dc241cb66d50821505cc7708d43ee9b1e77a36dc"},{"alg":"SHA-256","content":"ac01e1cae32eca37ff7b20364811bbe8c4417ff7e3ff18b9140ba2595420261c"}]},{"bom-ref":"8367754582412733","type":"file","name":"/usr/share/zoneinfo/America/Dawson_Creek","hashes":[{"alg":"SHA-1","content":"dd98b887a02f1ae2785d5d6fe7d77e91ec5aae83"},{"alg":"SHA-256","content":"6895c2c8fe23de0804e3018237e2eb4bd8690ffe73587cd04de4802935843d43"}]},{"bom-ref":"9dc4fe73bc5b0516","type":"file","name":"/usr/share/zoneinfo/America/Denver","hashes":[{"alg":"SHA-1","content":"faa7d6cf4178d032d8ba8a4d77eac0fd47f8a718"},{"alg":"SHA-256","content":"32e819c00a43b3c348f539d700d425504f20b8d068c16418d26fa9b693e775c9"}]},{"bom-ref":"e22fc10f7cf996f2","type":"file","name":"/usr/share/zoneinfo/America/Detroit","hashes":[{"alg":"SHA-1","content":"6597537b399eab91a66e32bb4edae466de96a146"},{"alg":"SHA-256","content":"85e733f32a98d828f907ad46de02d9740559bd180af65d0ff7473f80dfae0f98"}]},{"bom-ref":"6e0c1bd5054dec2c","type":"file","name":"/usr/share/zoneinfo/America/Dominica","hashes":[{"alg":"SHA-1","content":"bcff62237fd34abc18ba24c9dd10608e6852826b"},{"alg":"SHA-256","content":"7e7db465be161ee7c531100137bf880f3acee56b1874e20661be218ae48f0a8c"}]},{"bom-ref":"4df22654fd4a4da3","type":"file","name":"/usr/share/zoneinfo/America/Edmonton","hashes":[{"alg":"SHA-1","content":"4f441f7a62122e43a963260550efb1a1ff3100c2"},{"alg":"SHA-256","content":"f939087dcdd096f6827f4a7c08e678dd8d47441025fa7011522f8975778ad6f1"}]},{"bom-ref":"ebfaea3901a38447","type":"file","name":"/usr/share/zoneinfo/America/Eirunepe","hashes":[{"alg":"SHA-1","content":"a8e1bda8dd087d157ed049568d57dcb7ef5e126b"},{"alg":"SHA-256","content":"8f9784c648c56aab42f83f172b4ac6ce817dc8481b4a54db3ea546f562a111af"}]},{"bom-ref":"4fb6e2d911e08faf","type":"file","name":"/usr/share/zoneinfo/America/El_Salvador","hashes":[{"alg":"SHA-1","content":"45b4b952081502968b04b36e7cae24b987e9f532"},{"alg":"SHA-256","content":"82f18df0b923fac1a6dbfaecf0e52300c7f5a0cb4aa765deb3a51f593d16aa05"}]},{"bom-ref":"6d627cf8074c3ea3","type":"file","name":"/usr/share/zoneinfo/America/Fort_Nelson","hashes":[{"alg":"SHA-1","content":"a453ec818cd948cc2492666443d4e39637ed7040"},{"alg":"SHA-256","content":"7ab7ce0ebdc3ad2a73eb990074eed3b367466d9c6f75d10fea0c78057df2d89d"}]},{"bom-ref":"3b1ccc6f347255d9","type":"file","name":"/usr/share/zoneinfo/America/Fortaleza","hashes":[{"alg":"SHA-1","content":"538e62d07963e59bf9884b70bcbde2f9eb2c865e"},{"alg":"SHA-256","content":"ae3892074ab5701b8c0ce33da2b5bfbb07b950e2c1c1395f8c5a2dc0e61ed665"}]},{"bom-ref":"ebb7a107f0e731db","type":"file","name":"/usr/share/zoneinfo/America/Glace_Bay","hashes":[{"alg":"SHA-1","content":"40ba9843662a853c1d3643395db1a75c1164951f"},{"alg":"SHA-256","content":"1bc0c62c609aa47fda60217f3a168be50a277fb14e02000fc1e94ee61b425817"}]},{"bom-ref":"f0fc95a9b112edea","type":"file","name":"/usr/share/zoneinfo/America/Goose_Bay","hashes":[{"alg":"SHA-1","content":"21d4df7695accb7b5164e41e28452f9655cd91a0"},{"alg":"SHA-256","content":"26068bb9e8214af5f683bdb914e7c882982fb2ac591b29163a1019586a506516"}]},{"bom-ref":"4edb9a7d1982ee52","type":"file","name":"/usr/share/zoneinfo/America/Grand_Turk","hashes":[{"alg":"SHA-1","content":"48735366abbf3760087cd1533f24415136763745"},{"alg":"SHA-256","content":"e1838510f2bad017a5dbf7c2b18eaf499c5470c24a8e22adc8e7ff4349211305"}]},{"bom-ref":"e8f9c45b82466087","type":"file","name":"/usr/share/zoneinfo/America/Grenada","hashes":[{"alg":"SHA-1","content":"22c51e5eee62238f0bb0194178ac827af426ebbb"},{"alg":"SHA-256","content":"c9885c70cded8b2588d77c3834a38a148e0836ccfa5c5e7e2bc25f6033aae7bb"}]},{"bom-ref":"3f2fb5bf332f7012","type":"file","name":"/usr/share/zoneinfo/America/Guadeloupe","hashes":[{"alg":"SHA-1","content":"7736231d77c559a048fefe32162aab135afbe815"},{"alg":"SHA-256","content":"add9720f2ed382210e7a64178c261615160071b7d576af02633317deae9cc702"}]},{"bom-ref":"153c598b1d2e8c25","type":"file","name":"/usr/share/zoneinfo/America/Guatemala","hashes":[{"alg":"SHA-1","content":"e0d50c845873aa466c9a2b020326d57af4d39b3d"},{"alg":"SHA-256","content":"76e81480277a418e76c87907b943f88d15b3a39c78dfd2108a06980af105e3a4"}]},{"bom-ref":"f8f4fefd90e3172c","type":"file","name":"/usr/share/zoneinfo/America/Guayaquil","hashes":[{"alg":"SHA-1","content":"104819aea721a86e274484ddbc58c331bc404226"},{"alg":"SHA-256","content":"8f652e228fb846048e95335fbbbee6859f76c1a35378a152be6a157a6268a13d"}]},{"bom-ref":"8b147e0e2401032f","type":"file","name":"/usr/share/zoneinfo/America/Guyana","hashes":[{"alg":"SHA-1","content":"7623e796f8074a16a88a78e36445c26c52174474"},{"alg":"SHA-256","content":"4746cebc24430bc49121ec6686c76e3dd1db6d13f02361af883f68b44c6252b9"}]},{"bom-ref":"843bd114c527e9ea","type":"file","name":"/usr/share/zoneinfo/America/Halifax","hashes":[{"alg":"SHA-1","content":"93568fd7e148b3f61fca5f36f8ae0a5b3b107fe3"},{"alg":"SHA-256","content":"4d9a667393f05a82df4df42843f6f7535ec113689529278d911d07a3c99b4e7f"}]},{"bom-ref":"355c917f0124db62","type":"file","name":"/usr/share/zoneinfo/America/Havana","hashes":[{"alg":"SHA-1","content":"51c1a7a700e4028481e506e58faf22f9677c5e29"},{"alg":"SHA-256","content":"1d441e02e281b04908e522d98eaca75c808e51539a8e42b3287e6bf8ebf939d7"}]},{"bom-ref":"a4b7b2d70f6cec42","type":"file","name":"/usr/share/zoneinfo/America/Hermosillo","hashes":[{"alg":"SHA-1","content":"e055ab758b61beef7d8a4ee5a6b38d789c5f6b2c"},{"alg":"SHA-256","content":"8b160a7acb4b992ee05a86e4f4aaba16d2d9a35caa6d601cb6b1542a5bb372dc"}]},{"bom-ref":"551d756add609192","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Indianapolis","hashes":[{"alg":"SHA-1","content":"ad1a26bddb9304a620b2c6f7ec9f3a5226622906"},{"alg":"SHA-256","content":"90d2b2f4a8fd202b226187c209b020833300edec5ff86a463ccc685e8707532c"}]},{"bom-ref":"44c6a71f8d06af13","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Knox","hashes":[{"alg":"SHA-1","content":"41fdfe70a9789d427dc4be468f559a97ee9fcf54"},{"alg":"SHA-256","content":"0acbd9e412b0daa55abf7c7f17c094f6d68974393b8d7e3509fb2a9acea35d5f"}]},{"bom-ref":"a307dd03b5a40301","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Marengo","hashes":[{"alg":"SHA-1","content":"0530ef4b3396d7031cc5e4ff82dc42c10f2f89a1"},{"alg":"SHA-256","content":"7f7b50fa580c49403b9ef9fae295e12ad24bee65b319a8e809e81ae4c10949b2"}]},{"bom-ref":"2a94455cc1fc7488","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Petersburg","hashes":[{"alg":"SHA-1","content":"570cef94f900163bce34b3f85b9ea5b36df92146"},{"alg":"SHA-256","content":"03cf0e1ee334460de230b1e32a05eafddda36427554b2b5442cfbd5b429c1724"}]},{"bom-ref":"c8824ce73fff3354","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Tell_City","hashes":[{"alg":"SHA-1","content":"20594c1309a07d4691ff9af0a77782b5e2d95c61"},{"alg":"SHA-256","content":"e1d5aa02bf58d815df2f8a40424fbcd5cde01a5d9c35d1d7383effc09861867f"}]},{"bom-ref":"725c56fa669873b5","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Vevay","hashes":[{"alg":"SHA-1","content":"3959be4d9e86c9c1a7f8febc46554584b2a7ceff"},{"alg":"SHA-256","content":"1fb551d86fbfb03fc2e519b83f78358910b515608f8389b43060f73f53cbcec9"}]},{"bom-ref":"5ab05c1699fcf585","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Vincennes","hashes":[{"alg":"SHA-1","content":"f9a3d65b42b008c5a85c73934fcf94eaeac4b931"},{"alg":"SHA-256","content":"eb6980c53ec03c509aa3281f96713374ea5ef9fb96d7239b23a9ba11451c4bb0"}]},{"bom-ref":"a9823318d6871ab1","type":"file","name":"/usr/share/zoneinfo/America/Indiana/Winamac","hashes":[{"alg":"SHA-1","content":"5d169fbd02f628dd6fdafbbab7a7e4a6da54fd21"},{"alg":"SHA-256","content":"69918cda347c087f411d252aed7ca08b078377a768ad72cf5e0db8e97b1b47ab"}]},{"bom-ref":"65bd13f6a8f6f0c4","type":"file","name":"/usr/share/zoneinfo/America/Inuvik","hashes":[{"alg":"SHA-1","content":"1291de8f6d914ee264f0b27a55278ff12a00ad7a"},{"alg":"SHA-256","content":"e89fa66a90e7ae4f40d4bb6cc28137e2da92cbfb9f79d70404dc62c64ac48c8a"}]},{"bom-ref":"d7ee277468fd5320","type":"file","name":"/usr/share/zoneinfo/America/Iqaluit","hashes":[{"alg":"SHA-1","content":"210193fdb9be1a88f5d245ddf3dce819469be233"},{"alg":"SHA-256","content":"7de3a7c40374374afe335aa592b03824cc9ac28734b6a69ed2288108f0c0b389"}]},{"bom-ref":"4eadf10db13e5247","type":"file","name":"/usr/share/zoneinfo/America/Jamaica","hashes":[{"alg":"SHA-1","content":"77453a2772c127d0b213f8580ff7890cbf7b4929"},{"alg":"SHA-256","content":"c256a089e50f45fe7e6de89efa1ed0b0e35b3738c6b26f2f32cf2e7f6f29c36f"}]},{"bom-ref":"608184fbceab5c9c","type":"file","name":"/usr/share/zoneinfo/America/Juneau","hashes":[{"alg":"SHA-1","content":"740e88dcd737d076404c386330bd379d55ee8281"},{"alg":"SHA-256","content":"93b8716f46864677e713e0c18b72e472303344fc807f4fc7c34bd515f8c679bd"}]},{"bom-ref":"da5c6680e9e18ff5","type":"file","name":"/usr/share/zoneinfo/America/Kentucky/Louisville","hashes":[{"alg":"SHA-1","content":"a63a322042aab6a2583de2f636a5eb15f71eae33"},{"alg":"SHA-256","content":"b4fd3bdb157f9ffbc8423c71709efb0067868fac8bd4a3e99f77f089db3d8355"}]},{"bom-ref":"4ea48c69b9899918","type":"file","name":"/usr/share/zoneinfo/America/Kentucky/Monticello","hashes":[{"alg":"SHA-1","content":"ad63bf4d1228ab308b2ed6758c21fbebb56395db"},{"alg":"SHA-256","content":"2ed7720a8f3906b5d0b3aae51fad589bef0aa961c7e8fc003a30f44318487733"}]},{"bom-ref":"f55d328c39643999","type":"file","name":"/usr/share/zoneinfo/America/La_Paz","hashes":[{"alg":"SHA-1","content":"2313587ef9525a48ce8d50135a928966361a8899"},{"alg":"SHA-256","content":"86a7c3f0b407ba97598638b67bddfff69390013f91ee6bb3ce33f49f27db1576"}]},{"bom-ref":"c29e9bcedc595736","type":"file","name":"/usr/share/zoneinfo/America/Lima","hashes":[{"alg":"SHA-1","content":"d6387a81464dc5da3d084b18bfee6cf550e0ada6"},{"alg":"SHA-256","content":"1c78139c3527099ce26ef2f432b1bcab23aebe3998630ddedd1e556e7c4c66cf"}]},{"bom-ref":"839b70ed779f2495","type":"file","name":"/usr/share/zoneinfo/America/Los_Angeles","hashes":[{"alg":"SHA-1","content":"a4f1faebf0f0d032290ef87bb9973c2ff8f84074"},{"alg":"SHA-256","content":"68977bb9ad6d186fefc6c7abd36010a66e30008dcb2d376087a41c49861e7268"}]},{"bom-ref":"bd5ebc0d0f438841","type":"file","name":"/usr/share/zoneinfo/America/Maceio","hashes":[{"alg":"SHA-1","content":"77bd91d30eba1c3e5faee2b171d504cee244bf07"},{"alg":"SHA-256","content":"dd1e439527b7da44039a8495216a5cca4da8eeaa21afeae58b0a834861483324"}]},{"bom-ref":"1d0dc4965deff892","type":"file","name":"/usr/share/zoneinfo/America/Managua","hashes":[{"alg":"SHA-1","content":"566a887308e8e16a9cebb62f3d4124b42c331674"},{"alg":"SHA-256","content":"c41cc5d350079f61367c3f10772f831c57b7e94aa878da4a3df0a176e04a59d9"}]},{"bom-ref":"a8b3e6175f174ae2","type":"file","name":"/usr/share/zoneinfo/America/Manaus","hashes":[{"alg":"SHA-1","content":"acca1895b15d0dfc4ef7c52f73676d65494939e5"},{"alg":"SHA-256","content":"17a44b38e78e8bd972999890990f6947cb45a4f67a120b8d74f7ce73a0615c31"}]},{"bom-ref":"21b92819c777f0ec","type":"file","name":"/usr/share/zoneinfo/America/Martinique","hashes":[{"alg":"SHA-1","content":"caf0e4c5fdae59d1b6c1278ad7ac84bf03bcb0a9"},{"alg":"SHA-256","content":"7ccb3cd24394d9816f0b47fdcb67a37bdec9780b536016a65eb9e54ee9cd2f34"}]},{"bom-ref":"5d95197b4bae4f52","type":"file","name":"/usr/share/zoneinfo/America/Matamoros","hashes":[{"alg":"SHA-1","content":"638e4541bddbb0164c8d62590ff1bb97f88b822e"},{"alg":"SHA-256","content":"7eaf8fa9d999ad0f7c52c1661c0f62be3059bf91840514ceb8b4390aee5a8d6f"}]},{"bom-ref":"1be58b3fcc692f24","type":"file","name":"/usr/share/zoneinfo/America/Mazatlan","hashes":[{"alg":"SHA-1","content":"44c28415e815f8e2b53604195f85da07b04d829d"},{"alg":"SHA-256","content":"0561f636a54f0353ecc842cf37fd8117c2a596bb26424aa0d5eba3b10be79f1f"}]},{"bom-ref":"f7d338d86d046742","type":"file","name":"/usr/share/zoneinfo/America/Menominee","hashes":[{"alg":"SHA-1","content":"88fd8d108c020a3294eae6c83ad187cf0b01a602"},{"alg":"SHA-256","content":"02bbfd58b6df84d72946c5231c353be7b044770969d3c1addf4022c46de0674e"}]},{"bom-ref":"5adc79bf069fcf8a","type":"file","name":"/usr/share/zoneinfo/America/Merida","hashes":[{"alg":"SHA-1","content":"8e07f8356362c517ef41035a0394a59363cebfc0"},{"alg":"SHA-256","content":"4953441c26b38e899fb67b8f5416b2148f84f884345a696e1df4e91cfd21dddd"}]},{"bom-ref":"1d848f968f74ae5a","type":"file","name":"/usr/share/zoneinfo/America/Metlakatla","hashes":[{"alg":"SHA-1","content":"9f327158b98652913af4d66c5257cfc014340536"},{"alg":"SHA-256","content":"b709a27864d563657e53c9c5c6abf1edab18bfc1958de59d2edace23b500a552"}]},{"bom-ref":"ee6261f45c15d672","type":"file","name":"/usr/share/zoneinfo/America/Mexico_City","hashes":[{"alg":"SHA-1","content":"f46bb76507fbd52204eef47c12c9320bd7945af7"},{"alg":"SHA-256","content":"528836f85316cf6a35da347ab0af6f7a625a98b7a8e8e105310477b34c53c647"}]},{"bom-ref":"e4d7d8ce81a151ed","type":"file","name":"/usr/share/zoneinfo/America/Miquelon","hashes":[{"alg":"SHA-1","content":"68f776f49ab4d606a095a3903856b79739072329"},{"alg":"SHA-256","content":"979b7104961ef474d166520b71b48bfc734362b8d46f4a2e79c372ed012483d7"}]},{"bom-ref":"bef2c96b36ff40d0","type":"file","name":"/usr/share/zoneinfo/America/Moncton","hashes":[{"alg":"SHA-1","content":"c08e5d548c3bb971f1a1236c397ded4f7227d769"},{"alg":"SHA-256","content":"5a6bfe6e4f5a28a7165b33a9735505bbaec739fc1a224d969a1dcb82a19cb72b"}]},{"bom-ref":"d0c7b659294df278","type":"file","name":"/usr/share/zoneinfo/America/Monterrey","hashes":[{"alg":"SHA-1","content":"ceaf09cf6075be4ff98b5716e65d197c9f302864"},{"alg":"SHA-256","content":"622c5311226e6dfe990545f2ea0df6840336811e065d73ea394e2dbf42f7906d"}]},{"bom-ref":"acf61381946fbf7a","type":"file","name":"/usr/share/zoneinfo/America/Montevideo","hashes":[{"alg":"SHA-1","content":"f82542b80df1b6921fc9a3f20de1a7c37bcb6ffd"},{"alg":"SHA-256","content":"7501011389a364fb724632972ba67e6cc1c9745aa9c21233c431f8c74e2b2989"}]},{"bom-ref":"60a61c76fa8c498c","type":"file","name":"/usr/share/zoneinfo/America/Montserrat","hashes":[{"alg":"SHA-1","content":"70066c0c822c4e6d490b0bf3e4dea4e129ae99fc"},{"alg":"SHA-256","content":"c5048b50bdc8f0e2e1ca4643fea2eda2375c64df32c6d4ca7d36bf23e5165df7"}]},{"bom-ref":"15035baf740d53c4","type":"file","name":"/usr/share/zoneinfo/America/Nassau","hashes":[{"alg":"SHA-1","content":"c592b2705f6cae2e3a848e4d840fb8020bb0e777"},{"alg":"SHA-256","content":"304a41fcbd71dd49f0c2a8cec0da83bc27e04183ce9e10768dec0bc223b15788"}]},{"bom-ref":"f559b29e533bcd3d","type":"file","name":"/usr/share/zoneinfo/America/New_York","hashes":[{"alg":"SHA-1","content":"bc9337182ee4bad790b527f56bd3d2130691d693"},{"alg":"SHA-256","content":"e9ed07d7bee0c76a9d442d091ef1f01668fee7c4f26014c0a868b19fe6c18a95"}]},{"bom-ref":"8a64060deb1e2fac","type":"file","name":"/usr/share/zoneinfo/America/Nome","hashes":[{"alg":"SHA-1","content":"1e6cf03e0c8fbb7a079090cf164e73291681bafc"},{"alg":"SHA-256","content":"da2cccdfe3fe3ea27dcdae8c761cc57ccbcf14dabb1a29baf6d02f1303de636b"}]},{"bom-ref":"313a118a6e4c3e6d","type":"file","name":"/usr/share/zoneinfo/America/Noronha","hashes":[{"alg":"SHA-1","content":"5ddd3077848063388b0850642d94b3451c8ab835"},{"alg":"SHA-256","content":"7de7910228d0a8aca5660a9ef389ca86c14bc9c4f9cc8066ee62c8bddc86c38c"}]},{"bom-ref":"a093f879480b4665","type":"file","name":"/usr/share/zoneinfo/America/North_Dakota/Beulah","hashes":[{"alg":"SHA-1","content":"99080962e50069d5e6a206bff8931a67b5afebe9"},{"alg":"SHA-256","content":"aad81ba8dbbc3370241c5da7fbfa12a6cd69613e12c607256e490f29b5da047b"}]},{"bom-ref":"aab403436572fdb3","type":"file","name":"/usr/share/zoneinfo/America/North_Dakota/Center","hashes":[{"alg":"SHA-1","content":"16ee5640265f404a2a64cbb48547b834b780cf71"},{"alg":"SHA-256","content":"f5959b2bd60a92ab942f2054152dcbaff89dc5bb7b57bcb85b810ed0a9f6d2cc"}]},{"bom-ref":"b340834ea8d28085","type":"file","name":"/usr/share/zoneinfo/America/North_Dakota/New_Salem","hashes":[{"alg":"SHA-1","content":"6d1defaee32cee5fdaaa1405460d9ee4e4dceb55"},{"alg":"SHA-256","content":"0c7fdbb107ee5272b6a1b75bd3a2a08ac3b85cbaa1b75d815ddae052c659bde8"}]},{"bom-ref":"5d7b0313f72a7608","type":"file","name":"/usr/share/zoneinfo/America/Nuuk","hashes":[{"alg":"SHA-1","content":"9e682b8e92ffa5ee7844cca6378ccbc0c8b8a1eb"},{"alg":"SHA-256","content":"2865eb30df98918a550a02dda5c7f030543bec4b11006b235021b7c8052f55fc"}]},{"bom-ref":"7b82ee6bf9d0d59a","type":"file","name":"/usr/share/zoneinfo/America/Ojinaga","hashes":[{"alg":"SHA-1","content":"346cae590643f608e6c31870966e576f2c194936"},{"alg":"SHA-256","content":"6f7f10ffb55d902673695c1bece5ee75d8a1240cd428f4d3a97726a419b59ed1"}]},{"bom-ref":"685a52869b30986c","type":"file","name":"/usr/share/zoneinfo/America/Panama","hashes":[{"alg":"SHA-1","content":"a94fbc2d567e41723f03629b6c9a864260108a17"},{"alg":"SHA-256","content":"91ac80fe976931c490d058c8ce8b5d71ffa6d4961f6ca13ea9c153f0b0bccea0"}]},{"bom-ref":"090a86b491340bb6","type":"file","name":"/usr/share/zoneinfo/America/Paramaribo","hashes":[{"alg":"SHA-1","content":"76aabf80ff59002355d79fb03c282dcf4894500c"},{"alg":"SHA-256","content":"67b519bcd96077ea845078c43d85c890b35382331c0b393d11f51412653277b3"}]},{"bom-ref":"b79cc15050325171","type":"file","name":"/usr/share/zoneinfo/America/Phoenix","hashes":[{"alg":"SHA-1","content":"a3f54df3a017c38626f04bd9576a0a11663303fd"},{"alg":"SHA-256","content":"8a5973d2c62e2cbf2520f2b44e4a2ee9d2f455c93f0f45bfdeb4533af1584664"}]},{"bom-ref":"b853926907a33f12","type":"file","name":"/usr/share/zoneinfo/America/Port-au-Prince","hashes":[{"alg":"SHA-1","content":"9901445a7bf4a993111d087ef812890dd44a67be"},{"alg":"SHA-256","content":"d3d64025de083a23297dda54b85d54e3847f851b7a06fa409055ce9d83bdc8e3"}]},{"bom-ref":"7d2bb1d447fdff61","type":"file","name":"/usr/share/zoneinfo/America/Port_of_Spain","hashes":[{"alg":"SHA-1","content":"8ee1b0d3b895b4195e0b580b67c0b2ee1010d29d"},{"alg":"SHA-256","content":"d7b813d9e39530528917fb32a700cfb9d905c061228eb45f90153e68adc52fad"}]},{"bom-ref":"f2e3d335f46942eb","type":"file","name":"/usr/share/zoneinfo/America/Porto_Velho","hashes":[{"alg":"SHA-1","content":"323d3a00b7012a11e609c1889d84d3b809d8e1ef"},{"alg":"SHA-256","content":"b92315da16568fe572061141c02f79d3071385f3778eae8a9727044a64132ce0"}]},{"bom-ref":"f6d856116fc016dd","type":"file","name":"/usr/share/zoneinfo/America/Puerto_Rico","hashes":[{"alg":"SHA-1","content":"fcf8be5296496a5dd3a7a97ed331b0bb5c861450"},{"alg":"SHA-256","content":"8491e557ff801a8306516b8ca5946ff5f2e6821af31477eb47d7d191cc5a6497"}]},{"bom-ref":"6a286f16867eadfd","type":"file","name":"/usr/share/zoneinfo/America/Punta_Arenas","hashes":[{"alg":"SHA-1","content":"8be47376d5c6a7545b1f5ce7d643163e2738ada8"},{"alg":"SHA-256","content":"b51e6e21fd77e7501616aaea36d9979e14169ca444989699a8a0736964553134"}]},{"bom-ref":"d368ce86f1eafdc1","type":"file","name":"/usr/share/zoneinfo/America/Rankin_Inlet","hashes":[{"alg":"SHA-1","content":"f517c389db4ac89bc79cbf8ee5736f0cad7bc7b9"},{"alg":"SHA-256","content":"9d782a8cbdced815747a6f9793ca9545165bfd7d324261c4eaf9924af23d2b37"}]},{"bom-ref":"c445b2ed2b1920db","type":"file","name":"/usr/share/zoneinfo/America/Recife","hashes":[{"alg":"SHA-1","content":"729dde5b8256b5811d81587ffe94556868d8025f"},{"alg":"SHA-256","content":"6c9fc7134f89162a38fa8c29674a4b3bc5376a2d1f886bbc4072f40dec4b88b7"}]},{"bom-ref":"9ddf27cb135bbeae","type":"file","name":"/usr/share/zoneinfo/America/Regina","hashes":[{"alg":"SHA-1","content":"ecd6b0c718b65c0c90e8097943a899c0b0cb60d8"},{"alg":"SHA-256","content":"ca3a93d3ca476c80987bcdc7f099ad68306f085a91bfb4dfcdedd8f31b97ba4c"}]},{"bom-ref":"ce711e338e835e25","type":"file","name":"/usr/share/zoneinfo/America/Resolute","hashes":[{"alg":"SHA-1","content":"c01bda981211a1387a2c18d7a57165e72da83d95"},{"alg":"SHA-256","content":"0a7314d9d048fbadefb7cf89d10d51a29c7ef1bf694422e386faf270c21e7468"}]},{"bom-ref":"345103040408b149","type":"file","name":"/usr/share/zoneinfo/America/Rio_Branco","hashes":[{"alg":"SHA-1","content":"4b4db121d39b9cbede3e78f144ee0bffa743e8ab"},{"alg":"SHA-256","content":"d20a49525e3a8506e9d0fe978f54b4340ac859e02bcaeb835e3b2576f0791871"}]},{"bom-ref":"c06b10612d2b5810","type":"file","name":"/usr/share/zoneinfo/America/Santarem","hashes":[{"alg":"SHA-1","content":"0d3a12f5ca9f1958391ce2538e90113366d9008d"},{"alg":"SHA-256","content":"56664ff52e693ee705c72a80395f74f049965d066f8028162e6949253525d0b1"}]},{"bom-ref":"5fe4e4396c81740b","type":"file","name":"/usr/share/zoneinfo/America/Santiago","hashes":[{"alg":"SHA-1","content":"f8b4089fb3afeabd825e427ca3b9d2a6e934ef12"},{"alg":"SHA-256","content":"d020f0d77742314b28aae32ea68260ba99330143610cae84d2557151103ba2c0"}]},{"bom-ref":"1f268d3956e339cf","type":"file","name":"/usr/share/zoneinfo/America/Santo_Domingo","hashes":[{"alg":"SHA-1","content":"a135300f73df9c427db37aa9ba29e25f83463211"},{"alg":"SHA-256","content":"0cab5a123f1f43ddb26c84d3594e019b5eb44bda732665156e36964677a7c54e"}]},{"bom-ref":"31899b902c9da9d9","type":"file","name":"/usr/share/zoneinfo/America/Sao_Paulo","hashes":[{"alg":"SHA-1","content":"d83862964e9a4ba52d147a824f6f28cd4fbf666b"},{"alg":"SHA-256","content":"04c06744ee3fe078ef3b8b779e38eb30666bf993e67a092fcaf2fc28f63a64ce"}]},{"bom-ref":"9e36caa8546e4795","type":"file","name":"/usr/share/zoneinfo/America/Scoresbysund","hashes":[{"alg":"SHA-1","content":"1fb005c62e9186e375c0565c3539d7f739c31e8a"},{"alg":"SHA-256","content":"2beaa488c08216039ef1c70f300040fa50e373dbdbeb0a65b8138255f88174b2"}]},{"bom-ref":"855d8c0ab52f166a","type":"file","name":"/usr/share/zoneinfo/America/Sitka","hashes":[{"alg":"SHA-1","content":"7bb2fd466acd0399f44f56c2ed9a2a0353fb2f82"},{"alg":"SHA-256","content":"6a24bb164dfb859a7367d56478941e17e06a4cb442d503930a03002704fc5310"}]},{"bom-ref":"2fa992b58490d511","type":"file","name":"/usr/share/zoneinfo/America/St_Johns","hashes":[{"alg":"SHA-1","content":"4336075a81adbebeb26ca297ce309dc595b86463"},{"alg":"SHA-256","content":"af5fb5eee2afdbb799dc9b15930fc32d941ba3ac2f8eeb95bbb0b6a43b263a02"}]},{"bom-ref":"dfeb4559381d7b86","type":"file","name":"/usr/share/zoneinfo/America/St_Kitts","hashes":[{"alg":"SHA-1","content":"8650003c5445719bf811a5a41fafe67841258986"},{"alg":"SHA-256","content":"afc412c84fb12ae86faca5a8e0878cbf91c32dd3c4b7485ead82d4533d0059f6"}]},{"bom-ref":"f76423ea4855b315","type":"file","name":"/usr/share/zoneinfo/America/St_Lucia","hashes":[{"alg":"SHA-1","content":"a91eac7701417067bf7f6b8d635a59741125e983"},{"alg":"SHA-256","content":"236ae9122a1b4b1cc9f8e7a2f59dcf167198b208d5cc058bea4642d60a2d94de"}]},{"bom-ref":"faab045603cc17bc","type":"file","name":"/usr/share/zoneinfo/America/St_Thomas","hashes":[{"alg":"SHA-1","content":"16bd3f2ce6deb13ec0c1f136a0d91dcddf081a21"},{"alg":"SHA-256","content":"5b1f38380e227d9d815400286437a6fbdd8ef838e724683db5f4655a6f351553"}]},{"bom-ref":"0aa82cba8e886b34","type":"file","name":"/usr/share/zoneinfo/America/St_Vincent","hashes":[{"alg":"SHA-1","content":"9f3030aa1b5fe2189230828dad9070a7142318b5"},{"alg":"SHA-256","content":"3549bddd8952b7e47d6a5d04d501d522521e3380e3b04e864cf13b661f5ffdef"}]},{"bom-ref":"26f9ab63b3461b4e","type":"file","name":"/usr/share/zoneinfo/America/Swift_Current","hashes":[{"alg":"SHA-1","content":"e607b1ddf124e4061e437365e16404633bbdc4bd"},{"alg":"SHA-256","content":"45128e17bbd90bc56f6310fc3cfe09d7f8543dac8a04fecbbbcd1abd191f3c36"}]},{"bom-ref":"be15044e21be3ac5","type":"file","name":"/usr/share/zoneinfo/America/Tegucigalpa","hashes":[{"alg":"SHA-1","content":"fe5537f0f326f4513aaf98ba68268b0798e72e0b"},{"alg":"SHA-256","content":"1333b3ee7b5396b78cabaf4967609c01bf0fb3df15f5b50c378f34b693c8cb0e"}]},{"bom-ref":"ad9b2e279b8990a1","type":"file","name":"/usr/share/zoneinfo/America/Thule","hashes":[{"alg":"SHA-1","content":"c4e304073f4f90890439ca6205d60e20d2495f16"},{"alg":"SHA-256","content":"f31b8f45a654f1180ee440aa1581d89a71e2a1cf35b0139a8a5915bbc634da2f"}]},{"bom-ref":"246e32d4a4ba7d86","type":"file","name":"/usr/share/zoneinfo/America/Tijuana","hashes":[{"alg":"SHA-1","content":"6ad63533ea183b2895759a9702ea96f0fff98759"},{"alg":"SHA-256","content":"8c2e7b321726e6345912da396796bdb3672bfc4bd1a91c65ee58b38e004d4ca5"}]},{"bom-ref":"27b8c4c3d15c9ab0","type":"file","name":"/usr/share/zoneinfo/America/Toronto","hashes":[{"alg":"SHA-1","content":"a6d038ecff7126ee19ebb08a40d157c9a79964cd"},{"alg":"SHA-256","content":"a587a1a1607439f7bac283e1815f2bdbafb9649a453d18e06c2e44e6996d888f"}]},{"bom-ref":"cba9aa58397b8374","type":"file","name":"/usr/share/zoneinfo/America/Tortola","hashes":[{"alg":"SHA-1","content":"b54b1d241ae640d6266bd323de6b255f9b4870f4"},{"alg":"SHA-256","content":"2630eeb7e722f660ef4df14899437b18d2cbc092f66304427c0538257a08bda2"}]},{"bom-ref":"687e254d35f2fd83","type":"file","name":"/usr/share/zoneinfo/America/Vancouver","hashes":[{"alg":"SHA-1","content":"b42a450523068cc1434b8774082525d8dc2a8e4f"},{"alg":"SHA-256","content":"b249ca1f48d23d66a6f831df337e6a5ecf0d6a6edde5316591423d4a0c6bcb28"}]},{"bom-ref":"fc1b551c82dd9e5a","type":"file","name":"/usr/share/zoneinfo/America/Whitehorse","hashes":[{"alg":"SHA-1","content":"4a8f00d33b5ca551a16cedc68cc8528fb4c111d8"},{"alg":"SHA-256","content":"4eb47a3c29d81be9920a504ca21aa53fcaa76215cc52cc9d23e2feaae5c5c723"}]},{"bom-ref":"b23fbe0585ba0c8d","type":"file","name":"/usr/share/zoneinfo/America/Winnipeg","hashes":[{"alg":"SHA-1","content":"684c62d80d16a9256c9123074466cc5d0288daea"},{"alg":"SHA-256","content":"ecffbf610ae77857289fb40a4933a79221a3129a450e7dd9e3c309d6aabc541c"}]},{"bom-ref":"4228581bf8cd9829","type":"file","name":"/usr/share/zoneinfo/America/Yakutat","hashes":[{"alg":"SHA-1","content":"f115ac1b5b64b28cad149f1cdf10fb0649fe5c48"},{"alg":"SHA-256","content":"b45c2729bbf0872ca7e0b353027e727bf2560ddc6309eacd0edee83b05303b63"}]},{"bom-ref":"742e09b662fc9a80","type":"file","name":"/usr/share/zoneinfo/Antarctica/Casey","hashes":[{"alg":"SHA-1","content":"b6ff40c638a543a34f1adc1448c1eb92366a1b76"},{"alg":"SHA-256","content":"55e68b3b14df0f28df197ab9525f7924420c5cd587496fb4377c8ea12ed52be7"}]},{"bom-ref":"458da40140052d53","type":"file","name":"/usr/share/zoneinfo/Antarctica/Davis","hashes":[{"alg":"SHA-1","content":"91cb86205c48468ecdbbc5cf91de015fd1d55014"},{"alg":"SHA-256","content":"5c1d76744ab443edd793304d4cd0bb1b57f31fe5b1c5cb48b99a88df3a7cca92"}]},{"bom-ref":"89ca2c79e2a9d175","type":"file","name":"/usr/share/zoneinfo/Antarctica/DumontDUrville","hashes":[{"alg":"SHA-1","content":"d0c69f2a52d7ba4687044d19076f8778f52f2981"},{"alg":"SHA-256","content":"bb609a35ef45882fcaa9d546b9d46cf558149238c53bac702a16b248da182a33"}]},{"bom-ref":"a4e6bef942f5d9db","type":"file","name":"/usr/share/zoneinfo/Antarctica/Macquarie","hashes":[{"alg":"SHA-1","content":"99cbdcf1d9afe0907b96f0ca06636bde4e5383c3"},{"alg":"SHA-256","content":"89eed195a53c4474e8ad5563f8c5fc4ad28cab1fe85dfe141f63d4aa9cdcc1ed"}]},{"bom-ref":"793e77c372ff09c1","type":"file","name":"/usr/share/zoneinfo/Antarctica/Mawson","hashes":[{"alg":"SHA-1","content":"ce9fafbd02c8d51fbc9a96be61b5e93df92d3678"},{"alg":"SHA-256","content":"1232056ea45daf664905a2355efa16469b679d6d4b16b961c9dc430ee2108d22"}]},{"bom-ref":"3b5e3425bbde1226","type":"file","name":"/usr/share/zoneinfo/Antarctica/McMurdo","hashes":[{"alg":"SHA-1","content":"eb3f7a6e5fcc4afa8f57a639e1a7f451c617a29e"},{"alg":"SHA-256","content":"bfcb3bf057d9b44e1c5fab524e1493c8c05f24fcd78785de5ec9a06e9733a322"}]},{"bom-ref":"f9008e1975a3277f","type":"file","name":"/usr/share/zoneinfo/Antarctica/Palmer","hashes":[{"alg":"SHA-1","content":"9e8e95b3eccdcbb5b3f6bdfb9a91f7b9b8248deb"},{"alg":"SHA-256","content":"1d3658d0cf2d77ba14c794443e04421eea8a8395777e32448b895804d2f812d8"}]},{"bom-ref":"afb26d57720c552e","type":"file","name":"/usr/share/zoneinfo/Antarctica/Rothera","hashes":[{"alg":"SHA-1","content":"88bc94b25fec0bca5356a8a3c509cbc3adcf6c85"},{"alg":"SHA-256","content":"ffd358f9ff2f928cd062b8db5073f96237080a0d3e2eec80f4f9c878ad76dd15"}]},{"bom-ref":"7b109286d3fb8a2e","type":"file","name":"/usr/share/zoneinfo/Antarctica/Syowa","hashes":[{"alg":"SHA-1","content":"fed591101e1b06a43c1e45517f816bf492630172"},{"alg":"SHA-256","content":"505c1d07be893222938513db045c0cd92e2bc8cd9c4daded545f8e6248b59caa"}]},{"bom-ref":"adaa2c30760e8881","type":"file","name":"/usr/share/zoneinfo/Antarctica/Troll","hashes":[{"alg":"SHA-1","content":"d46ca6dc89ac8d73007507f8ae9db1ed6c43761d"},{"alg":"SHA-256","content":"7e3718a69c2bd459e312cb1e7be44b806380373a14c9f8ec7be4462b8e8f4761"}]},{"bom-ref":"04077cd23bb6e6c5","type":"file","name":"/usr/share/zoneinfo/Antarctica/Vostok","hashes":[{"alg":"SHA-1","content":"7ccc7d15d0af513c6976996e1d39352ed7dba8ea"},{"alg":"SHA-256","content":"29f7edc1dccae8f90c0f3d1df83df3e0728806063d2aab2a1e74e7aac3ccad48"}]},{"bom-ref":"33931e36764d31f6","type":"file","name":"/usr/share/zoneinfo/Asia/Aden","hashes":[{"alg":"SHA-1","content":"d96e3388ef1fe3805a77b2cd4cbf9432ceb0e9f9"},{"alg":"SHA-256","content":"96a3ebcde1fc338ef6911805551c31d7f16f271fa27e8d0fe68421dba876e898"}]},{"bom-ref":"59390d06a104f123","type":"file","name":"/usr/share/zoneinfo/Asia/Almaty","hashes":[{"alg":"SHA-1","content":"3e0146d33450990d97e6dd177ac1ca6004da60c7"},{"alg":"SHA-256","content":"94f2d65e4d9fd66598450645908aeaff91e486872c5018acd0cfb285d0c77014"}]},{"bom-ref":"78a1264220a8f1fd","type":"file","name":"/usr/share/zoneinfo/Asia/Amman","hashes":[{"alg":"SHA-1","content":"57cfde6f53f3cced42946916e888d54403d08969"},{"alg":"SHA-256","content":"42fe1c5d7c3b28141613cf367208f4923437c21d6fa55d68ac9dafd898f1af65"}]},{"bom-ref":"3112f86fddd40616","type":"file","name":"/usr/share/zoneinfo/Asia/Anadyr","hashes":[{"alg":"SHA-1","content":"7ce5effbc1b12104beeaa46f9886e45eaf13d895"},{"alg":"SHA-256","content":"5aa2a71e8e481d2599d3c776b12e72b47b6fd0c40ca1cccfdd6f736c30eb6d85"}]},{"bom-ref":"29d5f3e073f87edc","type":"file","name":"/usr/share/zoneinfo/Asia/Aqtau","hashes":[{"alg":"SHA-1","content":"5db0290cbd570ffb53e8c6a545873ddb2ee23326"},{"alg":"SHA-256","content":"e27eb9e0566d0ecb1749f850b338d91b93a6b5b136ce8d4a6e259c62b149834d"}]},{"bom-ref":"912f151d1139f788","type":"file","name":"/usr/share/zoneinfo/Asia/Aqtobe","hashes":[{"alg":"SHA-1","content":"503ea07ccb02ec48462fbdf51f051737f2005281"},{"alg":"SHA-256","content":"d681474dbfb26dc4ea2d79b4af564e5607583131e51a836cf8f82fbb1e747771"}]},{"bom-ref":"1a797f3776c7cae6","type":"file","name":"/usr/share/zoneinfo/Asia/Ashgabat","hashes":[{"alg":"SHA-1","content":"58b5f9b3781cda97e215333cf07284b2f8f704ef"},{"alg":"SHA-256","content":"fac7c69d1ba68a8eff06cf30f581f8c510d6823077c01796edcd02e7a42a93ae"}]},{"bom-ref":"1a9f3f8ea202e815","type":"file","name":"/usr/share/zoneinfo/Asia/Atyrau","hashes":[{"alg":"SHA-1","content":"88cf25cdea7ed28d832d783b47b06e038aeede4a"},{"alg":"SHA-256","content":"fd4f02394204f671bf1ca75d644d50d2c3eecf7accc1f8f099f9d50d8fef4a68"}]},{"bom-ref":"3c4c43638d3aaf16","type":"file","name":"/usr/share/zoneinfo/Asia/Baghdad","hashes":[{"alg":"SHA-1","content":"bcfde35ccf92ddad05e63ae49f275eb67c9afd90"},{"alg":"SHA-256","content":"4bea65288e3308ba88d22746001124de84536b3372ac88f64fdf3e12d5ad643f"}]},{"bom-ref":"e7a4204429379f9f","type":"file","name":"/usr/share/zoneinfo/Asia/Bahrain","hashes":[{"alg":"SHA-1","content":"25eccac8d5d675d0d550e1147faa2c73ca71227c"},{"alg":"SHA-256","content":"94b760c3b4252e939ec05f7adc78b6b73a41bf790998285fc3b150ef692c39a3"}]},{"bom-ref":"b044c03c97daf976","type":"file","name":"/usr/share/zoneinfo/Asia/Baku","hashes":[{"alg":"SHA-1","content":"2242262f170c28641aba438b583994ed9e6c48d9"},{"alg":"SHA-256","content":"ebf86af7c4861b48f4240f2a631f7a59c20c6522d6e30e3ad105e1fce33f71c8"}]},{"bom-ref":"e0c3a6bd31e954e2","type":"file","name":"/usr/share/zoneinfo/Asia/Bangkok","hashes":[{"alg":"SHA-1","content":"9d2f3654d198fa02fed46579cf57bb2adbe09ed8"},{"alg":"SHA-256","content":"85fff93d57a041c1524bad028d2f340bb87e4c63ab7d0e27726f3737c5666649"}]},{"bom-ref":"78278ec3ea9c2767","type":"file","name":"/usr/share/zoneinfo/Asia/Barnaul","hashes":[{"alg":"SHA-1","content":"661d813cbd1b68751618b205e6ff172e45dca6f4"},{"alg":"SHA-256","content":"df37948a62d332b219134bd7e971c5bc1dcca2a131a156c4e424a6e86574cdfd"}]},{"bom-ref":"ebb8a758d57e49d7","type":"file","name":"/usr/share/zoneinfo/Asia/Beirut","hashes":[{"alg":"SHA-1","content":"fba8b66863fcd6bcabec3a13467e0b3450650ad5"},{"alg":"SHA-256","content":"fd9ff664083f88bf6f539d490c1f02074e2e5c10eb7f590b222b3e2675da4b6a"}]},{"bom-ref":"170684bdd01cdb4b","type":"file","name":"/usr/share/zoneinfo/Asia/Bishkek","hashes":[{"alg":"SHA-1","content":"31dc024a65b49ae0806079677bf2cf1e07d77a18"},{"alg":"SHA-256","content":"20ea14ca300120b0a45eed6b8c222a4b002e7d16059257396000b88dd855c3a4"}]},{"bom-ref":"8fabe3fdd6de0e36","type":"file","name":"/usr/share/zoneinfo/Asia/Brunei","hashes":[{"alg":"SHA-1","content":"f598427c44f7c5783730d32b9f47aa9ebeac6c98"},{"alg":"SHA-256","content":"36cc4dc9f07f0bd5cad91a69715752f6a981a7108f2d5d00da0453e7b880bf2c"}]},{"bom-ref":"62878215901415a4","type":"file","name":"/usr/share/zoneinfo/Asia/Chita","hashes":[{"alg":"SHA-1","content":"6eb2b91f9f0c64e6bcfcef7735fdd470c90aaf18"},{"alg":"SHA-256","content":"2db4a54b6decc0590035449c83cce4351d2298035635f388698777f476cb7484"}]},{"bom-ref":"7cf2ce551ee595f8","type":"file","name":"/usr/share/zoneinfo/Asia/Colombo","hashes":[{"alg":"SHA-1","content":"10cf440cea30a8286c6ce17d5cef2e37c2913a40"},{"alg":"SHA-256","content":"c39d8bedb813e26e6172046e7af20f63cdf1cad7e406690b86728cc29d7a2ac6"}]},{"bom-ref":"3fbffc6c308e2a3d","type":"file","name":"/usr/share/zoneinfo/Asia/Damascus","hashes":[{"alg":"SHA-1","content":"a5a78c9e5c2b86fc9dd0dab83920ea739b020b02"},{"alg":"SHA-256","content":"12d84685e6875a6cb922b2c273d3663378ef0124051edf13b01174ec8d6d81b8"}]},{"bom-ref":"6b9b429d3bfcb16e","type":"file","name":"/usr/share/zoneinfo/Asia/Dhaka","hashes":[{"alg":"SHA-1","content":"b87b3f2a00a1baa11f7a3e7ff40b09451f4753da"},{"alg":"SHA-256","content":"fb1ba527629586f2a9eab9592ccc9da70ee85d58ab93eae2107fb5f35c4f139e"}]},{"bom-ref":"e21d4d3d579a3a41","type":"file","name":"/usr/share/zoneinfo/Asia/Dili","hashes":[{"alg":"SHA-1","content":"8ee687d00c9b6813e20196906f15b7f6aa551410"},{"alg":"SHA-256","content":"d80f6e166c12c28140e68d9e9352c0d2e72884f9cce368215af0fd0f94dd9c99"}]},{"bom-ref":"3a396f8af75d925a","type":"file","name":"/usr/share/zoneinfo/Asia/Dubai","hashes":[{"alg":"SHA-1","content":"06f88ab61b092bff63b9507aff7d0e947814449a"},{"alg":"SHA-256","content":"a667613e16894702b038dbf18993467854880a3956cf263d265147bfe1fdba96"}]},{"bom-ref":"1779c3ac8942f83e","type":"file","name":"/usr/share/zoneinfo/Asia/Dushanbe","hashes":[{"alg":"SHA-1","content":"7657ed74ec2c085f04ea4b7a6eff5fd0aab90da1"},{"alg":"SHA-256","content":"9286279d85ae16c057775bc97d9b06769c276c51c4c2f9060664abaf1dca22cb"}]},{"bom-ref":"49b05f28880d6152","type":"file","name":"/usr/share/zoneinfo/Asia/Famagusta","hashes":[{"alg":"SHA-1","content":"d7f718a82b28e4fedb4e6501fc94ca2a6ec758c8"},{"alg":"SHA-256","content":"085adcca077cb9d7b9c7a384b5f33f0f0d0a607a31a4f3f3ab8e8aa075718e37"}]},{"bom-ref":"bc0928c88ec0bc86","type":"file","name":"/usr/share/zoneinfo/Asia/Gaza","hashes":[{"alg":"SHA-1","content":"169848cd25c3fe443c5d0bdd5c96d68a949cfe78"},{"alg":"SHA-256","content":"b7463171440be7754d2a729b2a28e7d0e13f31aaf21329e89da6ec7be893b73b"}]},{"bom-ref":"1bec0c71d81e03b6","type":"file","name":"/usr/share/zoneinfo/Asia/Hebron","hashes":[{"alg":"SHA-1","content":"201832bdac94204b130b3d01a26f608357e8da26"},{"alg":"SHA-256","content":"e98d144872b1fb1a02c42aff5a90ae337a253f5bd41a7ceb7271a2c9015ca9d4"}]},{"bom-ref":"7aa49b28e34ca256","type":"file","name":"/usr/share/zoneinfo/Asia/Ho_Chi_Minh","hashes":[{"alg":"SHA-1","content":"4808c01d2da9ba8a1f0da603d20d515e3e7a67e6"},{"alg":"SHA-256","content":"2e7bf5be950d017068f2fd1bf5df40429cbe004c8ee506b6220d0fbc3923ae65"}]},{"bom-ref":"4308b30f4136a6e6","type":"file","name":"/usr/share/zoneinfo/Asia/Hong_Kong","hashes":[{"alg":"SHA-1","content":"0c3205dd5ec08d17c2161af789df8d05b1bda1b6"},{"alg":"SHA-256","content":"6a5fcee243e5ab92698242d88c4699ceb7208a22ee97d342d11e41ebd2555a17"}]},{"bom-ref":"0c64da480339ed40","type":"file","name":"/usr/share/zoneinfo/Asia/Hovd","hashes":[{"alg":"SHA-1","content":"2296df5a26073f76f1ffb20d191dbce4682303ed"},{"alg":"SHA-256","content":"667e0f2c6943f944490ec6c2868af96ea593cee022976b5bac6256d23e532dbb"}]},{"bom-ref":"57462a49a3537fac","type":"file","name":"/usr/share/zoneinfo/Asia/Irkutsk","hashes":[{"alg":"SHA-1","content":"2864270b9246fbd64432723540b5d0c645773f26"},{"alg":"SHA-256","content":"215ba85c2c1d788f8a2147c5904b7ac818ea60fdd5f464eb17efd62e77df1739"}]},{"bom-ref":"75cf18620624f49a","type":"file","name":"/usr/share/zoneinfo/Asia/Jakarta","hashes":[{"alg":"SHA-1","content":"be35b8895cd70cc9c5744d30260e82f0421a9337"},{"alg":"SHA-256","content":"4ef13306f4b37f314274eb0c019d10811f79240e717f790064e361cb98045d11"}]},{"bom-ref":"db94c808a04371b3","type":"file","name":"/usr/share/zoneinfo/Asia/Jayapura","hashes":[{"alg":"SHA-1","content":"70cd707f6e144cf0cb40af01a70b9c4739208e48"},{"alg":"SHA-256","content":"8a1cd477e2fc1d456a1be35ad743323c4f986308d5163fb17abaa34cde04259b"}]},{"bom-ref":"498366205ffede1b","type":"file","name":"/usr/share/zoneinfo/Asia/Jerusalem","hashes":[{"alg":"SHA-1","content":"89e42d27cfb78255ae18ee02f5a4c8e3ba57dde0"},{"alg":"SHA-256","content":"254b964265b94e16b4a498f0eb543968dec25f4cf80fba29b3d38e4a775ae837"}]},{"bom-ref":"c64648c8d2042702","type":"file","name":"/usr/share/zoneinfo/Asia/Kabul","hashes":[{"alg":"SHA-1","content":"007257116e23e759f69a1f9469289ccb420ac2a3"},{"alg":"SHA-256","content":"25911ba3c6d28ff2fb1e75d49b68005253650af2654498459121c2839a378209"}]},{"bom-ref":"4c466dd5f9168900","type":"file","name":"/usr/share/zoneinfo/Asia/Kamchatka","hashes":[{"alg":"SHA-1","content":"65417acef2e15dc96a3fadba5e777a15de301eba"},{"alg":"SHA-256","content":"298d4f949bd148d918ff9872241c63e430f079e61541a04ad396602f791d7026"}]},{"bom-ref":"2af83c14535bbdca","type":"file","name":"/usr/share/zoneinfo/Asia/Karachi","hashes":[{"alg":"SHA-1","content":"a4c69f1551a0a9bdd8d1817c547bd18218b570a3"},{"alg":"SHA-256","content":"881fa658c4d75327c1c00919773f3f526130d31b20c48b9bf8a348eda9338649"}]},{"bom-ref":"0b7731300d182742","type":"file","name":"/usr/share/zoneinfo/Asia/Kathmandu","hashes":[{"alg":"SHA-1","content":"5e95dd3054b5992d6af40f0102637ac70fb01063"},{"alg":"SHA-256","content":"fd1b1f79259b0abf24338611262ed7bfa8401221d6d7820586c5ec7e16cf8e83"}]},{"bom-ref":"bff0aee88eb0f0b9","type":"file","name":"/usr/share/zoneinfo/Asia/Khandyga","hashes":[{"alg":"SHA-1","content":"f71032aa4097281a21cb14ad18b0ce968072c6e4"},{"alg":"SHA-256","content":"6ca7e6c3a939a980d0b041c6dccbfe5588acdd8842795eea8a30f17f140d9ff8"}]},{"bom-ref":"02a9b8bab5db102d","type":"file","name":"/usr/share/zoneinfo/Asia/Kolkata","hashes":[{"alg":"SHA-1","content":"856df72f3f593ff1e183505d743bf65e40a30aca"},{"alg":"SHA-256","content":"e90c341036cb7203200e293cb3b513267e104a39a594f35e195254e6bc0a17cf"}]},{"bom-ref":"4326d6c870adf11f","type":"file","name":"/usr/share/zoneinfo/Asia/Krasnoyarsk","hashes":[{"alg":"SHA-1","content":"e53bab69df8783b0452c4fe6cee478f53ff30616"},{"alg":"SHA-256","content":"0f9284ff5c16483d98762c43cbc9f72c135a025135ff2dd3597c3a36bc4528a0"}]},{"bom-ref":"7dc4121f65659aa8","type":"file","name":"/usr/share/zoneinfo/Asia/Kuala_Lumpur","hashes":[{"alg":"SHA-1","content":"f7426824f1a6626d2bb605c4fbc5a8956c860688"},{"alg":"SHA-256","content":"16c33d8c3ebac8eddde9149085d9224330539bad676a2f3ff34bc6d46703d24a"}]},{"bom-ref":"c6bf0cc367e21f29","type":"file","name":"/usr/share/zoneinfo/Asia/Kuching","hashes":[{"alg":"SHA-1","content":"01f030c6205d997110c5f1534ef4e5d473a4a5b0"},{"alg":"SHA-256","content":"0f9aadc9627f48cf1b4d0789248621aaaa23c6554a6eb142d4460c0d4f46cd74"}]},{"bom-ref":"2fa23c1d5f69e0a7","type":"file","name":"/usr/share/zoneinfo/Asia/Kuwait","hashes":[{"alg":"SHA-1","content":"21e4d8cab31652c0a90123b3e20800c210b859fc"},{"alg":"SHA-256","content":"a65c6e8397449b5325d884f1d9e23ed765b2a2b98394e0010ef896e6648c653a"}]},{"bom-ref":"44087f2fb29ed3f4","type":"file","name":"/usr/share/zoneinfo/Asia/Macau","hashes":[{"alg":"SHA-1","content":"bbd377edbc12abe7cd74edc80086dd21bb34a6ca"},{"alg":"SHA-256","content":"32f02447246cac0dabd39d88b65c85e5b8761617918c8d233f0834b88887d989"}]},{"bom-ref":"deb416ed1c59103d","type":"file","name":"/usr/share/zoneinfo/Asia/Magadan","hashes":[{"alg":"SHA-1","content":"96211bda9e69f825d6f6d2458492283bbea76633"},{"alg":"SHA-256","content":"1dc704117050bcc98ba02fc913eccffcc94b019d5698d2d02df337b49b79e4ce"}]},{"bom-ref":"427d6fb80d5a99e9","type":"file","name":"/usr/share/zoneinfo/Asia/Makassar","hashes":[{"alg":"SHA-1","content":"2d411fa607c974fe3d77ee18612a21717d226b5e"},{"alg":"SHA-256","content":"3a126d0aa493114faee67d28a4154ee41bbec10cdc60fcbd4bfe9a02125780ec"}]},{"bom-ref":"1f6cb59512215ebd","type":"file","name":"/usr/share/zoneinfo/Asia/Manila","hashes":[{"alg":"SHA-1","content":"d1cabdadc66cf3536c77a812baa074080b2140ca"},{"alg":"SHA-256","content":"f314d21c542e615756dd385d36a896cd57ba16fef983fe6b4d061444bbf1ac9e"}]},{"bom-ref":"b10e27b25395711d","type":"file","name":"/usr/share/zoneinfo/Asia/Muscat","hashes":[{"alg":"SHA-1","content":"3e7c175225fb2e86fe7f9dde1d01363360fb9c0d"},{"alg":"SHA-256","content":"4d08ca780545a5026472af7a37542e3efcbf96a6f6f1f0b44070aff23dacb99c"}]},{"bom-ref":"906bf59cd8f52d53","type":"file","name":"/usr/share/zoneinfo/Asia/Nicosia","hashes":[{"alg":"SHA-1","content":"642099c037f5f40aa6152f7590e3cee90b7ae64a"},{"alg":"SHA-256","content":"d149e6d08153ec7c86790ec5def4daffe9257f2b0282bba5a853ba043d699595"}]},{"bom-ref":"0893df882f694d86","type":"file","name":"/usr/share/zoneinfo/Asia/Novokuznetsk","hashes":[{"alg":"SHA-1","content":"4b405bd7a0850b135f533b1a4eb8ea0fde55c214"},{"alg":"SHA-256","content":"a72c71b5252d6037959859340a0f85df795a652d222ad75ef7f1899cbf5fd0a3"}]},{"bom-ref":"542e7066f96ed814","type":"file","name":"/usr/share/zoneinfo/Asia/Novosibirsk","hashes":[{"alg":"SHA-1","content":"d31a883a3106afac08e77c6c26e4df993495fd17"},{"alg":"SHA-256","content":"e4adbe1b1d794e19477e89725bce52e73444b4070c8de1c16162b813cc762dd6"}]},{"bom-ref":"87c59e798c3e3729","type":"file","name":"/usr/share/zoneinfo/Asia/Omsk","hashes":[{"alg":"SHA-1","content":"cc2ca1473edd947d932efc43a7faf5316e8ed670"},{"alg":"SHA-256","content":"1f25c8588b495c12951d4cd67103e2d4c99de992e6664f90851528f4abf65ce2"}]},{"bom-ref":"13ebb12c5d0bf16e","type":"file","name":"/usr/share/zoneinfo/Asia/Oral","hashes":[{"alg":"SHA-1","content":"dea286d2b5a24a0a4019081cfc824a5cb8bb25d2"},{"alg":"SHA-256","content":"5904f8a91982f5123f965f3307d16f9002fc7b319bf2aa2a59def9193942ee44"}]},{"bom-ref":"a2d723f77a77c243","type":"file","name":"/usr/share/zoneinfo/Asia/Phnom_Penh","hashes":[{"alg":"SHA-1","content":"5993030fb7d28cf552abb733c578247e7c0ba572"},{"alg":"SHA-256","content":"04849aa17a4de959c28b15e92c6863700c4056d0a428139555ceaa4e96acff16"}]},{"bom-ref":"2ae42ff045ef1b8d","type":"file","name":"/usr/share/zoneinfo/Asia/Pontianak","hashes":[{"alg":"SHA-1","content":"ce2c32e874ec64696f76be4439aad95cc7e3c4e7"},{"alg":"SHA-256","content":"8a7397c2e2ad8cabf5cff7a588f65222a8d2b7ac21b6ec613de1b56298d4fc14"}]},{"bom-ref":"01056279501c682a","type":"file","name":"/usr/share/zoneinfo/Asia/Pyongyang","hashes":[{"alg":"SHA-1","content":"99b004e8e97b94265617932951e7227b635ced64"},{"alg":"SHA-256","content":"ffe8371a70c0b5f0d7e17024b571fd8c5a2e2d40e63a8be78e839fbd1a540ec1"}]},{"bom-ref":"7b81615f02eb575b","type":"file","name":"/usr/share/zoneinfo/Asia/Qatar","hashes":[{"alg":"SHA-1","content":"3352b4d6bf9fa56540b74bb08b1fba21feff3acd"},{"alg":"SHA-256","content":"c2494663758f1a9fb3d4e5306ff28e1f3453c019ddb7545f0e0f54b6db77e86e"}]},{"bom-ref":"b06e42f9af31999e","type":"file","name":"/usr/share/zoneinfo/Asia/Qostanay","hashes":[{"alg":"SHA-1","content":"b66a13bf29a7a75aec55ccd8613025c82362973b"},{"alg":"SHA-256","content":"1c88e59fc4083cd454e8c916cf23e2eaf0eb8e59956785f31717141ed5cc8bbb"}]},{"bom-ref":"f6965c076c14a0b9","type":"file","name":"/usr/share/zoneinfo/Asia/Qyzylorda","hashes":[{"alg":"SHA-1","content":"f1029e05cbee401ead5647ab31fa882f94d3d4fe"},{"alg":"SHA-256","content":"2592cd37a36e2e4a9a5847956826625bf80be81ac814bf65afae622bb9b254f8"}]},{"bom-ref":"4da46249b67d12f6","type":"file","name":"/usr/share/zoneinfo/Asia/Riyadh","hashes":[{"alg":"SHA-1","content":"1294daffe7ba6c5b2e7624128fe453685be1ab02"},{"alg":"SHA-256","content":"a02287eee69f37c475a3e8a35c6a13e54d49671c2fa0bcc9bbfd82ab28b68543"}]},{"bom-ref":"b9aeb0e5dc37b49e","type":"file","name":"/usr/share/zoneinfo/Asia/Sakhalin","hashes":[{"alg":"SHA-1","content":"ee80f34440707ea2f820cf45bfe499281db7d769"},{"alg":"SHA-256","content":"c73028afcda28407bec971300ba39688cce8f5be99fa8425dfd348914e4785bb"}]},{"bom-ref":"87e952e12cf28879","type":"file","name":"/usr/share/zoneinfo/Asia/Samarkand","hashes":[{"alg":"SHA-1","content":"ef6591b37b6bf24a0dfd2e34517f2e8749e6e358"},{"alg":"SHA-256","content":"cc929246dde512f77a42f83d6f8f500323b87132725674cac8f61ccae7691f19"}]},{"bom-ref":"471573d3f405a496","type":"file","name":"/usr/share/zoneinfo/Asia/Seoul","hashes":[{"alg":"SHA-1","content":"53c1223d1f4dec149d0cadd6d488672619abf0d6"},{"alg":"SHA-256","content":"2c8f4bb15dd77090b497e2a841ff3323ecbbae4f9dbb9edead2f8dd8fb5d8bb4"}]},{"bom-ref":"81b136d628b55277","type":"file","name":"/usr/share/zoneinfo/Asia/Shanghai","hashes":[{"alg":"SHA-1","content":"79360e38e040eaa15b6e880296c1d1531f537b6f"},{"alg":"SHA-256","content":"64ffc2e43a94435a043c040d1d3af7e92d031adc78e7737af1861baa4eeef3e6"}]},{"bom-ref":"d7b32764133132f3","type":"file","name":"/usr/share/zoneinfo/Asia/Singapore","hashes":[{"alg":"SHA-1","content":"67497848634496fcba203626ea34b123c4021aa9"},{"alg":"SHA-256","content":"5e67952267aa709f212739bb4e302d8b59d6240c5ac0eaaaee32330e71d7da12"}]},{"bom-ref":"1866211e18a8a1fc","type":"file","name":"/usr/share/zoneinfo/Asia/Srednekolymsk","hashes":[{"alg":"SHA-1","content":"198de53b4845f2446117d7342c740effc63fd0de"},{"alg":"SHA-256","content":"79f69a4fc8851eb71c729f9564a34cbed4ee3cb3631b957d247e4a287847dd22"}]},{"bom-ref":"3e36a9629d56f5f8","type":"file","name":"/usr/share/zoneinfo/Asia/Taipei","hashes":[{"alg":"SHA-1","content":"515e1ab82b216406f364cf666dae998e4b8dc6f8"},{"alg":"SHA-256","content":"0cc990c0ea4faa5db9b9edcd7fcbc028a4f87a6d3a0f567dac76cb222b718b19"}]},{"bom-ref":"1ded5628eaffee77","type":"file","name":"/usr/share/zoneinfo/Asia/Tashkent","hashes":[{"alg":"SHA-1","content":"c21bc14086925d0281de00e574bb9bc3823da10b"},{"alg":"SHA-256","content":"6a944fcb6e757d2472fe2c6c83704e64d9946c774ef3a3f9f8f7600b55f0b3b5"}]},{"bom-ref":"c8c3662db8999888","type":"file","name":"/usr/share/zoneinfo/Asia/Tbilisi","hashes":[{"alg":"SHA-1","content":"bb2131e239ab454c2aae1ca21190c8a759dc8027"},{"alg":"SHA-256","content":"cd0fb66d5ab9fd449449bc0deaad2abd68c3f875e429a1f889f315ab59447883"}]},{"bom-ref":"f2b0ebaa636a1c53","type":"file","name":"/usr/share/zoneinfo/Asia/Tehran","hashes":[{"alg":"SHA-1","content":"92a081ad822c6373b2d70662049a007918688ed6"},{"alg":"SHA-256","content":"2dbd87f410815edcfcd7d14be84de0040ef0d913a22203e0c7e7f4f17a6a915a"}]},{"bom-ref":"9ca0402ed0c4b23b","type":"file","name":"/usr/share/zoneinfo/Asia/Thimphu","hashes":[{"alg":"SHA-1","content":"fcaade6d380cb19c1f6380147144efbbc9211fcd"},{"alg":"SHA-256","content":"1b69d341510c98a956b7407be3f7d400beca437600bbffc9e87722898b362325"}]},{"bom-ref":"2807aec0796a1690","type":"file","name":"/usr/share/zoneinfo/Asia/Tokyo","hashes":[{"alg":"SHA-1","content":"41852e7fc829ff3ace521bc3ebc60b6e43b56da6"},{"alg":"SHA-256","content":"a02b9e66044dc5c35c5f76467627fdcba4aee1cc958606b85c777095cad82ceb"}]},{"bom-ref":"1ef1289added1408","type":"file","name":"/usr/share/zoneinfo/Asia/Tomsk","hashes":[{"alg":"SHA-1","content":"f31a1670b453fdbdbddb35bcfcace8eb805c7f15"},{"alg":"SHA-256","content":"72bd142d981606741fcc38897989aaa40ed7a39411ceeaefac7b2b6d9b2784e4"}]},{"bom-ref":"b04a5f4cbe0ed48f","type":"file","name":"/usr/share/zoneinfo/Asia/Ulaanbaatar","hashes":[{"alg":"SHA-1","content":"e21ed806ee58826e66b5cf106792feaeca546763"},{"alg":"SHA-256","content":"a9491746c4dcfeeec1f7427150b4aeef2cca6c6b467ca71f10521ab063c2d9e7"}]},{"bom-ref":"96f03dd71df163f2","type":"file","name":"/usr/share/zoneinfo/Asia/Urumqi","hashes":[{"alg":"SHA-1","content":"1891b18b9e9d847e831069a5990b463ae7e7a4db"},{"alg":"SHA-256","content":"17564e759643b151f00c98a792c47e86372a3f3a8e963bddade648585ba52716"}]},{"bom-ref":"5e92df5b0b1d97e8","type":"file","name":"/usr/share/zoneinfo/Asia/Ust-Nera","hashes":[{"alg":"SHA-1","content":"fb89c588e5f3ca0661a0110609f12312438d4419"},{"alg":"SHA-256","content":"cec1bc9209f0d0572ce4dd96c0d4d59af5a44e5a707fb3a8f32ebc1dc5e3632c"}]},{"bom-ref":"b3270cca403bed79","type":"file","name":"/usr/share/zoneinfo/Asia/Vientiane","hashes":[{"alg":"SHA-1","content":"caea055230cd37567c0a8b81a85c67377adbf893"},{"alg":"SHA-256","content":"6648d5ba8e941c079cec7d4d5a6634d1d45a8866b3080c21bff53dbd0b7d613d"}]},{"bom-ref":"210b7dd859294654","type":"file","name":"/usr/share/zoneinfo/Asia/Vladivostok","hashes":[{"alg":"SHA-1","content":"544159be37df642f3b3d15a817bcfa6ecac04de6"},{"alg":"SHA-256","content":"5cc40b321e523db23a0b847750ee0a85b9c6e2159590735e7730907aac4593a0"}]},{"bom-ref":"f1251d08b218c1fd","type":"file","name":"/usr/share/zoneinfo/Asia/Yakutsk","hashes":[{"alg":"SHA-1","content":"df0da336139bedb1f16437f9f8c1de06a83e844d"},{"alg":"SHA-256","content":"3cf36b446820f6379f39433ee8cf17a9a226f8495f991652580b5218a2f33574"}]},{"bom-ref":"764b212c9d3f20e7","type":"file","name":"/usr/share/zoneinfo/Asia/Yangon","hashes":[{"alg":"SHA-1","content":"10c4f4d196227070b7b896fe50429cc6db268d37"},{"alg":"SHA-256","content":"fd81c04aae19e5871420b21d844ce0dbb0862f36ab5073c31ecd438f44203463"}]},{"bom-ref":"5e36eb5f06eb19ae","type":"file","name":"/usr/share/zoneinfo/Asia/Yekaterinburg","hashes":[{"alg":"SHA-1","content":"412eea5b1386b6960c6b85563f9a14b37c886ea0"},{"alg":"SHA-256","content":"e0dc845ba5e3af852c58f87adc720f2381ba193fed546d57920736c5bc068f30"}]},{"bom-ref":"d85816fe6595a270","type":"file","name":"/usr/share/zoneinfo/Asia/Yerevan","hashes":[{"alg":"SHA-1","content":"aebbc748b4b2537ee6ab504b77b75a4a28339135"},{"alg":"SHA-256","content":"14cd29500e0d6d35816ff0ac2792822d5acba0d99a77b9e304aa85ac9043a311"}]},{"bom-ref":"b992cd3a2b24cbdd","type":"file","name":"/usr/share/zoneinfo/Atlantic/Azores","hashes":[{"alg":"SHA-1","content":"9580f27faae2b4644f4a16ca79e45382fe83f917"},{"alg":"SHA-256","content":"eba843c5a2bcc459e4b4b32ba4dc640f8af58069214be3c4a657aec33b86440d"}]},{"bom-ref":"c13680c3eb7c5df8","type":"file","name":"/usr/share/zoneinfo/Atlantic/Bermuda","hashes":[{"alg":"SHA-1","content":"44e7011574ab916094cc410221bcff4960831155"},{"alg":"SHA-256","content":"2cd18a7ccb2762fc089a34f2cd7acb84c3871c3bbba88ebb45b60d2afbc8d792"}]},{"bom-ref":"6549ebd01143306b","type":"file","name":"/usr/share/zoneinfo/Atlantic/Canary","hashes":[{"alg":"SHA-1","content":"395c4e66b52d9181e31450d07b5365a10ec26aa3"},{"alg":"SHA-256","content":"ca62bdb9faa986f3630cade1ce290de067e4711dd07820623cac9573a16395b0"}]},{"bom-ref":"4be3582f43c7ae03","type":"file","name":"/usr/share/zoneinfo/Atlantic/Cape_Verde","hashes":[{"alg":"SHA-1","content":"f0dae92d97c27b1f5b54602a399c2986bca120ce"},{"alg":"SHA-256","content":"a3dda92dd2c55ff6fdbd48aadeb36971ae2dba920edddc7dacdae73dc03ce3be"}]},{"bom-ref":"9f819e52895c23de","type":"file","name":"/usr/share/zoneinfo/Atlantic/Faroe","hashes":[{"alg":"SHA-1","content":"dd6b1178a2066e496edfcd2426d44ea5dd23a3d8"},{"alg":"SHA-256","content":"3626dd64f66d6a99d847f9b22199cc753692286b0e04682e8e3d3f4f636f033b"}]},{"bom-ref":"0156467f988321f7","type":"file","name":"/usr/share/zoneinfo/Atlantic/Madeira","hashes":[{"alg":"SHA-1","content":"18738836410da9e19de07a766494d71f957f6e36"},{"alg":"SHA-256","content":"95863ce4c0b9f8650a1319b7e778b1c2d643c5ab186af4d35842efbf94572f11"}]},{"bom-ref":"e4a57653d7d2290f","type":"file","name":"/usr/share/zoneinfo/Atlantic/Reykjavik","hashes":[{"alg":"SHA-1","content":"dca85c80179204018293e1b58a04d89e86a6ca5c"},{"alg":"SHA-256","content":"99291a4411992de52b9bcf0478771a5a711ddf95a7f808361b5d07b48dc6d9f8"}]},{"bom-ref":"9148913a28bfd23b","type":"file","name":"/usr/share/zoneinfo/Atlantic/South_Georgia","hashes":[{"alg":"SHA-1","content":"d0eebf6463b6b9013787275aa2cd096e0c8698b7"},{"alg":"SHA-256","content":"23d48070f3ee9b2e977fd3fb760d9a135ea8c700c8ab2285aa29c94c2f97b203"}]},{"bom-ref":"7de0888019ee178f","type":"file","name":"/usr/share/zoneinfo/Atlantic/St_Helena","hashes":[{"alg":"SHA-1","content":"8e37214bbd267cbe81d4febd457cac21ae972d1f"},{"alg":"SHA-256","content":"a6dfe04a0d3889bca9b71df65370184b41c8a83efb4eb1222da544478d0f6d5d"}]},{"bom-ref":"1cea50f4aec2c67b","type":"file","name":"/usr/share/zoneinfo/Atlantic/Stanley","hashes":[{"alg":"SHA-1","content":"54cb6323653fdf9d5cd7f23e84d5388d26df9921"},{"alg":"SHA-256","content":"b221235d302e4ee9bfe171ad4bdf0c044df85d6ff9c605d28445f938c9d2163a"}]},{"bom-ref":"3c36f406d8aa4daf","type":"file","name":"/usr/share/zoneinfo/Australia/Adelaide","hashes":[{"alg":"SHA-1","content":"91e31f0fe53950a7e8ac0bd66964069d4d7dabe9"},{"alg":"SHA-256","content":"95dd846f153be6856098f7bbd37cfe23a6aa2e0d0a9afeb665c086ce44f9476d"}]},{"bom-ref":"77b950dd8f8642de","type":"file","name":"/usr/share/zoneinfo/Australia/Brisbane","hashes":[{"alg":"SHA-1","content":"d1cae3c294b3bc9e1d4a1e1e5457f63abb6b554e"},{"alg":"SHA-256","content":"796e90cf37b6b74faca5e2669afb7524ccdb91269d20a744f385c773b254b467"}]},{"bom-ref":"2d98e58b083a1600","type":"file","name":"/usr/share/zoneinfo/Australia/Broken_Hill","hashes":[{"alg":"SHA-1","content":"7f8d2d9322173a3390737371410592ecbcb9e858"},{"alg":"SHA-256","content":"de4ff79634ef4b91927e8ed787ac3bd54811dda03060f06c9c227e9a51180aa4"}]},{"bom-ref":"9b423a6ec5c00bd5","type":"file","name":"/usr/share/zoneinfo/Australia/Darwin","hashes":[{"alg":"SHA-1","content":"fa21b92f3596419128a660acccf2f1cf6aa66ab0"},{"alg":"SHA-256","content":"7e7d08661216f7c1409f32e283efc606d5b92c0e788da8dd79e533838b421afa"}]},{"bom-ref":"a39d1502e8388717","type":"file","name":"/usr/share/zoneinfo/Australia/Eucla","hashes":[{"alg":"SHA-1","content":"b88617cf02910b054381b3d1affe4d5a42e3f051"},{"alg":"SHA-256","content":"8b5f97186f08e84d1d5c8756185e039647c32d686203127fde0329b7e9e6feee"}]},{"bom-ref":"02b8a7dd89240105","type":"file","name":"/usr/share/zoneinfo/Australia/Hobart","hashes":[{"alg":"SHA-1","content":"db8884f4beb55ae0c292403cdb8ffc47c18effcd"},{"alg":"SHA-256","content":"18b412ce021fb16c4ebe628eae1a5fa1f5aa20d41fea1dfa358cb799caba81c8"}]},{"bom-ref":"be4e83813c245cbb","type":"file","name":"/usr/share/zoneinfo/Australia/Lindeman","hashes":[{"alg":"SHA-1","content":"8ac554523fc5300e535323ce58e46f8adb72c2e5"},{"alg":"SHA-256","content":"c4ce94771db6a0b3682d1d58ec64211ce628bfc9f0df140daa073f35543624ae"}]},{"bom-ref":"006cccfc47fdaf1f","type":"file","name":"/usr/share/zoneinfo/Australia/Lord_Howe","hashes":[{"alg":"SHA-1","content":"811fd8de8b43dbbaec83a262809bb9fa6162244c"},{"alg":"SHA-256","content":"a323c5433991a963eb497b7da4d1d09848bf3ef5f5d64d9c9649f388e4bab9df"}]},{"bom-ref":"94c4b9ab9aa6eabf","type":"file","name":"/usr/share/zoneinfo/Australia/Melbourne","hashes":[{"alg":"SHA-1","content":"d6f744692e6c8b73de1eef051814f00e0d159e6a"},{"alg":"SHA-256","content":"96fc7f31072e9cc73abb6b2622b97c5f8dbb6cbb17be3920a4249d8d80933413"}]},{"bom-ref":"c8d08a27397a38c4","type":"file","name":"/usr/share/zoneinfo/Australia/Perth","hashes":[{"alg":"SHA-1","content":"bb00a26c7ab0df1054fa1c4a71f0bd836a9be5f8"},{"alg":"SHA-256","content":"025d4339487853fa1f3144127959734b20f7c7b4948cff5d72149a0541a67968"}]},{"bom-ref":"f436810ff78722b0","type":"file","name":"/usr/share/zoneinfo/Australia/Sydney","hashes":[{"alg":"SHA-1","content":"ca9f55088c536a5cb6993b1a5fe361c0617bc4fd"},{"alg":"SHA-256","content":"42c3857585b16db2f8ffd47ba19faa60f473340de8d4fe9320ea7be861605906"}]},{"bom-ref":"682158c1d9c72e8b","type":"file","name":"/usr/share/zoneinfo/Etc/GMT","hashes":[{"alg":"SHA-1","content":"2a8483df5c2809f1dfe0c595102c474874338379"},{"alg":"SHA-256","content":"6d9f378883c079f86c0387a5547a92c449869d806e07de10084ab04f0249018d"}]},{"bom-ref":"d74fc1584a8b5bd4","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+1","hashes":[{"alg":"SHA-1","content":"694bd47ee2b5d93fd043dd144c5dce214e163dd8"},{"alg":"SHA-256","content":"d50ce5d97f6b43f45711fd75c87d3dc10642affa61e947453fb134caef6cf884"}]},{"bom-ref":"ca6c9c2927c1906c","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+10","hashes":[{"alg":"SHA-1","content":"df25f8ee32cd9ac7f9d3fdafb6ccc897e0675a5c"},{"alg":"SHA-256","content":"244432432425902d28e994dd7958d984220e87a70ae5317b1f4d0f925b3eb142"}]},{"bom-ref":"25eca8ef2116459d","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+11","hashes":[{"alg":"SHA-1","content":"326fa090be74ccc8e561a72ff2833a9a80460977"},{"alg":"SHA-256","content":"b56bdcbd830509a13ad27255bc3aeba2feecb49becd4a4183b2ae1977773714b"}]},{"bom-ref":"0ad174a2cc5a6088","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+12","hashes":[{"alg":"SHA-1","content":"9813523e1f092d2f0c0cd3e5f13e2738a51cb350"},{"alg":"SHA-256","content":"6fbd0712112babc2099aaf31edc399cb8791fffddfab9b871e98ef3c1107a8c0"}]},{"bom-ref":"dffc2297e97d1deb","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+2","hashes":[{"alg":"SHA-1","content":"e3c40ede5206526dd50a7f8d710afad3da46c12e"},{"alg":"SHA-256","content":"4fa129e7386c94129b61a10215407a8142a1de24d93f23285b59238689f1ad4a"}]},{"bom-ref":"c663a01f586b9754","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+3","hashes":[{"alg":"SHA-1","content":"8f68d2cb81ec1c386f80f820d6aaf54b7444f5cd"},{"alg":"SHA-256","content":"406a18ac4d386d427e3b32f7eddb763194f917158d2e92433d55e025bb2d6190"}]},{"bom-ref":"682c2f9b14300926","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+4","hashes":[{"alg":"SHA-1","content":"32cfcd637174d91744d7dff4744e199750faf9d1"},{"alg":"SHA-256","content":"456ae43648bec15ed7f9ca1ed15bee7c17ba2eb595a643c98226b94106049c1a"}]},{"bom-ref":"1f90ab6deb859e3d","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+5","hashes":[{"alg":"SHA-1","content":"cef7ce7bf61e746cc1ae39bbab9112bf1dfdc455"},{"alg":"SHA-256","content":"a1199e0b8d5d8185d3fb3cf264844a5cdf48bdd2f60dae674eec261b6fe9ac80"}]},{"bom-ref":"5606b32bd3309778","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+6","hashes":[{"alg":"SHA-1","content":"750271da92432a39887c376cd346144d785d4445"},{"alg":"SHA-256","content":"77a7409f089e8f2148da7ec0cc59455b4685013eb360d123048106d2ebb4b1b4"}]},{"bom-ref":"610d915109e714fe","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+7","hashes":[{"alg":"SHA-1","content":"6ca6def25e8ec04a636003be3f3642e9b165b5f0"},{"alg":"SHA-256","content":"4ea8d86f3774607a71d708ac160d3c275f704e983aced24b2e89e0658fe5a33b"}]},{"bom-ref":"ec967036342c1a93","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+8","hashes":[{"alg":"SHA-1","content":"5c83913964f148a5e9d5add7eb511586880f4373"},{"alg":"SHA-256","content":"b61ffc6c832662044f09eb01adb981851af48d03bbc2177bd0b898f477f02729"}]},{"bom-ref":"08411e05874d8e88","type":"file","name":"/usr/share/zoneinfo/Etc/GMT+9","hashes":[{"alg":"SHA-1","content":"fefc384f96a7e856e72e7d723eb2638cb3e7d469"},{"alg":"SHA-256","content":"42ae44ea2512ec9309232993ed8a2a948f0cb6ab55cb49abf6deb3585b5673d6"}]},{"bom-ref":"1d6c3a6557496d9a","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-1","hashes":[{"alg":"SHA-1","content":"0ab7ceaed57872977f2162ead3e08b3a2984757c"},{"alg":"SHA-256","content":"ef7175794f2e01018fde6728076abdf428df31a9c61479377de7e58e9f69602e"}]},{"bom-ref":"a2a0fd0198e7fc99","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-10","hashes":[{"alg":"SHA-1","content":"4081769004bdca6d05daa595d53c5e64e9da7dfd"},{"alg":"SHA-256","content":"7ca5963702c13a9d4e90a8ed735c3d2c85c94759934c3f8976f61f951cb522b5"}]},{"bom-ref":"0f74603e9b3a71ee","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-11","hashes":[{"alg":"SHA-1","content":"268a542f171d142870c273ea63d2b297e9132424"},{"alg":"SHA-256","content":"0f64bbf67ea9b1af6df7fdaf8f9c08ac5a471f63892dc08a3fabedc3315920d6"}]},{"bom-ref":"8147225108bf7d25","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-12","hashes":[{"alg":"SHA-1","content":"7a7f58e042a671281dbf35baa7db93fc4661a80b"},{"alg":"SHA-256","content":"99ee15ea599623c812afc1fb378d56003d04c30d5a9e1fc4177e10afd5284a72"}]},{"bom-ref":"83a21e0bd6c426da","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-13","hashes":[{"alg":"SHA-1","content":"9f692f0a177436496fa8381438ee7ed1f9ae3f1a"},{"alg":"SHA-256","content":"c5b99b1b505003a0e5a5afe2530106c89c56e1adedea599ac1d3ca004f2f6d1f"}]},{"bom-ref":"c98f9f54475311bf","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-14","hashes":[{"alg":"SHA-1","content":"f073c38db02ac6096f4f32948eda1574a34d9d0b"},{"alg":"SHA-256","content":"3e95e8444061d36a85a6fc55323da957d200cd242f044ed73ef9cdf6a499f8a7"}]},{"bom-ref":"6110a97983fa4a93","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-2","hashes":[{"alg":"SHA-1","content":"44c80b54e02666339300ec84db1f6f5566b5ba92"},{"alg":"SHA-256","content":"bdeea158b75eba22e1a9a81a58ba8c0fa1cdc9b4b57214708ee75f4d9d9b6011"}]},{"bom-ref":"4b5da82d9d3db569","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-3","hashes":[{"alg":"SHA-1","content":"3de0e41581d474c91db326d9e755fe1b11172983"},{"alg":"SHA-256","content":"37bee320b6a7b8b0d590bb1dba35d94aef9db078b0379308a7087b7cc5227eca"}]},{"bom-ref":"06221b4355537d6f","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-4","hashes":[{"alg":"SHA-1","content":"b81f76f5a16830f56841502d65c3d271a0d94ee4"},{"alg":"SHA-256","content":"2d2928e5f547a8f979cdfc231aa91b31afce167beda53ea8ff8c58c4dcfd9f9a"}]},{"bom-ref":"da6d063ab28bcb3e","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-5","hashes":[{"alg":"SHA-1","content":"4978924cbee929c87b2726c9d9b4d2d5d7590da6"},{"alg":"SHA-256","content":"b8b69247931bd7c1d14ec000e52bde63d3c027dedd3bc433216a8d5dedf065be"}]},{"bom-ref":"e400e55b2e541624","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-6","hashes":[{"alg":"SHA-1","content":"773e9072d36b0f3dca58dc5de24b9947f3fefdeb"},{"alg":"SHA-256","content":"25237e454029849e747e922fedc602eae9ebb6bcfd4b55a66bea620c79467bb7"}]},{"bom-ref":"6fc320ac0e03a807","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-7","hashes":[{"alg":"SHA-1","content":"6c3c180b690aee6c0320e6703f2f781618c4221e"},{"alg":"SHA-256","content":"bd500e17cc54f53f444a7c3af1cd12157a5cbe4a28a5a8b04d1d336de7c71d25"}]},{"bom-ref":"22f6d53d679e1f79","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-8","hashes":[{"alg":"SHA-1","content":"280e22a595351b1fa0fdc3b3a3deed4e4840e31a"},{"alg":"SHA-256","content":"4bbc4541b14ca620d9cb8bf92f80fd7c2ae3448cf3a0b0b9a7c49edb7c62eeeb"}]},{"bom-ref":"ee340ef3e3242402","type":"file","name":"/usr/share/zoneinfo/Etc/GMT-9","hashes":[{"alg":"SHA-1","content":"f62a1c06f8a901efa933208ae9501c9a2f78a269"},{"alg":"SHA-256","content":"239bc736650af98ca0fd2d6c905378e15195cc1824b6316055088320a3b868c2"}]},{"bom-ref":"c953d5ae4d30ffc5","type":"file","name":"/usr/share/zoneinfo/Etc/UTC","hashes":[{"alg":"SHA-1","content":"d0b8991654116e9395714102c41d858c1454b3bd"},{"alg":"SHA-256","content":"8b85846791ab2c8a5463c83a5be3c043e2570d7448434d41398969ed47e3e6f2"}]},{"bom-ref":"2b850551c0440af7","type":"file","name":"/usr/share/zoneinfo/Europe/Amsterdam","hashes":[{"alg":"SHA-1","content":"f1caa90c7251a050d3d56127fd21f5fb54dec1cd"},{"alg":"SHA-256","content":"a70f079e056dddb53942b473bbbd2a3a67faf5323292592096f554b5ef67b4aa"}]},{"bom-ref":"5bfeffe36fbb504d","type":"file","name":"/usr/share/zoneinfo/Europe/Andorra","hashes":[{"alg":"SHA-1","content":"4fbea0614a049786c42ba65ea8bea4b12a7a6ef3"},{"alg":"SHA-256","content":"8130798c2426bc8c372498b5fef01c398ba1b733c147a457531f60555ea9eae8"}]},{"bom-ref":"6c524d3101a5b5b8","type":"file","name":"/usr/share/zoneinfo/Europe/Astrakhan","hashes":[{"alg":"SHA-1","content":"f68198e49b8568c0f1f0109464da4d553c466171"},{"alg":"SHA-256","content":"65e183663c15551a1e47e27ae36cc49cddba04f2f9f1589324b6f09e4ee92d79"}]},{"bom-ref":"7b1412b672b82edf","type":"file","name":"/usr/share/zoneinfo/Europe/Athens","hashes":[{"alg":"SHA-1","content":"fd241e817c1f999471c30d301238211a16f95866"},{"alg":"SHA-256","content":"5c363e14151d751c901cdf06c502d9e1ac23b8e956973954763bfb39d5c53730"}]},{"bom-ref":"e2dc9b8f06e21bbf","type":"file","name":"/usr/share/zoneinfo/Europe/Belgrade","hashes":[{"alg":"SHA-1","content":"961a2223fd1573ab344930109fbd905336175c5f"},{"alg":"SHA-256","content":"3a95adb06156044fd2fa662841c0268c2b5af47c1b19000d9d299563d387093a"}]},{"bom-ref":"e9a7bfd6dc6faf65","type":"file","name":"/usr/share/zoneinfo/Europe/Berlin","hashes":[{"alg":"SHA-1","content":"918341ad71f9d3acd28997326e42d5b00fba41e0"},{"alg":"SHA-256","content":"5ee475f71a0fc1a32faeb849f8c39c6e7aa66d6d41ec742b97b3a7436b3b0701"}]},{"bom-ref":"e7ee44ecfd436a77","type":"file","name":"/usr/share/zoneinfo/Europe/Brussels","hashes":[{"alg":"SHA-1","content":"d90f3247c4716c2e1068d5ad9c88ca2091bec4e8"},{"alg":"SHA-256","content":"812f55aeb6e8cde9ddf4786e15eb4256b21e82cf5f5d28da1bad17d94570cac0"}]},{"bom-ref":"3443014d1d5870f9","type":"file","name":"/usr/share/zoneinfo/Europe/Bucharest","hashes":[{"alg":"SHA-1","content":"7176e5201942e3b2db81c853b0215abc86fd0ae7"},{"alg":"SHA-256","content":"9df83af9b5360fa0cc1166fd10c2014799319cdb1b0d2c7450a7c71ff673a857"}]},{"bom-ref":"e37b760ad0d00ae6","type":"file","name":"/usr/share/zoneinfo/Europe/Budapest","hashes":[{"alg":"SHA-1","content":"91adb207dce9a1bfffd91c527c87591862b5befa"},{"alg":"SHA-256","content":"94dc2ac5672206fc3d7a2f35550c082876c2fd90c98e980753a1c5838c025246"}]},{"bom-ref":"db7597f7dc168b7c","type":"file","name":"/usr/share/zoneinfo/Europe/Chisinau","hashes":[{"alg":"SHA-1","content":"c7844165a0987ac858065a8b9e0b304c657757c3"},{"alg":"SHA-256","content":"7b4941ae82ed7958f8897d198bf937e7ccf5460065caca2728e2a471cb3e9d93"}]},{"bom-ref":"42bd6c17a2e2ef32","type":"file","name":"/usr/share/zoneinfo/Europe/Copenhagen","hashes":[{"alg":"SHA-1","content":"76ebb86b9bcd6ca766af94c2182b65cabacba932"},{"alg":"SHA-256","content":"abb8806e477bcbd42f6c08ba5c664450e4f034309161646ef55402c54ad9d355"}]},{"bom-ref":"99e4deaee4d2cdb1","type":"file","name":"/usr/share/zoneinfo/Europe/Dublin","hashes":[{"alg":"SHA-1","content":"2122cd57243fa8c021136373cb21454c0f80ff05"},{"alg":"SHA-256","content":"40e8d2a1c3b572284da39f6f4245b1bc814f452c44f5aa73d0a011571d5ccc43"}]},{"bom-ref":"7fa1c25e893753c5","type":"file","name":"/usr/share/zoneinfo/Europe/Gibraltar","hashes":[{"alg":"SHA-1","content":"122f8383ab55c80eb33fe83cb2c8e870104260ee"},{"alg":"SHA-256","content":"6bced6a5a065bf123880053d3a940e90df155096e2ad55987fe55f14b4c8a12e"}]},{"bom-ref":"e4306349ec590041","type":"file","name":"/usr/share/zoneinfo/Europe/Guernsey","hashes":[{"alg":"SHA-1","content":"115ab983357fade1e8adf15c145c8265cf973a32"},{"alg":"SHA-256","content":"63454225987aa547bd9b47d41f274ee90de8d52c66c3c624d42508da55cf8cb0"}]},{"bom-ref":"37b025e7a1b94527","type":"file","name":"/usr/share/zoneinfo/Europe/Helsinki","hashes":[{"alg":"SHA-1","content":"3f01ceaf46492fcbd8753bc6cff72ca73df6d1f1"},{"alg":"SHA-256","content":"184901ecbb158667a0b7b62eb9685e083bc3182edbecdc3d6d3743192f6a9097"}]},{"bom-ref":"ae9423f9887f1d7d","type":"file","name":"/usr/share/zoneinfo/Europe/Isle_of_Man","hashes":[{"alg":"SHA-1","content":"83a6f93c88b340212d80ecc4103b5e708d3da856"},{"alg":"SHA-256","content":"8c20e22715c8950b0a30c68f191d9fbf2ebef60189279f2ca99cbabc14ec1b12"}]},{"bom-ref":"7a627cbc3b9ce675","type":"file","name":"/usr/share/zoneinfo/Europe/Istanbul","hashes":[{"alg":"SHA-1","content":"f8e94d99f4b59c4e819fdc581b1fd596d443cbbc"},{"alg":"SHA-256","content":"264e308e7743b5afee2d673c5b57567636dabc925bb0be513939996e856718a5"}]},{"bom-ref":"cda1e591060f2825","type":"file","name":"/usr/share/zoneinfo/Europe/Jersey","hashes":[{"alg":"SHA-1","content":"e35cf0a296a73e09a708107b74c5a04fb3971c7f"},{"alg":"SHA-256","content":"7ae8f42ddba0b50ac3b52b23f967a0cd0da7cddbbfdbc711152b38d4146b673d"}]},{"bom-ref":"e51d2d65ad5f163d","type":"file","name":"/usr/share/zoneinfo/Europe/Kaliningrad","hashes":[{"alg":"SHA-1","content":"a02a78fd9fd74fa6cd9abe6546273519018d5030"},{"alg":"SHA-256","content":"b3b19749ed58bcc72cec089484735303a2389c03909ff2a6cff66a2583be2cc3"}]},{"bom-ref":"6a3f989486915815","type":"file","name":"/usr/share/zoneinfo/Europe/Kirov","hashes":[{"alg":"SHA-1","content":"22357ac98d315c82d585badfb9afe934a709f107"},{"alg":"SHA-256","content":"3fb4f665fe44a3aa382f80db83f05f8858d48138f47505e5af063e419d5e0559"}]},{"bom-ref":"8eb373c76b0866da","type":"file","name":"/usr/share/zoneinfo/Europe/Kyiv","hashes":[{"alg":"SHA-1","content":"946d9ae0ff7ee36e2d8809629da945ae868f4d65"},{"alg":"SHA-256","content":"fb0ae91bd8cfb882853f5360055be7c6c3117fd2ff879cf727a4378e3d40c0d3"}]},{"bom-ref":"e559788336655dfd","type":"file","name":"/usr/share/zoneinfo/Europe/Lisbon","hashes":[{"alg":"SHA-1","content":"b9298daf385db9e18080b3d9f46be2c944714ec1"},{"alg":"SHA-256","content":"92b07cb24689226bf934308d1f1bd33c306aa4da610c52cd5bce25077960502c"}]},{"bom-ref":"149645c197e0e7a7","type":"file","name":"/usr/share/zoneinfo/Europe/Ljubljana","hashes":[{"alg":"SHA-1","content":"a6183ba40c890d7f7997afe8a9842361bbc857a2"},{"alg":"SHA-256","content":"2267951ff4cc76cebc3e804b8cca03648c169ec16ce0cbf9e5dfbe51e748043f"}]},{"bom-ref":"7619b24ee840241a","type":"file","name":"/usr/share/zoneinfo/Europe/London","hashes":[{"alg":"SHA-1","content":"1beba7108ea93c7111dabc9d7f4e4bfdea383992"},{"alg":"SHA-256","content":"c85495070dca42687df6a1c3ee780a27cbcb82f1844750ea6f642833a44d29b4"}]},{"bom-ref":"d76d1821249e7d01","type":"file","name":"/usr/share/zoneinfo/Europe/Luxembourg","hashes":[{"alg":"SHA-1","content":"efcfc52aa249c0515ebaab94ed3d98e191e07950"},{"alg":"SHA-256","content":"f7be03bdffd7d50212286d732224c92487c66afa1b3b6d475154be1dfcac39c6"}]},{"bom-ref":"1ca867870adca836","type":"file","name":"/usr/share/zoneinfo/Europe/Madrid","hashes":[{"alg":"SHA-1","content":"373ee9e3d0ba9edf1ebd6497d5f1ffb50a62984f"},{"alg":"SHA-256","content":"9a42d7d37ad6dedd2d9b328120f7bf9e852f6850c4af00baff964f659b161cea"}]},{"bom-ref":"ad4f0d4b79b1a09e","type":"file","name":"/usr/share/zoneinfo/Europe/Malta","hashes":[{"alg":"SHA-1","content":"eede4ec7a48fc8ada059d1462e2c090eda8c6c91"},{"alg":"SHA-256","content":"12129c6cf2f8efbeb9b56022439edcbac68ad9368842a64282d268119b3751dd"}]},{"bom-ref":"3dfadb38d16bfa74","type":"file","name":"/usr/share/zoneinfo/Europe/Minsk","hashes":[{"alg":"SHA-1","content":"4d76a2c501c44525f7a4afba02107be94266aaac"},{"alg":"SHA-256","content":"2a03e6d1f1f2727b60777c5b4e69839783b5dd787ff5edb352777c5c5494dbda"}]},{"bom-ref":"f3b0d8417988e7fc","type":"file","name":"/usr/share/zoneinfo/Europe/Monaco","hashes":[{"alg":"SHA-1","content":"9eb927aa739c775cc3e390b7d65719be9170ecd1"},{"alg":"SHA-256","content":"e74b956576175ea7e7afe2b8b6c48d976e8265b463bbae42f924e9f35f305fce"}]},{"bom-ref":"4436608e4d09d92c","type":"file","name":"/usr/share/zoneinfo/Europe/Moscow","hashes":[{"alg":"SHA-1","content":"d4d01723421789b2d2b54ffedee60283e94f5e65"},{"alg":"SHA-256","content":"2a69287d1723e93f0f876f0f242866f09569d77b91bde7fa4d9d06b8fcd4883c"}]},{"bom-ref":"a5c4fc43bc0f982e","type":"file","name":"/usr/share/zoneinfo/Europe/Oslo","hashes":[{"alg":"SHA-1","content":"d8838a66441249a79ab65c959eff3dbd379a1a06"},{"alg":"SHA-256","content":"51d0844618f5258a71de88e68a5691a32568478a8c035f8f12fea11b09e9b090"}]},{"bom-ref":"c2803f434764dd39","type":"file","name":"/usr/share/zoneinfo/Europe/Paris","hashes":[{"alg":"SHA-1","content":"f065dd54ad27c008caa5e96b7fec1e7859fcc003"},{"alg":"SHA-256","content":"ab77a1488a2dd4667a4f23072236e0d2845fe208405eec1b4834985629ba7af8"}]},{"bom-ref":"210d50ae2fb4bbd0","type":"file","name":"/usr/share/zoneinfo/Europe/Prague","hashes":[{"alg":"SHA-1","content":"c95c20c6a17e873cb68c1b064e6ba98852aaa27d"},{"alg":"SHA-256","content":"1bd7dd8545e6cf1eb9d419f267a57b00e60857d115e5a309326e3878968b2d9c"}]},{"bom-ref":"6783490cdcd9831b","type":"file","name":"/usr/share/zoneinfo/Europe/Riga","hashes":[{"alg":"SHA-1","content":"799671bdcad326eb5707eb620342c69bac5e6580"},{"alg":"SHA-256","content":"849dbfd26d6d696f48b80fa13323f99fe597ed83ab47485e2accc98609634569"}]},{"bom-ref":"d60f344d987f8ac2","type":"file","name":"/usr/share/zoneinfo/Europe/Rome","hashes":[{"alg":"SHA-1","content":"2ef35f507ab176828a5c751f702144ede463e385"},{"alg":"SHA-256","content":"d5ade82cc4a232949b87d43157c84b2c355b66a6ac87cf6250ed6ead80b5018f"}]},{"bom-ref":"2aa37119ff6bb6d3","type":"file","name":"/usr/share/zoneinfo/Europe/Samara","hashes":[{"alg":"SHA-1","content":"fbf746a5736db94ae499d4bfd93b8022a4e7f2c3"},{"alg":"SHA-256","content":"9d72f42316d3eaabb5d0236e6831f1c785b539a02769a293b4827d37d5113285"}]},{"bom-ref":"78406b451bcdbf92","type":"file","name":"/usr/share/zoneinfo/Europe/Sarajevo","hashes":[{"alg":"SHA-1","content":"4f20170e7f4f29f21170ce80eea092f277458fb8"},{"alg":"SHA-256","content":"a3e49aca8bf331e3c6d0faf68ab466cde901c8051a8674e926acd2c66deaff57"}]},{"bom-ref":"82a69752bc2b8327","type":"file","name":"/usr/share/zoneinfo/Europe/Saratov","hashes":[{"alg":"SHA-1","content":"4a2bc09478d0fcff32dc2c4fddd9be29dc10245b"},{"alg":"SHA-256","content":"ca0c23bd7375dd381a5b18e0eb2b161271d6371c2b56d9046eb93cb7d6f3555c"}]},{"bom-ref":"aab35b3b890cd148","type":"file","name":"/usr/share/zoneinfo/Europe/Simferopol","hashes":[{"alg":"SHA-1","content":"f1773f7624c418081fb3ab76ac1a64ab60f2e9be"},{"alg":"SHA-256","content":"b7397bc5d355499a6b342ba5e181392d2a6847d268ba398eabc55b6c1f301e27"}]},{"bom-ref":"b250871b0a501a78","type":"file","name":"/usr/share/zoneinfo/Europe/Skopje","hashes":[{"alg":"SHA-1","content":"7b58851e47db58ec69309054cab75166ce725f62"},{"alg":"SHA-256","content":"50301171643800580da77e75187dc2f9ec2e0b40860578248c9c3dd0c348dcb8"}]},{"bom-ref":"0fcbd33b8275d7fd","type":"file","name":"/usr/share/zoneinfo/Europe/Sofia","hashes":[{"alg":"SHA-1","content":"541f61fa9ef15b102f8661b684ad9976bd81b929"},{"alg":"SHA-256","content":"84240a5df30dae7039c47370feecd38cacd5c38f81becab9a063b8c940afe6d6"}]},{"bom-ref":"31fef068828c46f1","type":"file","name":"/usr/share/zoneinfo/Europe/Stockholm","hashes":[{"alg":"SHA-1","content":"318f50064cedc8263f9883058b2fcf2ab17ba783"},{"alg":"SHA-256","content":"5e0a7819287cfa9cdd78978ff13436d235830d48f5ed1ebd87a4584db2d87768"}]},{"bom-ref":"887b6d434a62e715","type":"file","name":"/usr/share/zoneinfo/Europe/Tallinn","hashes":[{"alg":"SHA-1","content":"dff1b1743ddf6474e691fae0a6dab8ee93d81789"},{"alg":"SHA-256","content":"e1ae890b4688a4ccea215ecedf9ce81b42cb270910ab90285d9da2be489cebec"}]},{"bom-ref":"93063bd322389895","type":"file","name":"/usr/share/zoneinfo/Europe/Tirane","hashes":[{"alg":"SHA-1","content":"3b9be3df7968b0c46feed0a46349324179daaa84"},{"alg":"SHA-256","content":"ced959c824bd5825de556f2706e9f74f28b91d463412d15b8816c473582e72ec"}]},{"bom-ref":"6da134301b1df9cd","type":"file","name":"/usr/share/zoneinfo/Europe/Ulyanovsk","hashes":[{"alg":"SHA-1","content":"c374e42e8ca36446087f9bbbba154aac78ade345"},{"alg":"SHA-256","content":"73c01de69ec22a3ff570203b95546970fa9b417198697f3772ebbab88171f818"}]},{"bom-ref":"dc229c49b685262d","type":"file","name":"/usr/share/zoneinfo/Europe/Vaduz","hashes":[{"alg":"SHA-1","content":"7506d222b6bc2a1ea5b435cfb42d624cba4a09e7"},{"alg":"SHA-256","content":"a7b7adba7d5cbdab931406b197603bdb12f5b9952ca7e91cf8f17c5d729955c8"}]},{"bom-ref":"bbcc50a122dffa7a","type":"file","name":"/usr/share/zoneinfo/Europe/Vienna","hashes":[{"alg":"SHA-1","content":"1da9833989405bd5ff21d58013704f9f00cefd7b"},{"alg":"SHA-256","content":"6662379000c4e9b9eb24471caa1ef75d7058dfa2f51b80e4a624d0226b4dad49"}]},{"bom-ref":"d844535422ad6f37","type":"file","name":"/usr/share/zoneinfo/Europe/Vilnius","hashes":[{"alg":"SHA-1","content":"88bfe2ba142bad0856984a813ac8b93939fd6b3e"},{"alg":"SHA-256","content":"505cd15f7a2b09307c77d23397124fcb9794036a013ee0aed54265fb60fb0b75"}]},{"bom-ref":"c3e87acffc0cbc8b","type":"file","name":"/usr/share/zoneinfo/Europe/Volgograd","hashes":[{"alg":"SHA-1","content":"a4deb32b25919c4fbeec94d043abbdcc27b45bd6"},{"alg":"SHA-256","content":"46016fb7b9b367e4ed20a2fd0551e6a0d64b21e2c8ba20dd5de635d20dbfbe4b"}]},{"bom-ref":"77638b943bf346a4","type":"file","name":"/usr/share/zoneinfo/Europe/Warsaw","hashes":[{"alg":"SHA-1","content":"011e06118f3e209794b175332ffb109e2583e4f7"},{"alg":"SHA-256","content":"4e22c33db79517472480b54491a49e0da299f3072d7490ce97f1c4fd6779acab"}]},{"bom-ref":"c5e76f0ddedd3ab5","type":"file","name":"/usr/share/zoneinfo/Europe/Zagreb","hashes":[{"alg":"SHA-1","content":"e39288f28df39d863141dbc771b897663d5bba0c"},{"alg":"SHA-256","content":"799e8a8826651db19a97b6231c4aca1813391e942ddaf289ceefcb1f868e620d"}]},{"bom-ref":"9c20875c16f981b7","type":"file","name":"/usr/share/zoneinfo/Europe/Zurich","hashes":[{"alg":"SHA-1","content":"782d7d6812933a263ebfff012a0120d480071b1b"},{"alg":"SHA-256","content":"2b9418ed48e3d9551c84a4786e185bd2181d009866c040fbd729170d038629ef"}]},{"bom-ref":"483cdd68a4d55229","type":"file","name":"/usr/share/zoneinfo/Factory","hashes":[{"alg":"SHA-1","content":"d970812ef3dca71b59cc3dab08ba3391d4dd1418"},{"alg":"SHA-256","content":"6851652b1f771d7a09a05e124ae4e50fc719b4903e9dee682b301ae9e5f65789"}]},{"bom-ref":"e7152a1525f97c05","type":"file","name":"/usr/share/zoneinfo/Indian/Antananarivo","hashes":[{"alg":"SHA-1","content":"0bb320226cc29e4a4698db1346d6989367f1fd44"},{"alg":"SHA-256","content":"7c045fb862767cb86ae329a1a808dbfb8d04910550be71a4fcf5ebe5e5824c99"}]},{"bom-ref":"ddcd840f756bf1f2","type":"file","name":"/usr/share/zoneinfo/Indian/Chagos","hashes":[{"alg":"SHA-1","content":"20e78a05202ee8fdfc3ecdc06c53ffa5b41b7198"},{"alg":"SHA-256","content":"d9eaeb5f329d1487295342fe5d18521f184d69b2336c8e655d5dcfaba96de346"}]},{"bom-ref":"d1020d99212a0670","type":"file","name":"/usr/share/zoneinfo/Indian/Christmas","hashes":[{"alg":"SHA-1","content":"e17fa64511871e3696a2cabede22f25a54c891a1"},{"alg":"SHA-256","content":"091b425a489f23f6570e58e9e6dbe6a9ace1031b239848b1eed0f1ec23855b2d"}]},{"bom-ref":"1832556a247cb00a","type":"file","name":"/usr/share/zoneinfo/Indian/Cocos","hashes":[{"alg":"SHA-1","content":"a5fa389f7caae80b219769e37dbc5256578943ab"},{"alg":"SHA-256","content":"4cf1a8ba68d9da36e51d7e8e2f58fb5179c7b3d51ad9e211eb8637b904d97c8c"}]},{"bom-ref":"345c3866eb0b2a16","type":"file","name":"/usr/share/zoneinfo/Indian/Comoro","hashes":[{"alg":"SHA-1","content":"f718ec27068898d7f08b5ce37dcaf8cb04667f0c"},{"alg":"SHA-256","content":"4f2dc7f436427a68c992f877d9c331baffef0f65023fd9bca4c0dd697e88ff70"}]},{"bom-ref":"eab9b6596bd6d150","type":"file","name":"/usr/share/zoneinfo/Indian/Kerguelen","hashes":[{"alg":"SHA-1","content":"6ff775d5e3ecf1da48a9d6ccad34c0723bf69573"},{"alg":"SHA-256","content":"993f72e2d4c318a331e6fba16e526c416575bba7878b1fdefa09a88ac8c4e908"}]},{"bom-ref":"4fd6069ae6191f39","type":"file","name":"/usr/share/zoneinfo/Indian/Mahe","hashes":[{"alg":"SHA-1","content":"15f13d46ae9eeb3c27596af0c0218caf6a283786"},{"alg":"SHA-256","content":"a0144cd0e7274c509ab19d5bad430573a876f63e8378aae989f08be5d9053fa6"}]},{"bom-ref":"051f7a4deb81d8c7","type":"file","name":"/usr/share/zoneinfo/Indian/Maldives","hashes":[{"alg":"SHA-1","content":"ce36944fc0ff3169fa4e7830eaee2756bf477244"},{"alg":"SHA-256","content":"17bddf7d57c1a14a07aded3e0f0b2242b60970ba4f396f892469379fcf253395"}]},{"bom-ref":"b78c30a423592d2c","type":"file","name":"/usr/share/zoneinfo/Indian/Mauritius","hashes":[{"alg":"SHA-1","content":"689162855b79e8faa59b13a6712031285e751d32"},{"alg":"SHA-256","content":"667aab7357218a695c889b1804e97436f2079eb35d0b19dc1b159ccead4f05e2"}]},{"bom-ref":"b9675fca334808cf","type":"file","name":"/usr/share/zoneinfo/Indian/Mayotte","hashes":[{"alg":"SHA-1","content":"0fd6b7080df4ff3f3984e3d3195c12370e7ec3f1"},{"alg":"SHA-256","content":"ab52952d2b74e897e330f67b329a0a4c7d34e9e585cce1ada8a10cbd4d11523f"}]},{"bom-ref":"eaa8e0a02e2c80d4","type":"file","name":"/usr/share/zoneinfo/Indian/Reunion","hashes":[{"alg":"SHA-1","content":"735d33ec8ffd3f3687a1f7627144dd0544327c52"},{"alg":"SHA-256","content":"6cd43bc15d219dfb98653d350d5f87682f0518e2ee08faa03ee5fbbef1dd08e1"}]},{"bom-ref":"551a5c187716594b","type":"file","name":"/usr/share/zoneinfo/Pacific/Apia","hashes":[{"alg":"SHA-1","content":"14aa27462a5faee1a52ef40a9368f895de4852d9"},{"alg":"SHA-256","content":"33740ab29ef943b1f55f769e13ff59a90962f5a12434209072d650e6c10abb4d"}]},{"bom-ref":"df4b730095a5a0f4","type":"file","name":"/usr/share/zoneinfo/Pacific/Auckland","hashes":[{"alg":"SHA-1","content":"78d4d3a481c49ab7ff31722bced30e1c31e8bc98"},{"alg":"SHA-256","content":"8000e3a323e8fd0212414e9426b020707a771c368ca0e151747f9ddb7b814b27"}]},{"bom-ref":"4479e74a7f16da0e","type":"file","name":"/usr/share/zoneinfo/Pacific/Bougainville","hashes":[{"alg":"SHA-1","content":"1d71be2e85de3d835c87622fd8eade7c3e902ffb"},{"alg":"SHA-256","content":"85613ce9e5e7371faf0016e9efe61222a5b279c1cf30858b7ed565a00a0f84bf"}]},{"bom-ref":"34abb387a9c614a1","type":"file","name":"/usr/share/zoneinfo/Pacific/Chatham","hashes":[{"alg":"SHA-1","content":"c1f61e17afb35ed7112dd165af69fb1d59019ec0"},{"alg":"SHA-256","content":"c617b155ce657c9fea02fd9ddc7ac823a95f452c4a6580408d8db3a58902184f"}]},{"bom-ref":"00b8a259950cedc6","type":"file","name":"/usr/share/zoneinfo/Pacific/Chuuk","hashes":[{"alg":"SHA-1","content":"79d05a0afe33d871cbe1d87edb2a00177403c88c"},{"alg":"SHA-256","content":"1faba48c1b9392bf8daa049689f4d9aa6c0ba3e890ed1db0f5696fb8ce0a1047"}]},{"bom-ref":"753db06fc14ad603","type":"file","name":"/usr/share/zoneinfo/Pacific/Easter","hashes":[{"alg":"SHA-1","content":"726b80771cfebc39996d16c9d6e1002931f0f5b1"},{"alg":"SHA-256","content":"41bb9b06cff1425bcac1e027bab8721e320ae238bbec68781bebac5ee97a5d53"}]},{"bom-ref":"b6dfa4af7b4df9ab","type":"file","name":"/usr/share/zoneinfo/Pacific/Efate","hashes":[{"alg":"SHA-1","content":"e69d42d66b6478df4bd2a631f4cd3763a942a875"},{"alg":"SHA-256","content":"a12c4d710631e7ed45536ff21f31c8fa14fe74c25c3f1cf2e1799d2355315c0a"}]},{"bom-ref":"4fcd4dab2c930147","type":"file","name":"/usr/share/zoneinfo/Pacific/Fakaofo","hashes":[{"alg":"SHA-1","content":"c34621b50b6fe39927d1b39bc277ddcf1db182b7"},{"alg":"SHA-256","content":"a8ea1da5330a8f3b6f6485d52defdffe467a59c1e5f5f08b13d66ccaf74528b2"}]},{"bom-ref":"beec98660bed83c3","type":"file","name":"/usr/share/zoneinfo/Pacific/Fiji","hashes":[{"alg":"SHA-1","content":"270361925ed84f38d72b5c7d85b13e62a5b77abc"},{"alg":"SHA-256","content":"8c1e456ceb029c7550436a213e25844143e11ba2726c1dcda20dea4fa5894342"}]},{"bom-ref":"3b038801329b0311","type":"file","name":"/usr/share/zoneinfo/Pacific/Funafuti","hashes":[{"alg":"SHA-1","content":"cf40860d1a209fee8fb0671b3e8cb95a1ec89fc9"},{"alg":"SHA-256","content":"3df36747c8f10d8478944b8b55d81ae3ebb9fa6db3b11e971e7d33145d2d5648"}]},{"bom-ref":"42f8fe032f312f89","type":"file","name":"/usr/share/zoneinfo/Pacific/Galapagos","hashes":[{"alg":"SHA-1","content":"ff648042958297445dcec56f99dc672836db6b55"},{"alg":"SHA-256","content":"fc625460e8d28888e83413b6a9dab6de2b0b309e0d0959370ca21119e0dcf010"}]},{"bom-ref":"724cee391b3c7efa","type":"file","name":"/usr/share/zoneinfo/Pacific/Gambier","hashes":[{"alg":"SHA-1","content":"00f0f6608983d465851e49229bfb8ede4d442a67"},{"alg":"SHA-256","content":"8004bb82bd471ffaded2e6272fa796a3928627e07941a88cf26576718e664311"}]},{"bom-ref":"b53497bc59d234c6","type":"file","name":"/usr/share/zoneinfo/Pacific/Guadalcanal","hashes":[{"alg":"SHA-1","content":"6d2aeb6f99fbb109cc8f8dc33e85607c95071865"},{"alg":"SHA-256","content":"3389135aa69241a57500c8722d2be6c2804917b5fd89cac82dbbd0270a7de348"}]},{"bom-ref":"54db45d1c3f60bc5","type":"file","name":"/usr/share/zoneinfo/Pacific/Guam","hashes":[{"alg":"SHA-1","content":"e89887209cf2ea7f4223ca7298e9377b233eaba6"},{"alg":"SHA-256","content":"131f739e67faacd7c6cdeea036964908caf54d3e2b925d929eb85e72b749b9f2"}]},{"bom-ref":"7263653ab794a8da","type":"file","name":"/usr/share/zoneinfo/Pacific/Honolulu","hashes":[{"alg":"SHA-1","content":"5d5313bee3a467f7b5311b263c7d38b52f182164"},{"alg":"SHA-256","content":"7f03d1bf5264e7ab023a2ef9b997ddfc8cb6936692407c770762b9c549523f33"}]},{"bom-ref":"2b2e7b6ca7b5be72","type":"file","name":"/usr/share/zoneinfo/Pacific/Kanton","hashes":[{"alg":"SHA-1","content":"5445af61425cf6e3b4b2bc0fd4a97b71147d822a"},{"alg":"SHA-256","content":"1cd4c02abb07fd1d96dd046529c98d95de4a71774fd328170a3128bdcd62fba4"}]},{"bom-ref":"38f2f989be9be964","type":"file","name":"/usr/share/zoneinfo/Pacific/Kiritimati","hashes":[{"alg":"SHA-1","content":"e83c7bbcdcc83e6934be64fd0a229232365084ab"},{"alg":"SHA-256","content":"8589353a8cfe2e3d4fb9909b355d96248bce2ed0b04b0ab6bbaddc6f567edcd4"}]},{"bom-ref":"9ced6dd1ce5e6b5b","type":"file","name":"/usr/share/zoneinfo/Pacific/Kosrae","hashes":[{"alg":"SHA-1","content":"eb5492ed1cfbef462c850a6c36b2453d6dc5ca80"},{"alg":"SHA-256","content":"4348eb6f8cde0eb77ad5b53857c4ea8cc73421ea7cad667266a274baab2e9f1b"}]},{"bom-ref":"9ca5daac74fe253e","type":"file","name":"/usr/share/zoneinfo/Pacific/Kwajalein","hashes":[{"alg":"SHA-1","content":"418d0c6d24243e19ccbf30c3ba72a3b72951182e"},{"alg":"SHA-256","content":"4e667fd1ffb2490fac6810254575747f8f48b709dee755415e7eab59cad6a874"}]},{"bom-ref":"9bc4566a7b65a33b","type":"file","name":"/usr/share/zoneinfo/Pacific/Majuro","hashes":[{"alg":"SHA-1","content":"2cd093b1debf0347cafb40c4d22490e55d334a5a"},{"alg":"SHA-256","content":"0dfce301c3b5ce88ebe20b9b61064890ca9e20fdbb43f45e06ba3190145192a0"}]},{"bom-ref":"c94d706c7086362d","type":"file","name":"/usr/share/zoneinfo/Pacific/Marquesas","hashes":[{"alg":"SHA-1","content":"def12fdcc1acee6a96e7855cc43382fafddc412e"},{"alg":"SHA-256","content":"153c4f2535ad938f0b55bdcdd94eb828ba4bb26beed03401b9b4c283e76fc863"}]},{"bom-ref":"0d5af9232c43c4e0","type":"file","name":"/usr/share/zoneinfo/Pacific/Midway","hashes":[{"alg":"SHA-1","content":"41fe30afb68b98e336f5fe43086ab7fb274fa5b0"},{"alg":"SHA-256","content":"9b903c517a790a878e17f41acd44f8782af3963a4673ae296d93ab906494cad9"}]},{"bom-ref":"088f21e14003cc23","type":"file","name":"/usr/share/zoneinfo/Pacific/Nauru","hashes":[{"alg":"SHA-1","content":"fb4f15ec890f2db5cf829699cb96948630b9ec46"},{"alg":"SHA-256","content":"f4048a80b1c1fbc9ec4c42b5029cdf4c7d3242d6cd026197f8923bb87662aa70"}]},{"bom-ref":"4d6d1ba4e38b3c13","type":"file","name":"/usr/share/zoneinfo/Pacific/Niue","hashes":[{"alg":"SHA-1","content":"2b44b2ad62d2fbe5ee390347fdcd8c29659ce2e9"},{"alg":"SHA-256","content":"3a5957c6e927711edaf92326745a31e5acf5c6920f3216da85086d39b9a9b833"}]},{"bom-ref":"676a557623880c3c","type":"file","name":"/usr/share/zoneinfo/Pacific/Norfolk","hashes":[{"alg":"SHA-1","content":"ad97c313e51f794abaa6e2dfddc8984330d1e296"},{"alg":"SHA-256","content":"0cc757d419b5f25ccdba2096cf07de1d43111973d2f2fe405a787efc45ff019c"}]},{"bom-ref":"d1c67948b99d4d8e","type":"file","name":"/usr/share/zoneinfo/Pacific/Noumea","hashes":[{"alg":"SHA-1","content":"ba9a1ab97d0229d08be4ea87688f76517829f248"},{"alg":"SHA-256","content":"b641f1c67c6c5d33aacf76335a2d269214c220e37383e5bb12949131d3e329d4"}]},{"bom-ref":"9c0279af62080863","type":"file","name":"/usr/share/zoneinfo/Pacific/Pago_Pago","hashes":[{"alg":"SHA-1","content":"4c388c7f9a7700517fc6577943f3efe3bdddd3eb"},{"alg":"SHA-256","content":"7c262b62985863aad47f13b0ef5db2e5cc917b5d38002de9a2ea83ddb0883458"}]},{"bom-ref":"2035e39944e7cf78","type":"file","name":"/usr/share/zoneinfo/Pacific/Palau","hashes":[{"alg":"SHA-1","content":"9065568520f50f092624dd58098648b7d2e4fdd3"},{"alg":"SHA-256","content":"68dd876d3d2b7aac0aaed2ca0caf4cdb36f47748a474d953aeb9ed571747ebaa"}]},{"bom-ref":"16fdedc1f916f474","type":"file","name":"/usr/share/zoneinfo/Pacific/Pitcairn","hashes":[{"alg":"SHA-1","content":"193bd97bcd130c2a9147722c9136e8e23ddbe6f0"},{"alg":"SHA-256","content":"5388c052ebec44da32f17acf6b5e98a5c5c272a1c9634bba26f08d80f1163b57"}]},{"bom-ref":"baec12d3e9220dcd","type":"file","name":"/usr/share/zoneinfo/Pacific/Pohnpei","hashes":[{"alg":"SHA-1","content":"e48f1c5bada841c0740549d8bb38cb9fb6ff6038"},{"alg":"SHA-256","content":"394e49033055cfca49245832fe283191982e924f13ac0e3bfb81f97a11f85bf0"}]},{"bom-ref":"11b4200cbc01ce77","type":"file","name":"/usr/share/zoneinfo/Pacific/Port_Moresby","hashes":[{"alg":"SHA-1","content":"331542d6faf6ab15ffd364d57fbaa62629b52b94"},{"alg":"SHA-256","content":"9c1dfa1c15994dd8774e53f40cb14dcf529143468721f1dba7b2c2e14ae9f5f0"}]},{"bom-ref":"e8fbbe8f47830475","type":"file","name":"/usr/share/zoneinfo/Pacific/Rarotonga","hashes":[{"alg":"SHA-1","content":"e4519321d37b1ab7fe54a4490ad92b1b0c6a5b22"},{"alg":"SHA-256","content":"c0f12ca176f20e7ba17f39202ef52a852ceb331fc50f8dae00f96e48f321dc17"}]},{"bom-ref":"a2e017fc37dfb130","type":"file","name":"/usr/share/zoneinfo/Pacific/Saipan","hashes":[{"alg":"SHA-1","content":"a17a9f10a36680f61222a8545e4d69d0c2326e43"},{"alg":"SHA-256","content":"f1d685991ea1f04d186f9c9920b6d5905220348b5291a34be8be71f4aa717774"}]},{"bom-ref":"651088c6967cae5f","type":"file","name":"/usr/share/zoneinfo/Pacific/Tahiti","hashes":[{"alg":"SHA-1","content":"1a32f10a8437c55ca9653afdd99774897ea79123"},{"alg":"SHA-256","content":"0517dff46dc4fa258a84e591d56bb4d99d223208ebc035d5f9736ba88b577536"}]},{"bom-ref":"e7be38cd0adbcbaa","type":"file","name":"/usr/share/zoneinfo/Pacific/Tarawa","hashes":[{"alg":"SHA-1","content":"244ed7d52bc39d915e1f860727ecfe3f4b1ae121"},{"alg":"SHA-256","content":"53268a8a6b11f0b8e02fc67683ae48d074efaf7b4c66e036c1478107afd9a7d7"}]},{"bom-ref":"bafa1b2593ba74a6","type":"file","name":"/usr/share/zoneinfo/Pacific/Tongatapu","hashes":[{"alg":"SHA-1","content":"f76d2ef606379bf8ffcb4d9d0565501c70041df9"},{"alg":"SHA-256","content":"3a9a4166a4c06626fd1d8ed4f400be25abceee6e8dc4f194b547cf40097da016"}]},{"bom-ref":"5052f37b5be3d780","type":"file","name":"/usr/share/zoneinfo/Pacific/Wake","hashes":[{"alg":"SHA-1","content":"2c91e4673e7c6e06778a7fda12fd80d0e17c582a"},{"alg":"SHA-256","content":"483c1f91de23a0b0bc408712c2683cf69f720267bfe028d763b0b998c2ec22ea"}]},{"bom-ref":"05856de93225efad","type":"file","name":"/usr/share/zoneinfo/Pacific/Wallis","hashes":[{"alg":"SHA-1","content":"99d5769ad124c605a5ac98aa9eb8a88ef3417d77"},{"alg":"SHA-256","content":"0e68cea3f0d2ef4ca81686b2baf04dfb081bbf4262c9a4d9d2eca7c08239a468"}]},{"bom-ref":"7d218e00e1a82ecd","type":"file","name":"/usr/share/zoneinfo/iso3166.tab","hashes":[{"alg":"SHA-1","content":"658298663cd122665c3f4b2019be2663aab26185"},{"alg":"SHA-256","content":"837c80785080c8433fd9d4ea87e78f161ac7a40389301c5153d4f90198baeb2a"}]},{"bom-ref":"5c25c1e3b707e789","type":"file","name":"/usr/share/zoneinfo/leap-seconds.list","hashes":[{"alg":"SHA-1","content":"f5dcadd9bc19e6af182f36f5ce0fc3e2ab5deb19"},{"alg":"SHA-256","content":"506e737d1a950148f0daed3c75a55ad497a0f2fa1a82661a361882dd8f4b2093"}]},{"bom-ref":"836b4771ba1c75e4","type":"file","name":"/usr/share/zoneinfo/leapseconds","hashes":[{"alg":"SHA-1","content":"0729dcd5b138f1d7f28e687ff5a73c4c92f06f7c"},{"alg":"SHA-256","content":"d6c8c0330527d995de5e50af9c07b929fa9d69d92e723cfb623b4ae6fae6d3b5"}]},{"bom-ref":"ac391dba940fbb42","type":"file","name":"/usr/share/zoneinfo/tzdata.zi","hashes":[{"alg":"SHA-1","content":"ed180d70b5cf5d6bb9be7e351010f2ddb1d8ac61"},{"alg":"SHA-256","content":"2a3d1b06c4214c390288bf989f543962aeb8a98f6da374527a2de0501746d513"}]},{"bom-ref":"bb0bb5d20f00445e","type":"file","name":"/usr/share/zoneinfo/zone.tab","hashes":[{"alg":"SHA-1","content":"4f9c2681dad62e7eb99c7ed3a376a04d2cc581e9"},{"alg":"SHA-256","content":"586b4207e6c76722de82adcda6bf49d761f668517f45a673f64da83b333eecc4"}]},{"bom-ref":"fed6ba2277ca98a9","type":"file","name":"/usr/share/zoneinfo/zone1970.tab","hashes":[{"alg":"SHA-1","content":"0409ecccab58b2cd0d5aa758d2a518354dd83bdb"},{"alg":"SHA-256","content":"e9d9fe30942a880f756b73f649667d8647a1ecf2131149445d9cc24c65e4ee8f"}]},{"bom-ref":"b0afc08418b5f194","type":"file","name":"/usr/share/zoneinfo/zonenow.tab","hashes":[{"alg":"SHA-1","content":"b70baa4adc9ef3f065a4501814912acd0b9dbf20"},{"alg":"SHA-256","content":"a3c79f87a5a2b64748e106f994e2f979c04fd9416de7b92a1669c39d4ed84b0c"}]},{"bom-ref":"b21bde815981b92d","type":"file","name":"/var/lib/dpkg/status.d/tzdata","hashes":[{"alg":"SHA-1","content":"8ce6f1e3bf98323680d9f3a27b7238232232e6bf"},{"alg":"SHA-256","content":"cceef28384ff713ff583a9d17059d61ff420e43974a10cbba58cd6cd4b2a029b"}]},{"bom-ref":"894b2b668952a6a7","type":"file","name":"/var/lib/dpkg/status.d/tzdata.md5sums","hashes":[{"alg":"SHA-1","content":"483ed8b2d22843feda239c3edd710554de9c92fe"},{"alg":"SHA-256","content":"8229a7a88ff9d1e759461f114e9637d72623e9880fc539edfc16e7a51ee4260b"}]},{"bom-ref":"2a894aa92100ee6b","type":"file","name":"/usr/share/doc/tzdata-legacy/NEWS.Debian.gz","hashes":[{"alg":"SHA-1","content":"214a8f9bc8c950365011c2f9514ab9c0d8c713c1"},{"alg":"SHA-256","content":"70b372edce5f0ddf6436f1e8a95af03cb5e8002f25a565b4a6ad0eb3de24045f"}]},{"bom-ref":"3bdc594cb7a1bce4","type":"file","name":"/usr/share/doc/tzdata-legacy/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"da27f219f5831c5d642795fbf804cae82efdb500"},{"alg":"SHA-256","content":"8491eecc093b69f9d1316f49163ec6c113944d8167be314a6780e89909d83502"}]},{"bom-ref":"646b56beedd73b9b","type":"file","name":"/usr/share/doc/tzdata-legacy/changelog.gz","hashes":[{"alg":"SHA-1","content":"410db8f100d8aebe8b238e0e1632439de13aef1f"},{"alg":"SHA-256","content":"3da6f4ed54559c6f7d4d53ad239f470bed0ccb7e407eb6c9026b59114884f0e1"}]},{"bom-ref":"12141f13a70d55ba","type":"file","name":"/usr/share/doc/tzdata-legacy/copyright","hashes":[{"alg":"SHA-1","content":"aea2b97caa943cd88b5c1e03d1ac7055425f9aec"},{"alg":"SHA-256","content":"cb61132bc0fc7b26ef5a82ee18b2fb644a1362f4f286ed980ff22e408471f59a"}]},{"bom-ref":"472002e45cd782d8","type":"file","name":"/usr/share/zoneinfo/right/Africa/Abidjan","hashes":[{"alg":"SHA-1","content":"bda061f8aa2517793e5a0c28a5dafd8d9479813f"},{"alg":"SHA-256","content":"f4233616006266407f7cb61f082a30b7346cfc41cb473faeace08240db03ebaf"}]},{"bom-ref":"2d633afd3fd1a12b","type":"file","name":"/usr/share/zoneinfo/right/Africa/Accra","hashes":[{"alg":"SHA-1","content":"beae7c725defb2e182e426856c7dffdbcb0d33c4"},{"alg":"SHA-256","content":"3db7416ac43089c7fcc53dec6dbd2b334ca4e06652e771e6355dbad41bfe7b4b"}]},{"bom-ref":"eecd794f476c9d07","type":"file","name":"/usr/share/zoneinfo/right/Africa/Addis_Ababa","hashes":[{"alg":"SHA-1","content":"79e3a8346c6a96bd507886ec3ce8aec49a95cae4"},{"alg":"SHA-256","content":"924c30d67fc68bdb12ed7079c18eb1ac03e5d38d4a83363bb61d30ec13a1111a"}]},{"bom-ref":"1d663dda2dffa9b3","type":"file","name":"/usr/share/zoneinfo/right/Africa/Algiers","hashes":[{"alg":"SHA-1","content":"0a4505f2291513c110705ec63eb3ba21e90a0bce"},{"alg":"SHA-256","content":"d02d23d1418aa96f67421bd719a2bc0e18eb7fea9dc577a3f718a9f88572eb34"}]},{"bom-ref":"17a72f82c216dd42","type":"file","name":"/usr/share/zoneinfo/right/Africa/Asmara","hashes":[{"alg":"SHA-1","content":"7e957c2a54366b4e75258c1a22d40c03fc83e275"},{"alg":"SHA-256","content":"8ea2865e4163f6c640c6f143dd9e6260efb1ab5f60070f3498666a87ac578bea"}]},{"bom-ref":"d016e070cee90e50","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bamako","hashes":[{"alg":"SHA-1","content":"96e67ce1fdc97ee9ed8dda78a9d11108d91df8e6"},{"alg":"SHA-256","content":"857f355e21e759afc90abd82df25fd15b1618d3c53981a38dd863daf01ce1c91"}]},{"bom-ref":"9f70191829567e54","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bangui","hashes":[{"alg":"SHA-1","content":"5801fd99f890ded7b0c6023254d45fc4d620e04d"},{"alg":"SHA-256","content":"a7c00c1a36b0e148511d10ae04dbc3f6ded3d5fdd516585036e8322967ff8298"}]},{"bom-ref":"69bad9e878c40ea5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Banjul","hashes":[{"alg":"SHA-1","content":"5eeab80341918c09a1ee4a17447ddfa89cf34771"},{"alg":"SHA-256","content":"4a4d3217c11262eb2b37da2b2ce12403e795f0d83154a18cfd4c834152829d71"}]},{"bom-ref":"a2ecf9949e9e35f5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bissau","hashes":[{"alg":"SHA-1","content":"9732d8fd2c7f9afd53029fd598a15e690df37e87"},{"alg":"SHA-256","content":"abfd4d46b7f68e7833b05af8e17ed098c86aae1b305add3990c4d955b51c8613"}]},{"bom-ref":"07c00f28bed7b2e5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Blantyre","hashes":[{"alg":"SHA-1","content":"e2d42d22c26241fb82352c3386717b900e7824a2"},{"alg":"SHA-256","content":"b123be3f9639b3ec39d7a1bed93ba1625d5510ca798f8870eec17a48912b4974"}]},{"bom-ref":"acb76ca296c126c0","type":"file","name":"/usr/share/zoneinfo/right/Africa/Brazzaville","hashes":[{"alg":"SHA-1","content":"a5d9c618f24b9b3ec43978c97491c2312c09ec2d"},{"alg":"SHA-256","content":"6f6ed353cdd362672909d139fb8321ca2e6c2e2c6f0cb5c37e4d50aa24602f50"}]},{"bom-ref":"690e4f9506ae2d21","type":"file","name":"/usr/share/zoneinfo/right/Africa/Bujumbura","hashes":[{"alg":"SHA-1","content":"90f0228cbd76399a35952a932f357ebd765c2dad"},{"alg":"SHA-256","content":"4fb19b40ad2ba4b67aa995431d5ffc9430585e84fb6fbd73bba464ecb86ce411"}]},{"bom-ref":"4c140fde5263eee5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Cairo","hashes":[{"alg":"SHA-1","content":"b3e9ca230bd40565122e7dca72584b0e338bd154"},{"alg":"SHA-256","content":"a8245264ff0d0ffc60149218436d3e6e8e84ff32c042dc15a416f31666112d8d"}]},{"bom-ref":"5f1d3366db5fd171","type":"file","name":"/usr/share/zoneinfo/right/Africa/Casablanca","hashes":[{"alg":"SHA-1","content":"01912cf0fd8f0602ab59dcec4d08f29a1e481b11"},{"alg":"SHA-256","content":"03fd202ba98d914fc76a27e342d677c19dba8be46c3079daeafbd97a9481f581"}]},{"bom-ref":"106468f6ed59cb3a","type":"file","name":"/usr/share/zoneinfo/right/Africa/Ceuta","hashes":[{"alg":"SHA-1","content":"321d0017b3840cb9f9210d8a110e1ec704795794"},{"alg":"SHA-256","content":"45ad241f670667961640bc49249327fe45086b0644d6f89d2efe552c9c77b561"}]},{"bom-ref":"710d897012f8d644","type":"file","name":"/usr/share/zoneinfo/right/Africa/Conakry","hashes":[{"alg":"SHA-1","content":"3e1d24142f4295cea6d9616bfb7698241de84273"},{"alg":"SHA-256","content":"dcc482ff0caeb033d42b73443b74b95f5a253f7a2c20cb0f0cd68f88110f7269"}]},{"bom-ref":"c37ce2718103d2ca","type":"file","name":"/usr/share/zoneinfo/right/Africa/Dakar","hashes":[{"alg":"SHA-1","content":"3efc5e3c960b402f8d5ee0aef6df6edba4a11a13"},{"alg":"SHA-256","content":"cc6238b7cdec9110603b4784c99136cb458396ef83cd10393a2a705f3871f394"}]},{"bom-ref":"a1ff1b0e7b5a68f6","type":"file","name":"/usr/share/zoneinfo/right/Africa/Dar_es_Salaam","hashes":[{"alg":"SHA-1","content":"f501f3d18b95328c7ff228042a1422ac84abb224"},{"alg":"SHA-256","content":"aad4c1a1310c322ca068f02d0ac4fbe1541ff1e8555963d9c40cfb5298515941"}]},{"bom-ref":"367cfb08f0914fd0","type":"file","name":"/usr/share/zoneinfo/right/Africa/Djibouti","hashes":[{"alg":"SHA-1","content":"ce9aebbdf9928cc32967e0ca54a3411007334d12"},{"alg":"SHA-256","content":"bee0c61fe4c69adddda2e7e56539ba495734c4f9e517833c1e3b5763f53712e6"}]},{"bom-ref":"d3b220538455bbc7","type":"file","name":"/usr/share/zoneinfo/right/Africa/Douala","hashes":[{"alg":"SHA-1","content":"ebeeab1959b17cd2384392f1d7c1f7c6bb0d9559"},{"alg":"SHA-256","content":"2e738c3dee7261034d769a4127266914ef110eb37c09a588daa93c46324df838"}]},{"bom-ref":"dadb7ce0de90b0ec","type":"file","name":"/usr/share/zoneinfo/right/Africa/El_Aaiun","hashes":[{"alg":"SHA-1","content":"c4eb8b6b9b4d962e0c3f4cd408d9452128158368"},{"alg":"SHA-256","content":"8e7634d74b2f98a99b5e2c97b24ee0f5d4e48df2220beb4bb38fb68a2b93cb8d"}]},{"bom-ref":"f8f30c8236383d55","type":"file","name":"/usr/share/zoneinfo/right/Africa/Freetown","hashes":[{"alg":"SHA-1","content":"ac1aa43cfe0422e893a6ca69e916d75408407653"},{"alg":"SHA-256","content":"18acc7f5c2a1ae73bc352d8db0cb29908b10bca010738c78229a77484e6f583e"}]},{"bom-ref":"78497b4bae98842a","type":"file","name":"/usr/share/zoneinfo/right/Africa/Gaborone","hashes":[{"alg":"SHA-1","content":"15523fce89986ea4ea382ce66eb4870c49d19cc4"},{"alg":"SHA-256","content":"6a1328397fb3c42c1b61ff98cd8f3699bf100dc7d0361e1b2455d0dce37d9144"}]},{"bom-ref":"ec5cceff3475fc61","type":"file","name":"/usr/share/zoneinfo/right/Africa/Harare","hashes":[{"alg":"SHA-1","content":"f33d087477d6d229a2eed7ef5ac3ebcbb535984e"},{"alg":"SHA-256","content":"67521bc3d59040eaaacdac46cffd947acf6b12d58c706230a52e4b35d4df89a8"}]},{"bom-ref":"33228a7681e090d6","type":"file","name":"/usr/share/zoneinfo/right/Africa/Johannesburg","hashes":[{"alg":"SHA-1","content":"464ff72e4a583e592745cec1ceb4327f5f160244"},{"alg":"SHA-256","content":"170db51e1f05eea6e9a14a085884136f4aa78e000b1aa8605806e09ac2cf94be"}]},{"bom-ref":"88ea1de6beebda6f","type":"file","name":"/usr/share/zoneinfo/right/Africa/Juba","hashes":[{"alg":"SHA-1","content":"15653f1b6792fcce5546542406c254e72d95bcb2"},{"alg":"SHA-256","content":"9ed0073fe89423937cd7847b315c793813c7a0a729fd067559d7a12993630256"}]},{"bom-ref":"28e764b50b18d0d5","type":"file","name":"/usr/share/zoneinfo/right/Africa/Kampala","hashes":[{"alg":"SHA-1","content":"1792009dfc5d07debd794a56a381695fe7098d93"},{"alg":"SHA-256","content":"046fe2d451adea1ee7e452a9f18754fa82f1cdfd1536f8d440fc155a7fad4203"}]},{"bom-ref":"0cd540c00f8dad09","type":"file","name":"/usr/share/zoneinfo/right/Africa/Khartoum","hashes":[{"alg":"SHA-1","content":"a90646304297255cdec671d8cfb84af6abe2bdc5"},{"alg":"SHA-256","content":"5fb7ac496978d461f873e95044333153dc47e4d4172505122f850f1b45c7f33f"}]},{"bom-ref":"0bdbb09857dd31a7","type":"file","name":"/usr/share/zoneinfo/right/Africa/Kigali","hashes":[{"alg":"SHA-1","content":"31dea4da50a3651634b34b3def9673981cd016d8"},{"alg":"SHA-256","content":"78dcfb2f45afbf26a63800b3cc11c81eaba3de311390e7b5c7220b0b34a7dfdb"}]},{"bom-ref":"6391f90e46ac4efc","type":"file","name":"/usr/share/zoneinfo/right/Africa/Kinshasa","hashes":[{"alg":"SHA-1","content":"b1b69d9f2488f8715a58b05a62236205ab0ea7b8"},{"alg":"SHA-256","content":"cc0a5670f8148ac8315ce8b33f18ddea985d6fefff3423dea09687358613bb97"}]},{"bom-ref":"8329ebc92b54f681","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lagos","hashes":[{"alg":"SHA-1","content":"82cebd14ddd353a0f32d37abc5a367831403df8a"},{"alg":"SHA-256","content":"4dd77f825f7133e6125b66c9354c7a4158a45bdcd68b9a8a33a8bc8951770d5b"}]},{"bom-ref":"f30aa999746860de","type":"file","name":"/usr/share/zoneinfo/right/Africa/Libreville","hashes":[{"alg":"SHA-1","content":"09f64cf4637b9ced81300c241da307d98d9e6155"},{"alg":"SHA-256","content":"666b48c9f1bf6b4e6f623e623264b506b0ff379c50eadcf33fb47b6b14dfcf3e"}]},{"bom-ref":"1fe032995ef33744","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lome","hashes":[{"alg":"SHA-1","content":"6887f5da64c2367bfeac6172fd4aa8160388b4dc"},{"alg":"SHA-256","content":"0edc54a84d8034c170f6a4e61d4737a7ace34ed743902557efff4291adb88f15"}]},{"bom-ref":"49896f13784be1af","type":"file","name":"/usr/share/zoneinfo/right/Africa/Luanda","hashes":[{"alg":"SHA-1","content":"0c74fdbb7eccc93928aa221c64b1d32ff844d68f"},{"alg":"SHA-256","content":"08ab03961ff6e4a207b98b4b8f7923d52bf12c982deb737d2907ef756f0471be"}]},{"bom-ref":"1e3f06e945493c2a","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lubumbashi","hashes":[{"alg":"SHA-1","content":"ede995631fd1f49a3b29e96723a3456eefa30cde"},{"alg":"SHA-256","content":"6cdf4877fca59f4a0c0a06d43da9c4e10815c31e3d4111d254c582440f1b3842"}]},{"bom-ref":"eada9b7d5bec5058","type":"file","name":"/usr/share/zoneinfo/right/Africa/Lusaka","hashes":[{"alg":"SHA-1","content":"7242f8a901174f8bb087780dc4b524e9928ecbff"},{"alg":"SHA-256","content":"97b8cbc27c78466e1d3239ae267a67b1fd3daa2ce80ef4318996fe54f0b127ef"}]},{"bom-ref":"fe7589ebe5e8399f","type":"file","name":"/usr/share/zoneinfo/right/Africa/Malabo","hashes":[{"alg":"SHA-1","content":"21ed94683ec74d72a2c9c645653d6b3f46c2b8c9"},{"alg":"SHA-256","content":"868819a8d4161e09ab1b8e8386e23f1c978378ae21ee2c1e9770184b0c19886f"}]},{"bom-ref":"16959d1c19b5cb02","type":"file","name":"/usr/share/zoneinfo/right/Africa/Maputo","hashes":[{"alg":"SHA-1","content":"7e913cf5a23c351d96c949f951b6707c59124f19"},{"alg":"SHA-256","content":"104f9c0d29896e42a1eede8db7c24ecfd252fbf2edccb86b707526281f52bb8c"}]},{"bom-ref":"89a58f44183cbf77","type":"file","name":"/usr/share/zoneinfo/right/Africa/Maseru","hashes":[{"alg":"SHA-1","content":"13f6937d6e13c57af763d51dc053104e6e059c53"},{"alg":"SHA-256","content":"3d62b960bca99c47068f12dff2dc88209f3a6f885a53458cc5935cee45121084"}]},{"bom-ref":"8b2ec9cf8d062e99","type":"file","name":"/usr/share/zoneinfo/right/Africa/Mbabane","hashes":[{"alg":"SHA-1","content":"986db46fc03e5e6ca1e743da0d28a7afc5833d39"},{"alg":"SHA-256","content":"c16439331a5cf5300505303eb605362dbe54e4827bb986226fe896464001a432"}]},{"bom-ref":"756a7aa5f7d291b7","type":"file","name":"/usr/share/zoneinfo/right/Africa/Mogadishu","hashes":[{"alg":"SHA-1","content":"39d2a78874cf820ad4fa2f2828bf3c6963f7c33e"},{"alg":"SHA-256","content":"d3b11f333c0681fbb09e54f3d878d8c222730ee39953f6cbf512bd7bbaf71559"}]},{"bom-ref":"b33316779aca13b8","type":"file","name":"/usr/share/zoneinfo/right/Africa/Monrovia","hashes":[{"alg":"SHA-1","content":"25ca500a76fb043cd2677911cbc8ada47a9a270d"},{"alg":"SHA-256","content":"7f08d659647669a66b01775a4a05c0a105d54593f1077aecee1df6f76cca3ad4"}]},{"bom-ref":"4dc9d66e2e06bc2b","type":"file","name":"/usr/share/zoneinfo/right/Africa/Nairobi","hashes":[{"alg":"SHA-1","content":"a3b9351b4692d33218fa9ac6f9e6f8cdd71e159f"},{"alg":"SHA-256","content":"3aa7d8468964feede0a79c2295b2545cd666714f7f8f173a7df597a58c6703e7"}]},{"bom-ref":"558e3405fdd88aec","type":"file","name":"/usr/share/zoneinfo/right/Africa/Ndjamena","hashes":[{"alg":"SHA-1","content":"f51f1935d7aefb47b5fb3017e17f68414d7d5eca"},{"alg":"SHA-256","content":"768c12a3f11682eeb1f6cd0ba9282196a35e1786d37e107645819eb7dc0cce9d"}]},{"bom-ref":"70016032d6cab763","type":"file","name":"/usr/share/zoneinfo/right/Africa/Niamey","hashes":[{"alg":"SHA-1","content":"534912d0e7a81ae2941ce4befdde74dfc5a522a9"},{"alg":"SHA-256","content":"f7736285467b2b68e8a71e8b4981d1e04a2db5445448e8be36ae15bb7b953577"}]},{"bom-ref":"ed18210031351a0b","type":"file","name":"/usr/share/zoneinfo/right/Africa/Nouakchott","hashes":[{"alg":"SHA-1","content":"c3c351e8c0c9d03e78b5385e6d40dbbafbbfa5f6"},{"alg":"SHA-256","content":"e975ad3ab451829624b13d4186e9943c54e933f60f4ad9105ced00d2c93ffb42"}]},{"bom-ref":"d6a44a3eb8b8cf86","type":"file","name":"/usr/share/zoneinfo/right/Africa/Ouagadougou","hashes":[{"alg":"SHA-1","content":"14a0e4df9c5b1c85aae3f4bf0a7ca62e011b2349"},{"alg":"SHA-256","content":"45db327564613a8236fe26ad27bbcc7367c57988def1570b126d276cd14b5ad3"}]},{"bom-ref":"c347b391d05ceaea","type":"file","name":"/usr/share/zoneinfo/right/Africa/Porto-Novo","hashes":[{"alg":"SHA-1","content":"d264883a6d3423f56a78cf59b0f66ef46ea5e769"},{"alg":"SHA-256","content":"17e1c231aececc8efd591e5253f0bc1a4c3e21bff1c2bd656f68c2b9069b457f"}]},{"bom-ref":"0dc3a5725c2410bc","type":"file","name":"/usr/share/zoneinfo/right/Africa/Sao_Tome","hashes":[{"alg":"SHA-1","content":"7ba7bb9a67110a431e39ada050e4c2c0fd7deca2"},{"alg":"SHA-256","content":"d276a52c133e1fd3d6d37d15265a883e65155050f4bc4b5d92f38a6fb46c937c"}]},{"bom-ref":"d409a7003aa3238b","type":"file","name":"/usr/share/zoneinfo/right/Africa/Tripoli","hashes":[{"alg":"SHA-1","content":"41ccc2a1721705dbaa48fc1aebd56a0ee4b7bdd0"},{"alg":"SHA-256","content":"1b7a209b9c51b16703eae332b7145f7d45b9a4b0f5a0fae3bf129616a2cae375"}]},{"bom-ref":"cf53d669e68d868c","type":"file","name":"/usr/share/zoneinfo/right/Africa/Tunis","hashes":[{"alg":"SHA-1","content":"818a62a445da18482141f6375974b1d61982e619"},{"alg":"SHA-256","content":"a892830b9eb033baddf9279b3348286ff9c9b05ff761f3fd28bad037e6496f5d"}]},{"bom-ref":"db850d47b04e037e","type":"file","name":"/usr/share/zoneinfo/right/Africa/Windhoek","hashes":[{"alg":"SHA-1","content":"9cd7fb2cbf9cc7069c0f43c80c12a00ecc443349"},{"alg":"SHA-256","content":"b229e77f5f935574748331a836931531c856f51a6c39cf59092b9abde0976dbe"}]},{"bom-ref":"a9776dc6ef4666aa","type":"file","name":"/usr/share/zoneinfo/right/America/Adak","hashes":[{"alg":"SHA-1","content":"8910beeaa86bdf6ccfb70ac9dbb96ed53a314ec6"},{"alg":"SHA-256","content":"0a34da27e56939efe9de64c2cc247cdcfeba2b8b9e50c7874a37f2686fdefd3f"}]},{"bom-ref":"d1cf097ee5ba0a64","type":"file","name":"/usr/share/zoneinfo/right/America/Anchorage","hashes":[{"alg":"SHA-1","content":"efebf01f223b786b4aaf83e6339211fc44d6d182"},{"alg":"SHA-256","content":"15dfc71e1a15500bee1deec7ca1d9b6d48f90303369e6554a7654c698631930f"}]},{"bom-ref":"3060b014db86f751","type":"file","name":"/usr/share/zoneinfo/right/America/Anguilla","hashes":[{"alg":"SHA-1","content":"f0ce0381f7819c2037a985c6c20c7b8852a11cf1"},{"alg":"SHA-256","content":"368c0a5c9e92a833d976d9c4f526ced4975a172d583c2b47693b02731e823be4"}]},{"bom-ref":"e1b3d1881f2167a2","type":"file","name":"/usr/share/zoneinfo/right/America/Antigua","hashes":[{"alg":"SHA-1","content":"42496976b1421bda04e3952a3580667be7cc6533"},{"alg":"SHA-256","content":"c60332a66770858904fc6aec5a19e124595ec03c001ab8ead41352df53ab4ea5"}]},{"bom-ref":"bb9791f3dee7b945","type":"file","name":"/usr/share/zoneinfo/right/America/Araguaina","hashes":[{"alg":"SHA-1","content":"bf0ba4b1583dc498e2366f7e6d6b6ce3134c974f"},{"alg":"SHA-256","content":"f64e9c23a80b7243ecfb2ccda042c122b8938d218758e1d13d638c8bfb0fcef0"}]},{"bom-ref":"9598b631afadbe7a","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Buenos_Aires","hashes":[{"alg":"SHA-1","content":"3902af7842f9b7a2b752801f50bc6e7d019b309f"},{"alg":"SHA-256","content":"5bbe114444683c1394aedfcdcb50651bf142b1641bfb4eda8eaccf6b00c577bb"}]},{"bom-ref":"6adfc692c08fa3d8","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Catamarca","hashes":[{"alg":"SHA-1","content":"94cfe18f3802f2b4db15e5a0092b924d40f11e13"},{"alg":"SHA-256","content":"9485357c05421b291776e56fcceece8cfe48dd334d2698108e8d4a836c3532e0"}]},{"bom-ref":"4ca6779e3ca5e42a","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Cordoba","hashes":[{"alg":"SHA-1","content":"8adef1be479d4d1ef253a092e7eab4854f0d3d4a"},{"alg":"SHA-256","content":"18907fe2cfc55bbf51f21958bdcdbc809ee8c2f5c68e59a8d712c2279150c8ee"}]},{"bom-ref":"fc6f1a09a7d1ee2e","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Jujuy","hashes":[{"alg":"SHA-1","content":"c136dc30cf77b8a97153ffbcc71fbc9564e9285c"},{"alg":"SHA-256","content":"18344222894ae5988d301ab87150cf36d1782e05ea4749d77e94f711e5a3687c"}]},{"bom-ref":"d5691a2adb9bb18b","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/La_Rioja","hashes":[{"alg":"SHA-1","content":"1d7b8e0a0c760b331ce5ba4f7dea8355e18f8a8c"},{"alg":"SHA-256","content":"bc55341f54cda1455748ccf3f0996fb7c9c0c65805e1d838c9f0f96677b3b166"}]},{"bom-ref":"ec911614c5418ef8","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Mendoza","hashes":[{"alg":"SHA-1","content":"24af0e95e5ea5f4c1011fbd0150823db541262a1"},{"alg":"SHA-256","content":"09728754c717a119dd518bb15c5ddfe6703b2ea075539c940d3cd1fa01b6d59b"}]},{"bom-ref":"a251c64445281e84","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Rio_Gallegos","hashes":[{"alg":"SHA-1","content":"c7674aa3fbe22be937149cee1674e75a76e86245"},{"alg":"SHA-256","content":"28c7d6070a16cca26e8fc8e19bb4a4fc619da0a95b67da58266f74cf48fad075"}]},{"bom-ref":"85c612c3f87fdfbd","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Salta","hashes":[{"alg":"SHA-1","content":"018ea5c878867c3f0e7642c8c7a4ea5ee7d53bab"},{"alg":"SHA-256","content":"3fd63998194309a2ef277b355b78343110bb353fecdfdbcb962eaa7ec24b0626"}]},{"bom-ref":"483cc20e03233596","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/San_Juan","hashes":[{"alg":"SHA-1","content":"34a1efb1cb54a7de5bd133900922a23dae031fbf"},{"alg":"SHA-256","content":"cbc5ad702a832d9c2606128988d08c960d2859305231c2d64dc534008a1a2b27"}]},{"bom-ref":"3d6e73570259a306","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/San_Luis","hashes":[{"alg":"SHA-1","content":"b9c320b677ec6f3e22e1279fa60a1800e8a36ca4"},{"alg":"SHA-256","content":"9debc2f03d41847c27507e63cdb05dd521720d381fd3c72affde649d142545e5"}]},{"bom-ref":"ca14e37658b0e1db","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Tucuman","hashes":[{"alg":"SHA-1","content":"d18e7cf00892a3c15c0dfb5a8cf04031291f5100"},{"alg":"SHA-256","content":"0c64cddbfaebd13aa6e0e769b394be2938e67a977694fbe67137e0dfb7df6f76"}]},{"bom-ref":"6835ba4a7b003475","type":"file","name":"/usr/share/zoneinfo/right/America/Argentina/Ushuaia","hashes":[{"alg":"SHA-1","content":"eab37df98c3eb5f46ca8a17cc72c49c88379215a"},{"alg":"SHA-256","content":"91e4d4c3c0931ddeecc8b4da02020a14d7d8cd11ebd4915b024770283b270414"}]},{"bom-ref":"f9d969f3de3f9142","type":"file","name":"/usr/share/zoneinfo/right/America/Aruba","hashes":[{"alg":"SHA-1","content":"e861fb0fc4d58a6a6d5daff742c31e5e7a365281"},{"alg":"SHA-256","content":"81fab610ca62b324c53eaacc06a9f0707bbf3b6edf57999f45e64a81573b05c0"}]},{"bom-ref":"cdb8ce00dade553a","type":"file","name":"/usr/share/zoneinfo/right/America/Asuncion","hashes":[{"alg":"SHA-1","content":"4aa27ff28d3791ad62e1cb7009a3564ceb1022d0"},{"alg":"SHA-256","content":"8964200355d58e4172e42a43c727eb3a65a3e45fd8aab968e1e401b324e61f3f"}]},{"bom-ref":"c4ab713acb1b1454","type":"file","name":"/usr/share/zoneinfo/right/America/Atikokan","hashes":[{"alg":"SHA-1","content":"60221e6658d20a2b1a3ef214853efcf414ed5311"},{"alg":"SHA-256","content":"2b4b85c66e21b3db8603c853da12bc793657b61db36137bd6416731ca766d83e"}]},{"bom-ref":"fd1120f7b249fa53","type":"file","name":"/usr/share/zoneinfo/right/America/Bahia","hashes":[{"alg":"SHA-1","content":"7ec206f6bcd484dddd374887852dc43ee35b203c"},{"alg":"SHA-256","content":"d49cf8b300965e1479c8fdfa847075c11468c19dcc4a8c43d6c213172d9548cc"}]},{"bom-ref":"3e11db4839c6d292","type":"file","name":"/usr/share/zoneinfo/right/America/Bahia_Banderas","hashes":[{"alg":"SHA-1","content":"1d1c7cea1db8cf709e98c5db47220eb61afe4b32"},{"alg":"SHA-256","content":"afb472d810345ff237accbe2faa037999b99ac41596218899e9e3c74dd595f77"}]},{"bom-ref":"501b8695c98670e3","type":"file","name":"/usr/share/zoneinfo/right/America/Barbados","hashes":[{"alg":"SHA-1","content":"bb74b1308ab826e0d627d5df8e9b9d9c63c551e4"},{"alg":"SHA-256","content":"54ec52f42d10af87788633750887026b0d07e67784f47a886d7919e9876f1b95"}]},{"bom-ref":"3be046eeddb024e7","type":"file","name":"/usr/share/zoneinfo/right/America/Belem","hashes":[{"alg":"SHA-1","content":"a59cb528914d84e3a981e32348835dc15587ec03"},{"alg":"SHA-256","content":"2b44adfa0fdce7b822eef06a0ad9c293899d4e8facbad621467107375fc4414d"}]},{"bom-ref":"b6ea60ce4aefe251","type":"file","name":"/usr/share/zoneinfo/right/America/Belize","hashes":[{"alg":"SHA-1","content":"d858aae95195f1efb535c4e2946e00f5fee97af0"},{"alg":"SHA-256","content":"b2af883061a226e991631b038fa337151e71ed40b8c583c0367dcbb100b418e3"}]},{"bom-ref":"72b8bb4a50fc37c2","type":"file","name":"/usr/share/zoneinfo/right/America/Blanc-Sablon","hashes":[{"alg":"SHA-1","content":"f1e3867c4c2c4a9b17de95aba466736312f217ff"},{"alg":"SHA-256","content":"1c383f3939513aa3351fad54b0c4a609288a5828fb0bdf2423224eeac2520f41"}]},{"bom-ref":"fde52be0fdb2cf56","type":"file","name":"/usr/share/zoneinfo/right/America/Boa_Vista","hashes":[{"alg":"SHA-1","content":"e3e5290b720fcd759683c6e2fb3517713f47be2b"},{"alg":"SHA-256","content":"2f7609f16195a9fbf86631a4fba7d67c12aebf8f6bec3945cfdfe177ef756c92"}]},{"bom-ref":"6622ea7728801338","type":"file","name":"/usr/share/zoneinfo/right/America/Bogota","hashes":[{"alg":"SHA-1","content":"c0568a0e9db563d2d03535b5f819103f2dccb473"},{"alg":"SHA-256","content":"7b53812f2fa251abb476d01dcdc58074061286ed9a4604e808ff704e84db9431"}]},{"bom-ref":"8fd637ee4365b33c","type":"file","name":"/usr/share/zoneinfo/right/America/Boise","hashes":[{"alg":"SHA-1","content":"1b857038d4145e17cd4156524ee9026859734933"},{"alg":"SHA-256","content":"d9d14321a0868ed1a754f46ec46fcfb216d6dd38fff1757d9a81a70663f01894"}]},{"bom-ref":"b783f3b78886658b","type":"file","name":"/usr/share/zoneinfo/right/America/Cambridge_Bay","hashes":[{"alg":"SHA-1","content":"7d61e33cfa757aca51fe90096083d41d875dd977"},{"alg":"SHA-256","content":"4dd3933664bb1bc989be1edd1b655f9644e48b0f9b966e652b5e0826c906ce38"}]},{"bom-ref":"4ed8a5b696f043a8","type":"file","name":"/usr/share/zoneinfo/right/America/Campo_Grande","hashes":[{"alg":"SHA-1","content":"c41a48ca167f2c5055c62c5e8bf209527d20fe57"},{"alg":"SHA-256","content":"fb0e381f18f370109affbe036d0a1ff1d8d007fa4253d1dc789f0fed58427b1a"}]},{"bom-ref":"0571a3a82c2dfe19","type":"file","name":"/usr/share/zoneinfo/right/America/Cancun","hashes":[{"alg":"SHA-1","content":"d99e6bb5ca0041238ec4835e86729b11d67e05cd"},{"alg":"SHA-256","content":"fcf548470161dfa824bd1856f2f3430f3f42da7e4731d83d5d85162c4781bbd0"}]},{"bom-ref":"767662ef22dafedf","type":"file","name":"/usr/share/zoneinfo/right/America/Caracas","hashes":[{"alg":"SHA-1","content":"fcded834c3cd1844518be363d3b24d16c34ceb37"},{"alg":"SHA-256","content":"e7485fc23a6187ea5dccbf1f8ab2b75d59bbbc9127c93f7b16c4d17d46d1694b"}]},{"bom-ref":"aa16bb26ff4c54c5","type":"file","name":"/usr/share/zoneinfo/right/America/Cayenne","hashes":[{"alg":"SHA-1","content":"64f90da9217724e88d0b6fd60c05b091373895ad"},{"alg":"SHA-256","content":"1c339795c2891f95dd87513a052682761b076c3e37b5f1afeae4f428366d74aa"}]},{"bom-ref":"d87bcbe170dbeb8a","type":"file","name":"/usr/share/zoneinfo/right/America/Cayman","hashes":[{"alg":"SHA-1","content":"184e4a0998c66f0da8f80d0058f6fa1b5901cc41"},{"alg":"SHA-256","content":"807ed1757df282b4da1f10c02ad7637f6f337574a34e306f8b89fe0998f107d2"}]},{"bom-ref":"72efc347a306c770","type":"file","name":"/usr/share/zoneinfo/right/America/Chicago","hashes":[{"alg":"SHA-1","content":"9400083ba972c74ab159ad7cc0ef4b70649bdd63"},{"alg":"SHA-256","content":"11a2746cca461012a7b56741cf111c459fed3e89309d9c627556921c4f0216f1"}]},{"bom-ref":"86636618eedd6f5d","type":"file","name":"/usr/share/zoneinfo/right/America/Chihuahua","hashes":[{"alg":"SHA-1","content":"f74787dd61ece5f95fe9c5e05b5dc81c93805308"},{"alg":"SHA-256","content":"3fdfc581d0dc261755aaadfe48b557b631b2a3c9817267eb15b2452432a66690"}]},{"bom-ref":"f0d58a38080f0481","type":"file","name":"/usr/share/zoneinfo/right/America/Ciudad_Juarez","hashes":[{"alg":"SHA-1","content":"741ca259e6ce69bedb8f87ed61b758ed27b32b1f"},{"alg":"SHA-256","content":"907d4d6590917570f8140e2815be1919623a91d8f34f9e236972ecb30124c001"}]},{"bom-ref":"420b06088a2a59db","type":"file","name":"/usr/share/zoneinfo/right/America/Costa_Rica","hashes":[{"alg":"SHA-1","content":"019936bb38cfd6252397a0b33755090819f77822"},{"alg":"SHA-256","content":"931a8cbc44a17c76d8ac879eb70bc36fe3836e56334b167fc30375ed60226f4b"}]},{"bom-ref":"0b29321e02b1ec5b","type":"file","name":"/usr/share/zoneinfo/right/America/Coyhaique","hashes":[{"alg":"SHA-1","content":"af0aaf4a975df5fb5ef363d20360d5ec48f2de09"},{"alg":"SHA-256","content":"01f89105f2c8912dc8ed4e5cc9f053e2faecc77c549339aac0ec570f0b5e2ec8"}]},{"bom-ref":"d32b475a4eaffe70","type":"file","name":"/usr/share/zoneinfo/right/America/Creston","hashes":[{"alg":"SHA-1","content":"38b0c0d59daae3d490e41888cb08f985e94ab7b8"},{"alg":"SHA-256","content":"03520c54683d64fb81f014256f53597770a6b8f768224225445dfa48a0626719"}]},{"bom-ref":"fba6623bb492d616","type":"file","name":"/usr/share/zoneinfo/right/America/Cuiaba","hashes":[{"alg":"SHA-1","content":"dc418a83b00940d3477ebbe11ff2f8f08db0b9bf"},{"alg":"SHA-256","content":"1b86529e12ed8837f4097efa53324ecdef81bf9d5d8cf377c766c9eaa878911b"}]},{"bom-ref":"61e3b55a8b572a58","type":"file","name":"/usr/share/zoneinfo/right/America/Curacao","hashes":[{"alg":"SHA-1","content":"a4923cc31db72f2ce84c7ec5e2753270d15b04b9"},{"alg":"SHA-256","content":"b8553f2f10d0be77fa0da5a541780b6b0b694303a30291436eb6591bfeb9a739"}]},{"bom-ref":"8b16763faa8e0a1a","type":"file","name":"/usr/share/zoneinfo/right/America/Danmarkshavn","hashes":[{"alg":"SHA-1","content":"410aa8311f71add65c7335dd2682cc48ccd9b350"},{"alg":"SHA-256","content":"b0f544bc8ba665b6161ff97e73576e93e67c68e749f3e0e7570c6328a0d01423"}]},{"bom-ref":"cf0a5f7609016882","type":"file","name":"/usr/share/zoneinfo/right/America/Dawson","hashes":[{"alg":"SHA-1","content":"986ac03517f3a3f480e3d823b7325f0819d8107c"},{"alg":"SHA-256","content":"b725095ec5a156d826fbd33eabcd5e586b6704e0f8f3c9eb008239155bc59203"}]},{"bom-ref":"d14174f5c6029db0","type":"file","name":"/usr/share/zoneinfo/right/America/Dawson_Creek","hashes":[{"alg":"SHA-1","content":"d237b7b3d1fb583ca33690558984302bcd4bb5c1"},{"alg":"SHA-256","content":"0050974703fe2be1b07d298ce6353e955e9839e04bc06969a577df0e7fb17e73"}]},{"bom-ref":"a88e642e53b045f6","type":"file","name":"/usr/share/zoneinfo/right/America/Denver","hashes":[{"alg":"SHA-1","content":"3aa537a85902ecefbf7efb76942bd1f647c625e7"},{"alg":"SHA-256","content":"ae1bf405e5ac44760cb20eecb074550da61af3508c01cdf0421abc6e685e754c"}]},{"bom-ref":"068c3d10c5b83d88","type":"file","name":"/usr/share/zoneinfo/right/America/Detroit","hashes":[{"alg":"SHA-1","content":"d174885854b477f4f97a9364a6d34d73b2d96741"},{"alg":"SHA-256","content":"1457c435a8325a433ae71ecdf100a4e7e8b165f9864ec91ea82f8a80336268ed"}]},{"bom-ref":"b0d6bd959fb1b8c2","type":"file","name":"/usr/share/zoneinfo/right/America/Dominica","hashes":[{"alg":"SHA-1","content":"7482d5af10a51a583af328a730023354e152334d"},{"alg":"SHA-256","content":"680418e51d25bccb5e7892bc7a9017a07dc5c69c16e4def8cd4c9e407d5f5929"}]},{"bom-ref":"c5843ede2159d273","type":"file","name":"/usr/share/zoneinfo/right/America/Edmonton","hashes":[{"alg":"SHA-1","content":"69f491986f6238e8e37d440d8a36d874ff10bdcb"},{"alg":"SHA-256","content":"adc4cc0ce4f91bb9675069ccb61a5c31aedfad408c5abbbcbb95d41abcb3dfe3"}]},{"bom-ref":"a79a5c11873f56cc","type":"file","name":"/usr/share/zoneinfo/right/America/Eirunepe","hashes":[{"alg":"SHA-1","content":"5e85a44761a943f1a8782c5257c77deb88972cb1"},{"alg":"SHA-256","content":"43940082bff063eb3343a4368fcb73c266279738edba5e3b18503b688a4ab53e"}]},{"bom-ref":"cf5722b654976b45","type":"file","name":"/usr/share/zoneinfo/right/America/El_Salvador","hashes":[{"alg":"SHA-1","content":"d31e5214efccb6f35ea9ff78bd150be6f5b4bd4e"},{"alg":"SHA-256","content":"4ab2bcd279d423184ce855bf07241bb92bdf39c22358f8bbaf084930b742e3fd"}]},{"bom-ref":"f3736b33a109e107","type":"file","name":"/usr/share/zoneinfo/right/America/Fort_Nelson","hashes":[{"alg":"SHA-1","content":"86a807371a0f1262b6f75f4da944608c28a54256"},{"alg":"SHA-256","content":"662281f1f0efb834e0a462e41c06776db0b892eef2e99c686e87810bfac58bd0"}]},{"bom-ref":"9b8ffccf032fb9b8","type":"file","name":"/usr/share/zoneinfo/right/America/Fortaleza","hashes":[{"alg":"SHA-1","content":"1d7009907bbdeebe7eace12ae213e1d298584f9e"},{"alg":"SHA-256","content":"618768a21c7bf63c6b939c6ae99f5a5c30403420cc35da27d3f83e224dc4ae56"}]},{"bom-ref":"1fefd98d60773a7f","type":"file","name":"/usr/share/zoneinfo/right/America/Glace_Bay","hashes":[{"alg":"SHA-1","content":"8a6b0eba98da18bbe8a07b74153501b6f083f8b9"},{"alg":"SHA-256","content":"3a1ade3234f10ce3166f747c4ab5ab1a3e37b224349375add816a6eb203468f0"}]},{"bom-ref":"2858148ee1b8a6b5","type":"file","name":"/usr/share/zoneinfo/right/America/Goose_Bay","hashes":[{"alg":"SHA-1","content":"0eebbf4fd60ff53627e25915c02938e4b970202d"},{"alg":"SHA-256","content":"e8f36386ce530142d371cb1b7df3d187c0a83fc9cbff721c639fadca67e8be66"}]},{"bom-ref":"8c8487f4701d3495","type":"file","name":"/usr/share/zoneinfo/right/America/Grand_Turk","hashes":[{"alg":"SHA-1","content":"37fa3ae1c0254e8441b8eea5055bee3da511ebf1"},{"alg":"SHA-256","content":"162410282fd2b49528f3d268ff17b5ca7f3b8c905eeb53c762b7d11ffa4bf7f9"}]},{"bom-ref":"17f2e12b9b4f63e7","type":"file","name":"/usr/share/zoneinfo/right/America/Grenada","hashes":[{"alg":"SHA-1","content":"d7e92e4de6e5cb426f594fe4bf2f61a99483b5dd"},{"alg":"SHA-256","content":"27549fa73a6850bf132fa688ad2b0ad30a1280b5f2a7bf79deb51651521e5304"}]},{"bom-ref":"c7decadd940b8f8f","type":"file","name":"/usr/share/zoneinfo/right/America/Guadeloupe","hashes":[{"alg":"SHA-1","content":"d6053a13340836b56cb9a377f551a2ea5389b3eb"},{"alg":"SHA-256","content":"c7112d59679426df8ee142a1d3d0409788597482f0b91515b235fe717e9ee77c"}]},{"bom-ref":"1112ccfed49a49ef","type":"file","name":"/usr/share/zoneinfo/right/America/Guatemala","hashes":[{"alg":"SHA-1","content":"d776536a67abe6dfc249fe095f6c1e746b526576"},{"alg":"SHA-256","content":"3703ac250321367a153a18801238457db970ff1e93c945bc76207027a8608c6d"}]},{"bom-ref":"fc54d160982144c8","type":"file","name":"/usr/share/zoneinfo/right/America/Guayaquil","hashes":[{"alg":"SHA-1","content":"9f4572ac17541b57609cc8efcd26ec675c2fbe6b"},{"alg":"SHA-256","content":"ad7d9895775f457bf049e1a89ec931624fe1df1aaa276ebe328fca325d9c647a"}]},{"bom-ref":"2a437ce32a6f90ad","type":"file","name":"/usr/share/zoneinfo/right/America/Guyana","hashes":[{"alg":"SHA-1","content":"d09fa759600b8d3e9a609d2c74a58f606129f0ae"},{"alg":"SHA-256","content":"2ead96b0a5816ab4deb0eaf68a375ebdd41112f97cee0cdcc9d393fbcf3bb14c"}]},{"bom-ref":"713b66bcf4d86872","type":"file","name":"/usr/share/zoneinfo/right/America/Halifax","hashes":[{"alg":"SHA-1","content":"d807cdfc092bd6cd1df8bdbb7f048b2c71d0498b"},{"alg":"SHA-256","content":"2843d77177b88426ef03a9de7edb2e25b4325a5cf6cbe38cbb2926b65990b129"}]},{"bom-ref":"5beb826d4bfb21ee","type":"file","name":"/usr/share/zoneinfo/right/America/Havana","hashes":[{"alg":"SHA-1","content":"f4ff4cd4c41336c8ed0094442fe575c332f124bd"},{"alg":"SHA-256","content":"00f0718cdeeb8642ecaa3e16aee6dcdb79c1470245c7f26a8ecef54b267e5768"}]},{"bom-ref":"bd9245559c67c4c2","type":"file","name":"/usr/share/zoneinfo/right/America/Hermosillo","hashes":[{"alg":"SHA-1","content":"0827b9d73f22919fc19e2cc0d8c0f2e37a6b30d7"},{"alg":"SHA-256","content":"8e5a98af8aa520119206953a69ba37f3c0ce10f8b96c197e03f2eba77c9c4e09"}]},{"bom-ref":"681ed53c3d578389","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Indianapolis","hashes":[{"alg":"SHA-1","content":"181a083fcd95bf76c72f040a65e09416b8759c47"},{"alg":"SHA-256","content":"f74db87853fc76f9992799c250fc6efe23f0f39d847b4ac91e552eed93fc29d0"}]},{"bom-ref":"a2d0a1745fef0a3a","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Knox","hashes":[{"alg":"SHA-1","content":"7e4166ffa1476f9ee0854c95051c2b81404315b5"},{"alg":"SHA-256","content":"157d43631493fb1d4b67d280107e6bff72ef6c910bc72eecb227bd96c1f6b09d"}]},{"bom-ref":"6de40c0ba6a3f8c6","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Marengo","hashes":[{"alg":"SHA-1","content":"c4057f40601201d6c2aeef6070d68ca456c4ae21"},{"alg":"SHA-256","content":"2f08bdc2cf2e19cc208b89e6dd550554817b681399fb652c803b6a782dd034c0"}]},{"bom-ref":"a6c2e95777036470","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Petersburg","hashes":[{"alg":"SHA-1","content":"8a031bcb18c251bf45c55b90ae41267a8e7fab82"},{"alg":"SHA-256","content":"e0aeaf68ed8693116636454d1199957d6da2ce1e90c63b8eead3b5d0c4cca974"}]},{"bom-ref":"bbb69173d3a72faa","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Tell_City","hashes":[{"alg":"SHA-1","content":"8793c2489fab2f22cdde61d8f2afc05f5c83de98"},{"alg":"SHA-256","content":"07612d49fedd90f8261691c21e9b62bdf457a7fb03e19ca81ca92b3d8106a5b3"}]},{"bom-ref":"38b27754505b6191","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Vevay","hashes":[{"alg":"SHA-1","content":"da9db35be6895d492691d9e77fc1410953c5e04c"},{"alg":"SHA-256","content":"1d87d68a3711fc82741703ae5409d1c12a0e2b69ad97c535e9687c611ed2ab48"}]},{"bom-ref":"08838d3431a9bc1a","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Vincennes","hashes":[{"alg":"SHA-1","content":"75e668e14fbd955443d495995aa0447448f78f56"},{"alg":"SHA-256","content":"9527640643c5d3164469a2a94e7da5b03464a23451853ef089dba55a65755617"}]},{"bom-ref":"a87ccfac4da0aa7b","type":"file","name":"/usr/share/zoneinfo/right/America/Indiana/Winamac","hashes":[{"alg":"SHA-1","content":"5a4b59583938e7722aeb1643896a807181eefd5d"},{"alg":"SHA-256","content":"4fe603a9457d07c2bfb0b321e3da4a53d3513d68a0f7e36dbd068618d8bf1829"}]},{"bom-ref":"d28d5e7e965c6da2","type":"file","name":"/usr/share/zoneinfo/right/America/Inuvik","hashes":[{"alg":"SHA-1","content":"7e85b69e7fa612b98a94ba5e17c8cd2c99e66204"},{"alg":"SHA-256","content":"6b688e6c0de86d290b58f172d31404e1797d63ddfc76d9237550ac58a08cbfe3"}]},{"bom-ref":"af4e67a6a9a35ac8","type":"file","name":"/usr/share/zoneinfo/right/America/Iqaluit","hashes":[{"alg":"SHA-1","content":"18c07f4f3a7b6b1dd1fa59169161216c4074a5c3"},{"alg":"SHA-256","content":"45b43ff629a21565bed409c89d773cc5a2e73d13120a166b7cdb8684143cd08e"}]},{"bom-ref":"11fa74ee93d1d6e4","type":"file","name":"/usr/share/zoneinfo/right/America/Jamaica","hashes":[{"alg":"SHA-1","content":"8fe3840dd6ea5b5ced195059292756ec79380673"},{"alg":"SHA-256","content":"aea66118420ba88ab3a4591579801293f5ff32d7af56c82e48ba1e11f99ddb0e"}]},{"bom-ref":"480d8a1c94a3e5d7","type":"file","name":"/usr/share/zoneinfo/right/America/Juneau","hashes":[{"alg":"SHA-1","content":"e11826c2b6fc9f374740825bc68c3cbc9f243d78"},{"alg":"SHA-256","content":"47c6d0e98e62dcbe3bb54111a5de6924cdc997eb712e0f8db4c378ed13d8e73e"}]},{"bom-ref":"d4dcbec64466018a","type":"file","name":"/usr/share/zoneinfo/right/America/Kentucky/Louisville","hashes":[{"alg":"SHA-1","content":"1651128c3ccccb1fa24aa21bb2c69a200d22ee81"},{"alg":"SHA-256","content":"7cdb111f5b730a0418b6fbcc216122ff14ae0736e532b3e542f8219d885fc930"}]},{"bom-ref":"a19928cc7dcd1075","type":"file","name":"/usr/share/zoneinfo/right/America/Kentucky/Monticello","hashes":[{"alg":"SHA-1","content":"154b9851d4d0367d6117b60c465a9995d48be332"},{"alg":"SHA-256","content":"7648d3bdb013399e2cb3e158098fee51039901e2493d4747b44de043e1e1d751"}]},{"bom-ref":"4dfb809548489a07","type":"file","name":"/usr/share/zoneinfo/right/America/La_Paz","hashes":[{"alg":"SHA-1","content":"8a02dc5a0724497911cc71c79cfe7d44502ae27a"},{"alg":"SHA-256","content":"882bab088caa59570d910c1accb3b6574a80830e2933751d249b83c215c17ddc"}]},{"bom-ref":"23508c7dd4a4526f","type":"file","name":"/usr/share/zoneinfo/right/America/Lima","hashes":[{"alg":"SHA-1","content":"b4a091da1b3606db773b07dc24fba3fa0bcdd6ff"},{"alg":"SHA-256","content":"3fd0a7bdd8c494de8656227a6a5a3b2719a24df06d27c1679a0c18637eb70018"}]},{"bom-ref":"8c0c110180d6cb26","type":"file","name":"/usr/share/zoneinfo/right/America/Los_Angeles","hashes":[{"alg":"SHA-1","content":"cc9bc90b3c840a822054c69bdaca6278c76d4245"},{"alg":"SHA-256","content":"88b375a8fda2c05bec7ee1066246b4080efeb61bfb541e6dc6ea794abdf0d835"}]},{"bom-ref":"900e9573fd39705e","type":"file","name":"/usr/share/zoneinfo/right/America/Maceio","hashes":[{"alg":"SHA-1","content":"149803d8b3017aedb79c5fc1ab1c46a7137aaffa"},{"alg":"SHA-256","content":"7a9f2f8e7063ca3a470325bd254f408a065d327f726f6111d80cf052ed45ef96"}]},{"bom-ref":"5fa77e9c8375c472","type":"file","name":"/usr/share/zoneinfo/right/America/Managua","hashes":[{"alg":"SHA-1","content":"83bfea3e35a57efdbc76101816ac9161c0ce7f23"},{"alg":"SHA-256","content":"6f852b1439fb0938a21997c1cfa5acfee03a3e3d1b1041b5cf2ce09c7f47d0d0"}]},{"bom-ref":"50f62577cc562fff","type":"file","name":"/usr/share/zoneinfo/right/America/Manaus","hashes":[{"alg":"SHA-1","content":"044a912a3a67f3e0ab6129cec10a343ee3291b0d"},{"alg":"SHA-256","content":"d0f91a55a7bf0911877cb0ef4c77bc0b3c8c9802ce1a44bbcb2e97729c0c6ea5"}]},{"bom-ref":"18676aff3b212788","type":"file","name":"/usr/share/zoneinfo/right/America/Martinique","hashes":[{"alg":"SHA-1","content":"6da64a96cf7d04251286cd7a90980bde5718e3cf"},{"alg":"SHA-256","content":"a2be7f415ce96183c6153ff1d39d5480ff77ae1c5c54f72f7777c1092461c589"}]},{"bom-ref":"ba2cdd8554eecf69","type":"file","name":"/usr/share/zoneinfo/right/America/Matamoros","hashes":[{"alg":"SHA-1","content":"eb0be4e0d8a2c214bb5a37d2b75d4eef11fdb6f9"},{"alg":"SHA-256","content":"52fb8ab036cefc6d9fb5cf8f9978bb67a2e347825aa41dec3bce452f5ca468d8"}]},{"bom-ref":"e588c62bcebdc7b3","type":"file","name":"/usr/share/zoneinfo/right/America/Mazatlan","hashes":[{"alg":"SHA-1","content":"d3b8c103b951c1f99f1588f284bd090932f498ec"},{"alg":"SHA-256","content":"2c3e0a4f5f41ee58da0df484637fc836ec3713eda1b3dd7a38822a959f748054"}]},{"bom-ref":"0357761ededce98c","type":"file","name":"/usr/share/zoneinfo/right/America/Menominee","hashes":[{"alg":"SHA-1","content":"9f804f12e0175367bb65b783b2ebef0e643bab3e"},{"alg":"SHA-256","content":"bc4c0725e2d9cf2ae58a1b74b17d8b0a114cc845a8e8b2f21fb2f7385026ee7c"}]},{"bom-ref":"7bdc8421b7a61f40","type":"file","name":"/usr/share/zoneinfo/right/America/Merida","hashes":[{"alg":"SHA-1","content":"1981017c0b34dff86b56b87c2621636fb640b770"},{"alg":"SHA-256","content":"1962a72a5f985bb50bad1dfc033672bb8660e9525ea16d1768097d8766772cb1"}]},{"bom-ref":"f550cbe11d31b452","type":"file","name":"/usr/share/zoneinfo/right/America/Metlakatla","hashes":[{"alg":"SHA-1","content":"1bf31cf20fb26f507eeb25f005fff2ae816be565"},{"alg":"SHA-256","content":"22e883e942b95542955eac4abbe9a2be97b8721bc4150f5891efbef621cd809a"}]},{"bom-ref":"9135f5f7cde33808","type":"file","name":"/usr/share/zoneinfo/right/America/Mexico_City","hashes":[{"alg":"SHA-1","content":"970e650bcc48448d366c2ade5f798328c97016d1"},{"alg":"SHA-256","content":"5ad5148af7f7031cc1338404c5aef93a9715758eed6da522921f9aaf9b40746e"}]},{"bom-ref":"e0f690d64f6114a9","type":"file","name":"/usr/share/zoneinfo/right/America/Miquelon","hashes":[{"alg":"SHA-1","content":"c52e05631f1a30f0a16a25b82711c8c4884d5484"},{"alg":"SHA-256","content":"cf2b989598fd40ed7d4f7f50db3c03b5b9f1d7234340a83ec2d0d026d23086bf"}]},{"bom-ref":"4497fddabc731098","type":"file","name":"/usr/share/zoneinfo/right/America/Moncton","hashes":[{"alg":"SHA-1","content":"0545329f761aca77d3cc70df836615dd3928c2fe"},{"alg":"SHA-256","content":"5c953c923b365b588fdca74f847b41b74671724342dc088f1c958444aacbb42f"}]},{"bom-ref":"84be122e0176725d","type":"file","name":"/usr/share/zoneinfo/right/America/Monterrey","hashes":[{"alg":"SHA-1","content":"1ac43dc0bbfe9499c024ba4d3dc39c409de09805"},{"alg":"SHA-256","content":"a211366232edc661ead4951cc4a9d24b7d085f8f3be9ea413a6887caea98de56"}]},{"bom-ref":"3db6806cdfb1fe9b","type":"file","name":"/usr/share/zoneinfo/right/America/Montevideo","hashes":[{"alg":"SHA-1","content":"6358c9cf88325792087d81b945bd65e34603419f"},{"alg":"SHA-256","content":"70313553e1c4323da5b11e3256fb56394e57696c23c45fe5c7a563c5816943ee"}]},{"bom-ref":"d9796ae8493f38e7","type":"file","name":"/usr/share/zoneinfo/right/America/Montserrat","hashes":[{"alg":"SHA-1","content":"da8142cab8f0947a9305dcf6798d1365476ceed6"},{"alg":"SHA-256","content":"6e6a9865546569e7ebd3397ff3af758150f07ab9b0b275ebd33336abd2599b07"}]},{"bom-ref":"4cdfd3d1cc966311","type":"file","name":"/usr/share/zoneinfo/right/America/Nassau","hashes":[{"alg":"SHA-1","content":"8a6d3c606e57836e8bafeaa72ef84e0cc4650a41"},{"alg":"SHA-256","content":"a8c274a83bd81c79e349b2ecf2558b0652366dfc0a429d6dbad0b48e35a0f4b3"}]},{"bom-ref":"84093cbc01643e6e","type":"file","name":"/usr/share/zoneinfo/right/America/New_York","hashes":[{"alg":"SHA-1","content":"b10f0378289c2e0075d8dcb1ebfc4a82b5991e5f"},{"alg":"SHA-256","content":"7bb140f56dad3d2bb3a13a1de9fa49dbd99cda666eb71e78cb125da17e1dd672"}]},{"bom-ref":"adfae5a02f517ba1","type":"file","name":"/usr/share/zoneinfo/right/America/Nome","hashes":[{"alg":"SHA-1","content":"c9cafb3161416d442277566bb7029746a2a438cd"},{"alg":"SHA-256","content":"a9c7d5f2b9455db243c8e6dd6e3b980bb01462e83f37465127133d2694e10564"}]},{"bom-ref":"72e5020a8206328f","type":"file","name":"/usr/share/zoneinfo/right/America/Noronha","hashes":[{"alg":"SHA-1","content":"31c59526c7a671a1af76e2d559748b98937e8f31"},{"alg":"SHA-256","content":"bd75ae922e0038c3397eb5851e554804ab080d60441118c2d289fcc54ffb8a47"}]},{"bom-ref":"d48b4e6579f87785","type":"file","name":"/usr/share/zoneinfo/right/America/North_Dakota/Beulah","hashes":[{"alg":"SHA-1","content":"cd7a64bfe2ceeb32e33e439b0dfb59f3c918ad30"},{"alg":"SHA-256","content":"5906f934b6f25299847ed3c743da120b78ffa11d286e57e656b32113a93949bb"}]},{"bom-ref":"9707529d8aa03084","type":"file","name":"/usr/share/zoneinfo/right/America/North_Dakota/Center","hashes":[{"alg":"SHA-1","content":"b1cd33eab085c450664b14abf3e3bd5f7b5da412"},{"alg":"SHA-256","content":"c0ea48a5819ddf2890170b30bde1a9e44d413a380b4e32ff2f8758835425d50d"}]},{"bom-ref":"c3eca75f92133382","type":"file","name":"/usr/share/zoneinfo/right/America/North_Dakota/New_Salem","hashes":[{"alg":"SHA-1","content":"e54faa7a2d7d813aa530451969c5bd7a2dc8889c"},{"alg":"SHA-256","content":"56fffef3a6c506850a3ed9a5c769c022cec471aa4c754c7c8edfdd4bc1e4eb9e"}]},{"bom-ref":"4013f2a701794ea6","type":"file","name":"/usr/share/zoneinfo/right/America/Nuuk","hashes":[{"alg":"SHA-1","content":"8bbf40ae97ced4d9054675302127f310aa1d3459"},{"alg":"SHA-256","content":"955b7defca892dac0a3cb3f89f80a32203690761a23f87fc4136ad03208b945c"}]},{"bom-ref":"1aff8173b5e5543c","type":"file","name":"/usr/share/zoneinfo/right/America/Ojinaga","hashes":[{"alg":"SHA-1","content":"f1619fb5cd6645cd18eca6fe5e23bb89a53bb7e1"},{"alg":"SHA-256","content":"e750ea549ada4cef08bfaf723dbcddfb679d7e901f7f2640f45a5495e93ef598"}]},{"bom-ref":"ea6e54819c88e0b9","type":"file","name":"/usr/share/zoneinfo/right/America/Panama","hashes":[{"alg":"SHA-1","content":"971f2edd08bb26883049c0ef22fc0e0409f82dfd"},{"alg":"SHA-256","content":"9cc0b99b474b6e7ac5d34f9a72fb686c77dc3e89c94d5c7541bc4e2bf33eca80"}]},{"bom-ref":"7cce99cd9442fea3","type":"file","name":"/usr/share/zoneinfo/right/America/Paramaribo","hashes":[{"alg":"SHA-1","content":"0d190fd23eb7ecd07ad83fde4980fe7b50d38fd1"},{"alg":"SHA-256","content":"426ed930b0429fafaabc39ced0e9535fe074302ed84dba95c2e677e91e167ec0"}]},{"bom-ref":"34ac28129f72d2c7","type":"file","name":"/usr/share/zoneinfo/right/America/Phoenix","hashes":[{"alg":"SHA-1","content":"952da99fe3cf915cbfb4aa17a3b22ddc102e428c"},{"alg":"SHA-256","content":"375e12ff9f754d07a23e02bf0c4fd9453cd94d6af6eb934fcc280c79f427e5c5"}]},{"bom-ref":"d744f3cd4d368521","type":"file","name":"/usr/share/zoneinfo/right/America/Port-au-Prince","hashes":[{"alg":"SHA-1","content":"0778361356bc120031800cedb83d6906616ae24f"},{"alg":"SHA-256","content":"6a814da25b75a3572c7701d955fd76a0f67bc16da072801139e73842c0c03356"}]},{"bom-ref":"5cd55311fa053d3c","type":"file","name":"/usr/share/zoneinfo/right/America/Port_of_Spain","hashes":[{"alg":"SHA-1","content":"4dea40ea01e20bd9083921420eb2a006b9d7afee"},{"alg":"SHA-256","content":"7df0b5f3233c2206c7c1188ed052eaf4e3685601cef77144e9c94b14398f0db0"}]},{"bom-ref":"f19dc023b2f76503","type":"file","name":"/usr/share/zoneinfo/right/America/Porto_Velho","hashes":[{"alg":"SHA-1","content":"b5544cfa1b7de777c31d6bfd5848ae57dd4b1e32"},{"alg":"SHA-256","content":"3fc1d3f1df5aef6e1d4ede4080d4d18a4b079d0219316fe41db1e0029505f6fa"}]},{"bom-ref":"62cce52a99286bf9","type":"file","name":"/usr/share/zoneinfo/right/America/Puerto_Rico","hashes":[{"alg":"SHA-1","content":"27461f17d3e597da36f493a4c0539a62f12a81c9"},{"alg":"SHA-256","content":"380d72f2d6623dac48cff2dfb46eec2e48b68053c708dca04168321b6453d185"}]},{"bom-ref":"161e70985e891e30","type":"file","name":"/usr/share/zoneinfo/right/America/Punta_Arenas","hashes":[{"alg":"SHA-1","content":"20c2cfef0e1b2c5803ca2323a0d5eccb1ad7b88c"},{"alg":"SHA-256","content":"617d4c58044df24ca525b3914b696ec8b4db1f594ba51175e2c944a2af11364f"}]},{"bom-ref":"97674685ccdb988e","type":"file","name":"/usr/share/zoneinfo/right/America/Rankin_Inlet","hashes":[{"alg":"SHA-1","content":"315011e29ffc804ef686acb2c6603fa94c02cbb5"},{"alg":"SHA-256","content":"c6ec3e8925cdb45a507f020f249863403eba7eef540a05f1e23954ce670db362"}]},{"bom-ref":"fdc08fbfab8b06c2","type":"file","name":"/usr/share/zoneinfo/right/America/Recife","hashes":[{"alg":"SHA-1","content":"08d94fb502b67c0e8ab6a8aeeadc77b77afddb24"},{"alg":"SHA-256","content":"06a0fa35afed92c7fc936068d353ac373768c92fd2564f948d780ce72f0abd5c"}]},{"bom-ref":"20327c790e18c693","type":"file","name":"/usr/share/zoneinfo/right/America/Regina","hashes":[{"alg":"SHA-1","content":"e0e3efc7b09efea9735aa89bc8258726ab7a788e"},{"alg":"SHA-256","content":"8e8a5a66a6f3b3ec3bf25b260bdb1157847968f1c439badf5a1aee787ec31cee"}]},{"bom-ref":"976f6f2c2d5e221b","type":"file","name":"/usr/share/zoneinfo/right/America/Resolute","hashes":[{"alg":"SHA-1","content":"8f5d7aa72ae7799bcc17270e2f1bf560fe699eac"},{"alg":"SHA-256","content":"396ffcf87a0116bbc2dfe94dff429c9fe3d70f9f59d220dd830da3e34c0b41de"}]},{"bom-ref":"cba96fc85f7189a2","type":"file","name":"/usr/share/zoneinfo/right/America/Rio_Branco","hashes":[{"alg":"SHA-1","content":"3e498cd3a60b35e120e6e6b0da973a55f2b8d3a8"},{"alg":"SHA-256","content":"fe360ae6ad78f5b2a3d80bb008c513040d163cb2b3336158dfc0ce1e8c27423f"}]},{"bom-ref":"4b5d941dc4385e0c","type":"file","name":"/usr/share/zoneinfo/right/America/Santarem","hashes":[{"alg":"SHA-1","content":"d3cddb07a107657fc0183c3d8befe2b788b67726"},{"alg":"SHA-256","content":"9293a36c17726e9bdc2574d3e723aadae552449dbb2ca8573ec627bb51dc8d61"}]},{"bom-ref":"5e5ebdac560a0fc6","type":"file","name":"/usr/share/zoneinfo/right/America/Santiago","hashes":[{"alg":"SHA-1","content":"2b983e764364753517257cc1b76d2f08cdc4450c"},{"alg":"SHA-256","content":"a4974f4a367f58e0d884cc9f0f566b8f738009ca968505570688aae998ef0dba"}]},{"bom-ref":"b9749955eea27a98","type":"file","name":"/usr/share/zoneinfo/right/America/Santo_Domingo","hashes":[{"alg":"SHA-1","content":"5723279a84ae50178640af6ef9b5ce30c25ba4e0"},{"alg":"SHA-256","content":"d758ab3698792929bad03f0821f99299d0e14bae01e7d0480386d5ffad872ffe"}]},{"bom-ref":"dd9de88b2c5b882a","type":"file","name":"/usr/share/zoneinfo/right/America/Sao_Paulo","hashes":[{"alg":"SHA-1","content":"952af42b102daee41ae5099ae2cebf4fc0837e99"},{"alg":"SHA-256","content":"d48650f928ef29c118c0e21157954a8c1a22606c9541bc215888d4b0caca78a0"}]},{"bom-ref":"80c7781c167ebec2","type":"file","name":"/usr/share/zoneinfo/right/America/Scoresbysund","hashes":[{"alg":"SHA-1","content":"267a83aed51a6717303d8a2c7ccfb0f2b0cdaa69"},{"alg":"SHA-256","content":"a807f3ad35a1228610f7d7aeba5a07d44961b613b75cdc8167344b89d6c78fe4"}]},{"bom-ref":"e2ad06aacbc4bfcb","type":"file","name":"/usr/share/zoneinfo/right/America/Sitka","hashes":[{"alg":"SHA-1","content":"f0dc3c80bb56788f0fdf35ce8c1312feb57829cf"},{"alg":"SHA-256","content":"73efa5b87eb61a6284ab99af60c20e9d06e6ead73801ade803daba73b2ea4e22"}]},{"bom-ref":"6b41ed99dd52ef15","type":"file","name":"/usr/share/zoneinfo/right/America/St_Johns","hashes":[{"alg":"SHA-1","content":"275884d8816a77e945c3b6f6e8e0a5b8bbdb6d32"},{"alg":"SHA-256","content":"a381975f17f65a179d4e61e21f09a32f5b9814db51b33d0e2e73e663df443265"}]},{"bom-ref":"9bb7231ce803d81d","type":"file","name":"/usr/share/zoneinfo/right/America/St_Kitts","hashes":[{"alg":"SHA-1","content":"a5856baa10731fb44796269697dcbfde25d85957"},{"alg":"SHA-256","content":"71bb4dad93ab7ad90508df2ecb6c9ab1c273960fc2b947de300c9d6c8d3749b9"}]},{"bom-ref":"7eef64c16e4c1fe4","type":"file","name":"/usr/share/zoneinfo/right/America/St_Lucia","hashes":[{"alg":"SHA-1","content":"0d4c92969af237b692dd1d73d2995cb4888424f7"},{"alg":"SHA-256","content":"4064136f46589209f1535f3cb88299573773bf57a3bedcad05a957af8b38e5d3"}]},{"bom-ref":"e57a56df6fb5a217","type":"file","name":"/usr/share/zoneinfo/right/America/St_Thomas","hashes":[{"alg":"SHA-1","content":"37ef1c237d4a14bb07d09fd6bfc680d5f3382e95"},{"alg":"SHA-256","content":"e3e2a965b20096611c055744cd6359d1a177a21207abef7db8bd0ded91c62fc5"}]},{"bom-ref":"7886a0e4f8aa5f7a","type":"file","name":"/usr/share/zoneinfo/right/America/St_Vincent","hashes":[{"alg":"SHA-1","content":"93e98e9a744cb72edf1e419db6960da378b19243"},{"alg":"SHA-256","content":"4f11ec4a1fdd634e98224deb317b374d17886bb52dfc3b7eb861d149db22e35e"}]},{"bom-ref":"86a4f478a24030d5","type":"file","name":"/usr/share/zoneinfo/right/America/Swift_Current","hashes":[{"alg":"SHA-1","content":"0161ffad3458365df35bba7bde79d38f4b04e265"},{"alg":"SHA-256","content":"e8e4b669fba01c1259e91eee27d152728e035dc7a08a73dc43e6f48427f869a8"}]},{"bom-ref":"e93faa8250e985df","type":"file","name":"/usr/share/zoneinfo/right/America/Tegucigalpa","hashes":[{"alg":"SHA-1","content":"223bfa7d31c6f219fba27134f3a9120094a0aaab"},{"alg":"SHA-256","content":"178fa99342cdffb7e3ea79b1a33dda21a66a896f5b935a12b6e43a88d83ff0ff"}]},{"bom-ref":"04b7d3e9d0cf2104","type":"file","name":"/usr/share/zoneinfo/right/America/Thule","hashes":[{"alg":"SHA-1","content":"c81b86c260f81f7570f7abe2f22ea6ba0768094b"},{"alg":"SHA-256","content":"3a856cf45b974a963656d7f728fe6ab77bf118218f2e2c6637757cff5d96fa59"}]},{"bom-ref":"5742f23699010126","type":"file","name":"/usr/share/zoneinfo/right/America/Tijuana","hashes":[{"alg":"SHA-1","content":"2406a668a3cd6c2d21a6c3a869a425e334d88104"},{"alg":"SHA-256","content":"55c7868cfc587e2137bcf4393bca48ea307f16d27df24023524ac5085a4fed9e"}]},{"bom-ref":"72a26b696380244f","type":"file","name":"/usr/share/zoneinfo/right/America/Toronto","hashes":[{"alg":"SHA-1","content":"cb105f537aa7169841b62b3fe567097412619653"},{"alg":"SHA-256","content":"c6b3dafd06b43fc19718bee58b155c5bf5d22e383db2d32f0128fa4e3bed3f6c"}]},{"bom-ref":"6f8d1f984afe40a5","type":"file","name":"/usr/share/zoneinfo/right/America/Tortola","hashes":[{"alg":"SHA-1","content":"3672c37184a00376ac1c8b45c10d270031009696"},{"alg":"SHA-256","content":"e4aceee579ef0f890dbdc493715692708cc89064b02a2f7870d157dde288d58d"}]},{"bom-ref":"cb9df52f00c46628","type":"file","name":"/usr/share/zoneinfo/right/America/Vancouver","hashes":[{"alg":"SHA-1","content":"13c11520fcca3676dada7a0c6ef263d33b47d994"},{"alg":"SHA-256","content":"846c05716bc5f1e0f5e1c3498b52f7590c73c59dac7ce9f693792bd86561a61c"}]},{"bom-ref":"1abdfba4950c144f","type":"file","name":"/usr/share/zoneinfo/right/America/Whitehorse","hashes":[{"alg":"SHA-1","content":"aca4c35064ef2c65ae2c41b6fe1c00395d8784e0"},{"alg":"SHA-256","content":"5d8a4cb1bdbebe5ceaeec8452fde9dbf406b365388c52a998ef6a0734760ad32"}]},{"bom-ref":"6d7b900c6f9467a1","type":"file","name":"/usr/share/zoneinfo/right/America/Winnipeg","hashes":[{"alg":"SHA-1","content":"de35f532c42b28406896ed25ee1d9fb5c457b03c"},{"alg":"SHA-256","content":"f5b2158f105dc4499b31f156fa6a99e19198474ae32248a86e20a032adb14f87"}]},{"bom-ref":"29c4d3303f1658d0","type":"file","name":"/usr/share/zoneinfo/right/America/Yakutat","hashes":[{"alg":"SHA-1","content":"f2a66cddad71dae1a59efb38ce4b5ad1b684258a"},{"alg":"SHA-256","content":"4cee8d752bccefa30cc879205652a431d919a3b987af9d445a105921511bea25"}]},{"bom-ref":"0c37c0407448c0b3","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Casey","hashes":[{"alg":"SHA-1","content":"43545f42dc79083bfdfbd73e846489a0976ce111"},{"alg":"SHA-256","content":"797a788098dba3912535039cd9a8ab75bb5ba0f6002921943394a2c5af40d3b0"}]},{"bom-ref":"3187301eacd736b1","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Davis","hashes":[{"alg":"SHA-1","content":"f7804d7984b1ebb9cd3a8be4ce4c28946678246d"},{"alg":"SHA-256","content":"c8f9fc9ee276cd3584450cab432e9d34d86bdab4a8c6e824d590038344e505d0"}]},{"bom-ref":"e3763b0aab489bbe","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/DumontDUrville","hashes":[{"alg":"SHA-1","content":"3f231bf301a7697b73aa6b512145273107fc9873"},{"alg":"SHA-256","content":"b9aa45a5d6db37f094a546648d7d83a38195926f7c4614b5702e6c3f72e7995a"}]},{"bom-ref":"ee4385cacab81f17","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Macquarie","hashes":[{"alg":"SHA-1","content":"11503db3dfa687dcea9a3d418f64f63c25f3fcd4"},{"alg":"SHA-256","content":"1dc462da964c4ad21010cd749d724bac32a9ec7e23c123c8d1f47efad08b2c53"}]},{"bom-ref":"1bfa0d4fc9d7a89c","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Mawson","hashes":[{"alg":"SHA-1","content":"7f2d5b7bc019b7ec31bbd11ea5ef4e78af7687ec"},{"alg":"SHA-256","content":"8f551dff347653b6c7dce57189e7d0accb8647d4d6a169a9398899f8b17641ca"}]},{"bom-ref":"47e88bcf6509ee59","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/McMurdo","hashes":[{"alg":"SHA-1","content":"6c74c5e9b81585281a62e6b4ccd47134e0b5b6e9"},{"alg":"SHA-256","content":"fe85472e156ed4e1567e45028208b4063ac98815b7f22decb4eccdead9b0ac7a"}]},{"bom-ref":"db5d440331093049","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Palmer","hashes":[{"alg":"SHA-1","content":"5b8e3316ef699baf3f829629430d94ef88e56b92"},{"alg":"SHA-256","content":"fe442401ef0ca402f79a17ed99131941149b25d1f6cfa44c2c796e36a9fcce8b"}]},{"bom-ref":"a890b52702293748","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Rothera","hashes":[{"alg":"SHA-1","content":"80a1497a3f5cd61895dcf82643bf9487b5050fae"},{"alg":"SHA-256","content":"0ad14109fa9842310abb4db35a384f1c0bcc4918a932047bff63f1b3bf8bb01a"}]},{"bom-ref":"7b69e9aae5880cb5","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Syowa","hashes":[{"alg":"SHA-1","content":"d11ec4383d7dc3332d30df015c6e2f902e2783ed"},{"alg":"SHA-256","content":"b45bde2274f7df889b833aa856d4a56f1499195b901a559c06c08eb60bf3dbec"}]},{"bom-ref":"0d1c7647ca6ae247","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Troll","hashes":[{"alg":"SHA-1","content":"787f394fc1f3fcb1adec1f543278327708dd5139"},{"alg":"SHA-256","content":"c599fde30452e67c10d51b6bdae110fdfa9b81a236b40b5015227310d97c5bfa"}]},{"bom-ref":"ecd8b39daa789bbf","type":"file","name":"/usr/share/zoneinfo/right/Antarctica/Vostok","hashes":[{"alg":"SHA-1","content":"709c69de7040fea2113b3a113eccc4069c9d022b"},{"alg":"SHA-256","content":"d9c2f0ab04f26d02c004bef2837d417e180f6f3bf1753fe6eb72072d1c723bd6"}]},{"bom-ref":"e6fcafb1af9cf95b","type":"file","name":"/usr/share/zoneinfo/right/Asia/Aden","hashes":[{"alg":"SHA-1","content":"47f38c92ee272f860cb12ea43a9d6eace2c9105f"},{"alg":"SHA-256","content":"9b817ea53ec1f6e78d380786ba03904d8e1c6ec3785b09e028764a7500cca3be"}]},{"bom-ref":"684dd6fc0f5cdb81","type":"file","name":"/usr/share/zoneinfo/right/Asia/Almaty","hashes":[{"alg":"SHA-1","content":"71c28b9f2715e92fc1f62a799cd0d1a45d3c14ae"},{"alg":"SHA-256","content":"8089a5ce3c13e0b0a2e57939568899f16c811d65ef87a1296c60817b72a0b232"}]},{"bom-ref":"8965d2ba0463c464","type":"file","name":"/usr/share/zoneinfo/right/Asia/Amman","hashes":[{"alg":"SHA-1","content":"b6993d911da3bc205397d31954878c6bd56c45bd"},{"alg":"SHA-256","content":"747cd2a9bd012fc2fc7709e9c59bd1b48cf90782e60904b4b0a4c9ae995a25ec"}]},{"bom-ref":"f35c1d852ef0d257","type":"file","name":"/usr/share/zoneinfo/right/Asia/Anadyr","hashes":[{"alg":"SHA-1","content":"c31f17240d14f4f14c2d9f18e9b26da6c0885478"},{"alg":"SHA-256","content":"f266f6dc5c7493c903f3e4dfe2054ae9a280e5f9f7511af51a236d2a82f35c2a"}]},{"bom-ref":"5c41bc9505b5593b","type":"file","name":"/usr/share/zoneinfo/right/Asia/Aqtau","hashes":[{"alg":"SHA-1","content":"b02323177b2bd251d296427e9d18499c20b35661"},{"alg":"SHA-256","content":"2f152e6a6c381b24dbea910084c5ecec2b8f0e2f151550abcaa718aaf7d1f36e"}]},{"bom-ref":"f1dbaa4ad6cd4f2f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Aqtobe","hashes":[{"alg":"SHA-1","content":"a1c77e61f95379bf128429d8e0e53e4ea021f0d0"},{"alg":"SHA-256","content":"4870c19fb05da1aee071721cfe950081e5c1969e23590fa09100836006dac1ce"}]},{"bom-ref":"ba42b8a475f4095f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ashgabat","hashes":[{"alg":"SHA-1","content":"ecbc6eb0cfa77f554289b52ff7ed5872578fe1ce"},{"alg":"SHA-256","content":"f7905cd4df9f93e39b535ccb674e83a5b469658f81c4827fb327186d98bf4c83"}]},{"bom-ref":"5daf899fc311b765","type":"file","name":"/usr/share/zoneinfo/right/Asia/Atyrau","hashes":[{"alg":"SHA-1","content":"57deb4bad1d807a14efd3b5b7f3bf6bf5ebf3aa6"},{"alg":"SHA-256","content":"5a43f15ec469d51ed03408117f5158ad47d26768ad7f210967db1556949ba1f4"}]},{"bom-ref":"d273cfa635d27ab3","type":"file","name":"/usr/share/zoneinfo/right/Asia/Baghdad","hashes":[{"alg":"SHA-1","content":"be64967c712156013593581cf5d18216f7532ab2"},{"alg":"SHA-256","content":"7708072f0ea05dc57e2b03860991413c6799605cba64b63d633bd1af6a15a041"}]},{"bom-ref":"d67ac3dddcf6265e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Bahrain","hashes":[{"alg":"SHA-1","content":"0d3b034eb9b78c7638f573914a54e02386fadc21"},{"alg":"SHA-256","content":"1b7a8e24aa41121096e347cd5714ca28954f4f164d28fd6220ba0773495adf63"}]},{"bom-ref":"671252644b915e2b","type":"file","name":"/usr/share/zoneinfo/right/Asia/Baku","hashes":[{"alg":"SHA-1","content":"cd335c3bd5cc6aca668d4c863148caf1f72b85ac"},{"alg":"SHA-256","content":"7f871bd0bf15cdf5e76fa9af31d721d68d2dd4a1a15e31a81551c8cb8087c380"}]},{"bom-ref":"5c94ec3b0e5e4560","type":"file","name":"/usr/share/zoneinfo/right/Asia/Bangkok","hashes":[{"alg":"SHA-1","content":"b0b3753cf695a580a457c6435c6e31743ee9c506"},{"alg":"SHA-256","content":"db5ab1f7cdf863ac2698b3c41f29f6c3cd78be6455589a27f22dc5e890b38e6b"}]},{"bom-ref":"ebf2601e4961ecca","type":"file","name":"/usr/share/zoneinfo/right/Asia/Barnaul","hashes":[{"alg":"SHA-1","content":"2989f71959c938f1d1d3582823c20c1b506fa794"},{"alg":"SHA-256","content":"37aec54db5976e653a5ffc5be3e502c563edcdc16eda24b52e7affc215306c43"}]},{"bom-ref":"d0a6e5e9e91736bd","type":"file","name":"/usr/share/zoneinfo/right/Asia/Beirut","hashes":[{"alg":"SHA-1","content":"8d25cdfda2adb69a42063e76423a5bceaae80340"},{"alg":"SHA-256","content":"5eb5304e5507dcadc198706b27d8240cba8f5f282713cc85e5aadfbd406c71e2"}]},{"bom-ref":"db5f89be23a3a771","type":"file","name":"/usr/share/zoneinfo/right/Asia/Bishkek","hashes":[{"alg":"SHA-1","content":"b5cba27b71297c963b5ecaa9550f7d0724ca6710"},{"alg":"SHA-256","content":"b6c98b5dadcb037359843c893f6601eb6b3a7ac93d5b51aab3dee44e110aec54"}]},{"bom-ref":"af649a2111086907","type":"file","name":"/usr/share/zoneinfo/right/Asia/Brunei","hashes":[{"alg":"SHA-1","content":"1ededbd04efa954a4a74f42e8f6abfe38fc2106e"},{"alg":"SHA-256","content":"2755969203cf4d6274030ea743e8b7d0d95d34a778361abb33cf00ad4811571c"}]},{"bom-ref":"c32227c9495b82f2","type":"file","name":"/usr/share/zoneinfo/right/Asia/Chita","hashes":[{"alg":"SHA-1","content":"5f7478a07d351e0af17db75354b88e3a2f4919bc"},{"alg":"SHA-256","content":"f37ac9264a9797bc0f7809a4896afafc90a0001765fa593fb0beb03fa5fd537f"}]},{"bom-ref":"cfae356f341fb647","type":"file","name":"/usr/share/zoneinfo/right/Asia/Colombo","hashes":[{"alg":"SHA-1","content":"d246a905d11b603a3119a3206ce5987d153bfa66"},{"alg":"SHA-256","content":"56547a72733e9aa9efbf0220988dd3cbc43367ed9219d69805ed826b900a8d97"}]},{"bom-ref":"ac17bef02c0bb689","type":"file","name":"/usr/share/zoneinfo/right/Asia/Damascus","hashes":[{"alg":"SHA-1","content":"cf4033bc274e71d7659ba3a07aa342fd33a35113"},{"alg":"SHA-256","content":"f05b953dae1a2df4a0bb48c8fd43d810eabd9608f97408bc13f65b210dfa6f37"}]},{"bom-ref":"b59979bc6cd60c96","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dhaka","hashes":[{"alg":"SHA-1","content":"312d96da990478cbb11047198f94bc7798f483d1"},{"alg":"SHA-256","content":"727a72e3d34ec7d5140278a87e4451c7a178787e55e26b0fccf3849c611c4733"}]},{"bom-ref":"3a52fde7217bc324","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dili","hashes":[{"alg":"SHA-1","content":"40a8f898ee2a350e7fbaf23276e1c56499673a69"},{"alg":"SHA-256","content":"65433595dbc4274528f39719a7ef6ab022e2a2004c0b01677c18675eae58325e"}]},{"bom-ref":"b516a8b07efa7006","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dubai","hashes":[{"alg":"SHA-1","content":"0126497e7d95c36cd0219a4b4eaff8ed360d0203"},{"alg":"SHA-256","content":"021471fd3e9592d041fba58278210017b210d0ba4e34991eae656d239a8b28fb"}]},{"bom-ref":"07c928a91cfecc8b","type":"file","name":"/usr/share/zoneinfo/right/Asia/Dushanbe","hashes":[{"alg":"SHA-1","content":"2ebaa5f062527cc08a9e3c6c7f9d830e38070aa3"},{"alg":"SHA-256","content":"5df87ce400417a624bde88dd023d55230a6180a386048e38c71688d2b4a0c834"}]},{"bom-ref":"6a0184c43b557a4a","type":"file","name":"/usr/share/zoneinfo/right/Asia/Famagusta","hashes":[{"alg":"SHA-1","content":"716d84be3ad2ba4c05fa95861535493349b4c1b5"},{"alg":"SHA-256","content":"bbefccfda0eef52f86b25c776e6d1c6b5fb9434a68f83fdb0e5a286da834a295"}]},{"bom-ref":"4f9cede4331b2b60","type":"file","name":"/usr/share/zoneinfo/right/Asia/Gaza","hashes":[{"alg":"SHA-1","content":"ae1024d2310fd91473bfc74c4adf1e292d38ae4c"},{"alg":"SHA-256","content":"74535d1c9f8bc7135adf3ed55b6edbff75fe79d0f867eae15b1e23070b6fc85c"}]},{"bom-ref":"6fa1bd298b5455ff","type":"file","name":"/usr/share/zoneinfo/right/Asia/Hebron","hashes":[{"alg":"SHA-1","content":"5e9eaedcbe7b22f625ab307c1e7534d1faaeed84"},{"alg":"SHA-256","content":"9c5c7f3814c5c57c7c8d7a02e0b1aa6e760b012500bcd38fdbe2be817001cf9e"}]},{"bom-ref":"f92584a1caeacbe6","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ho_Chi_Minh","hashes":[{"alg":"SHA-1","content":"87db1d3be0abfb7b094bd0cec6da67b8b471853d"},{"alg":"SHA-256","content":"8834fb47d285572c22bb0384848710b530079dab8915c8bf8a70cf110f321728"}]},{"bom-ref":"6abb49d8c77aacec","type":"file","name":"/usr/share/zoneinfo/right/Asia/Hong_Kong","hashes":[{"alg":"SHA-1","content":"aad6aeb87dac1563a5dda2eda515528ca8b171e7"},{"alg":"SHA-256","content":"6f045e01c0c80e157f240abd549d3ce8957972b9bb6c9f04f75f3d69f3afc36f"}]},{"bom-ref":"8eeaff82cd527947","type":"file","name":"/usr/share/zoneinfo/right/Asia/Hovd","hashes":[{"alg":"SHA-1","content":"d16e68959d4e2f3b49625004c2f133681ddd4cf1"},{"alg":"SHA-256","content":"bdcbcb464df602e87a840d7fb4ca3fffbc33ffe0d662958b16920bc3f81f971f"}]},{"bom-ref":"a118ca6f7a7d1498","type":"file","name":"/usr/share/zoneinfo/right/Asia/Irkutsk","hashes":[{"alg":"SHA-1","content":"5497ebe5a5d5971a3fc5a68471b554339783f73a"},{"alg":"SHA-256","content":"dd893ad3a5636f2503d1fbd21810fd3363548fa0b2617ed91ca6ad269860cc6c"}]},{"bom-ref":"5294ba148ff51d0d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Jakarta","hashes":[{"alg":"SHA-1","content":"2e3216c48e857769fa797df220c067c14e9f81c4"},{"alg":"SHA-256","content":"1700ef66a03b82c6844e5ed7315f50a2a96127165cc2dfa959535c0a0c1c5f06"}]},{"bom-ref":"6d58d668d46c086c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Jayapura","hashes":[{"alg":"SHA-1","content":"24b268ecd5fb614e21a62562a3327da4b0add773"},{"alg":"SHA-256","content":"f50c463a9260839b47573c021c6e2aa0a29a30ab47aa717b546ec3e5c8519fa7"}]},{"bom-ref":"01e64c33c42b9e3f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Jerusalem","hashes":[{"alg":"SHA-1","content":"7377f8d68a871ec5437cbc0f065a5d307d1f9d1c"},{"alg":"SHA-256","content":"350225f72e887f6f2d2ff4455a19e5a86e0ec099d8563ffbdab91478dc72e57b"}]},{"bom-ref":"0faa8a065a55683c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kabul","hashes":[{"alg":"SHA-1","content":"7bd580b5145f4337e452af040772022d86fd6815"},{"alg":"SHA-256","content":"c16331aa3f5a7c44d58bb1e773ed3915b3587a582848265973dc6f0d61b664ba"}]},{"bom-ref":"4166537caaaaca01","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kamchatka","hashes":[{"alg":"SHA-1","content":"9e8a023953cf3b5ef9b477ac4a1efead6af36ad6"},{"alg":"SHA-256","content":"97ebd11ef87485a5484ac884ad3c9a305d158b307037fb5cf0b934a18ee2f5a1"}]},{"bom-ref":"94ca5197e91f3e9e","type":"file","name":"/usr/share/zoneinfo/right/Asia/Karachi","hashes":[{"alg":"SHA-1","content":"acd1328e1c43a4e3aa378186257e84bb35987858"},{"alg":"SHA-256","content":"0ab0a0c7739df847b67aa1aa1b6cf5879e373d84afa90df8250cfc0279ff9a2c"}]},{"bom-ref":"c077ee41b801df2a","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kathmandu","hashes":[{"alg":"SHA-1","content":"9dd21ce83174f17e58765206af5f62615813d778"},{"alg":"SHA-256","content":"7c04a919306d960a119c08f407b345efa1db5f724d5446ae79c98e2a422d00e0"}]},{"bom-ref":"e8f5ae742f45bbe2","type":"file","name":"/usr/share/zoneinfo/right/Asia/Khandyga","hashes":[{"alg":"SHA-1","content":"f5c7edb21e7ff3ed6cb3e22559d18ff0936759ea"},{"alg":"SHA-256","content":"fc383b8bd52963bf15452cd2f06f68e426c46eb2b88f76c2170f8467ed0051b6"}]},{"bom-ref":"a72a09c3a2c36cde","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kolkata","hashes":[{"alg":"SHA-1","content":"65e67637bd1d504cf8c017708770cbb29fc88463"},{"alg":"SHA-256","content":"10cc9f7ac5e408608cca4643e4c93e70da11f40c0b21e21b72f05003f26f98c4"}]},{"bom-ref":"621fc7f5c232f64f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Krasnoyarsk","hashes":[{"alg":"SHA-1","content":"d42b670498f1db43732cb89188167df9b5379922"},{"alg":"SHA-256","content":"682d4062cb16d446e5a2fce69525611016b0855edc27a93e855387d648298d55"}]},{"bom-ref":"d6d20b8ed47f538f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kuala_Lumpur","hashes":[{"alg":"SHA-1","content":"fc47f4a3eaab465bbfb7524d96b5d76ae27bf9df"},{"alg":"SHA-256","content":"142911b9a53e2781bef2b21fb842f4c61f3bd9df27f34ba466543f563b508642"}]},{"bom-ref":"deaea036591ad5cb","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kuching","hashes":[{"alg":"SHA-1","content":"088e2e41b3793227d73289b9f2a1345de9021361"},{"alg":"SHA-256","content":"08afd71d5b43978934a955553fe3c219c20e88c392635425ff3b6db6ec57853d"}]},{"bom-ref":"d49c85e0ffdf2558","type":"file","name":"/usr/share/zoneinfo/right/Asia/Kuwait","hashes":[{"alg":"SHA-1","content":"ea391bee5abfe058e6463f746f31892087c82479"},{"alg":"SHA-256","content":"9556ff0d661a09bf3b5c857deb17d5c738db1020bd73934ce8f563486cafa9a2"}]},{"bom-ref":"d4a39fdd987b3eb2","type":"file","name":"/usr/share/zoneinfo/right/Asia/Macau","hashes":[{"alg":"SHA-1","content":"2fb1c3f465122e9eba90bfea0faae7ec4d9413d9"},{"alg":"SHA-256","content":"c24a7fef867d62f0791f7b37c64ab8e00c3568a149daee0e1c50d096a923af4d"}]},{"bom-ref":"d3bd14d9ea8a1242","type":"file","name":"/usr/share/zoneinfo/right/Asia/Magadan","hashes":[{"alg":"SHA-1","content":"d34a18a8683b74299d058c11229b9b12f375981d"},{"alg":"SHA-256","content":"1970e1dc1b874f0c831a1366ba27762b5824ad691f47ae480bec8069317559a4"}]},{"bom-ref":"cc5c06d0f0622781","type":"file","name":"/usr/share/zoneinfo/right/Asia/Makassar","hashes":[{"alg":"SHA-1","content":"284956a2ad761376bbcd9086b68a1cad5f399d73"},{"alg":"SHA-256","content":"0c5322eec6b1ca98bfe3f4a3360661dc3d7b43f72676401314199a90d39e282d"}]},{"bom-ref":"30557742e6f0882a","type":"file","name":"/usr/share/zoneinfo/right/Asia/Manila","hashes":[{"alg":"SHA-1","content":"33e85c4cbcb91769ce07e01c3d1d750316fa25ca"},{"alg":"SHA-256","content":"8d0eb473771b7d08e1013710ddd2b12e45aa8b34ced0fad3a0b42a5701ed7508"}]},{"bom-ref":"7285d1884625568d","type":"file","name":"/usr/share/zoneinfo/right/Asia/Muscat","hashes":[{"alg":"SHA-1","content":"114d4670e2d4a8a47c64512a5634e58686eb82ea"},{"alg":"SHA-256","content":"70585f2eae2038eca4077b734f51582e7ddaf27ec9c35d17f728793e6562d465"}]},{"bom-ref":"14be4464ef960385","type":"file","name":"/usr/share/zoneinfo/right/Asia/Nicosia","hashes":[{"alg":"SHA-1","content":"6401bf352d85dfaf4a86c66268399154698aeaaf"},{"alg":"SHA-256","content":"80f19eaf8e9e0cced62b8c86f58ce2033e9af90e897f258ab744961e8395de92"}]},{"bom-ref":"bd3dc9763df8afbc","type":"file","name":"/usr/share/zoneinfo/right/Asia/Novokuznetsk","hashes":[{"alg":"SHA-1","content":"110c356deee595fb9e76806f4a97363466f2b71d"},{"alg":"SHA-256","content":"fff3101b1d4e96191b619d9e980331bdec9021b865d29183d2cc4f10c73e7fad"}]},{"bom-ref":"40c5ae99d283aa44","type":"file","name":"/usr/share/zoneinfo/right/Asia/Novosibirsk","hashes":[{"alg":"SHA-1","content":"eefd7b315c42ceb946afa9ea6f211d2b4564f7f2"},{"alg":"SHA-256","content":"e04473f3d482ea9ba9916aea41b26b2202341b62c4c6cdb8f2fe4fcff4d34734"}]},{"bom-ref":"a031e70fd80c8f10","type":"file","name":"/usr/share/zoneinfo/right/Asia/Omsk","hashes":[{"alg":"SHA-1","content":"53b80113be46b7f8c34064e3f4c8848cba918cdc"},{"alg":"SHA-256","content":"8cb6ecaac0bcd2559cc6250c8499ee38891ba7c55f0543fd9fa8ed1f65f57c2d"}]},{"bom-ref":"e8beb1355d2ae6eb","type":"file","name":"/usr/share/zoneinfo/right/Asia/Oral","hashes":[{"alg":"SHA-1","content":"333925bcdcc2effe07366cef0a78e14e85cafa0e"},{"alg":"SHA-256","content":"a5ddcae8e80c9a393e72d09f48bd12bf90ba6a46c1cc6fa0933fefac4c2ac65f"}]},{"bom-ref":"c88f94f24590c4a9","type":"file","name":"/usr/share/zoneinfo/right/Asia/Phnom_Penh","hashes":[{"alg":"SHA-1","content":"df35bd86ad8c35639066646c6f476ad9fd29189b"},{"alg":"SHA-256","content":"bf590685089cda62d67cc1f25824b5e7cd2b5a86754e54fb66bc0aee8e878df1"}]},{"bom-ref":"9d360cdeeb76fbba","type":"file","name":"/usr/share/zoneinfo/right/Asia/Pontianak","hashes":[{"alg":"SHA-1","content":"1343d6accfaba68d8296d31dcadfc63eb3c1e50c"},{"alg":"SHA-256","content":"3d0c139143f6a8bef84ff6f069c31d1a6815861c0dec14918e9ee7bc7d727fc2"}]},{"bom-ref":"3a4405b1baccacce","type":"file","name":"/usr/share/zoneinfo/right/Asia/Pyongyang","hashes":[{"alg":"SHA-1","content":"1eda379b1479259a3781e16ac82ff267f257c612"},{"alg":"SHA-256","content":"569f166f78dc24437e2ce67f7fa3672df8af74527b74c092ae6d214c43962c79"}]},{"bom-ref":"79c0f417ce72d347","type":"file","name":"/usr/share/zoneinfo/right/Asia/Qatar","hashes":[{"alg":"SHA-1","content":"79562bd3420b0cb8b6a94b191f0029537af2011b"},{"alg":"SHA-256","content":"c17044478042c99e8cb57d8286c65b6cfc9c5c69272229886c27ace17a22cb5c"}]},{"bom-ref":"40c4452323111cfb","type":"file","name":"/usr/share/zoneinfo/right/Asia/Qostanay","hashes":[{"alg":"SHA-1","content":"8a33ec2840a92228be16b4d0cefdd091634eddf1"},{"alg":"SHA-256","content":"6c2bc286b1e3a4f2ed07ac4f84a21f2b6d61117f3e9d992259721c039ebacff2"}]},{"bom-ref":"cc0f07f135699f9c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Qyzylorda","hashes":[{"alg":"SHA-1","content":"b3a2de4b7308f94c28133130d945bd7a61068b66"},{"alg":"SHA-256","content":"19007705e36a1f6d51e2527501e6abf3994ff2eca23ee3a62e273fef35c069f0"}]},{"bom-ref":"6d0ac8b0cfd9d8a4","type":"file","name":"/usr/share/zoneinfo/right/Asia/Riyadh","hashes":[{"alg":"SHA-1","content":"6d4966cf66fa909e46c770863851778f6f492e4f"},{"alg":"SHA-256","content":"66db780a8dc100309138b1bf7834482d0210587178ef9b52b70686974ea5b348"}]},{"bom-ref":"cee4ce90a1fee95f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Sakhalin","hashes":[{"alg":"SHA-1","content":"30eb51483f3682f8e5da84098587b486bb296083"},{"alg":"SHA-256","content":"6bed3041a8faeed299a6a70ee61392dedbfe1b6be11a2cb92cb18e912d32b90a"}]},{"bom-ref":"4aeaaad9f865efbb","type":"file","name":"/usr/share/zoneinfo/right/Asia/Samarkand","hashes":[{"alg":"SHA-1","content":"70fe49c4f3d8ed269262941d144aef8c5203db1b"},{"alg":"SHA-256","content":"7b5b60dd5a280b4d2e8aed65f8cf53c8289a1d14f2dcca45f3d948269c2e93d1"}]},{"bom-ref":"eb0281eb17c8cc86","type":"file","name":"/usr/share/zoneinfo/right/Asia/Seoul","hashes":[{"alg":"SHA-1","content":"25bcb4f3319374432abc1b562d840f9ee108d5c2"},{"alg":"SHA-256","content":"3b7d73ae2f17d29d083063996745062e47de1f3c2cd2e228f4bda7584d736317"}]},{"bom-ref":"7028d5e70eb53519","type":"file","name":"/usr/share/zoneinfo/right/Asia/Shanghai","hashes":[{"alg":"SHA-1","content":"d28c6b9c1de478461aa6e70801b8f7c58b62185b"},{"alg":"SHA-256","content":"0f1b7b1f187bc86e2843779cdefc6b38df2ac977a28b930fdf98e3a7d69a36b1"}]},{"bom-ref":"2930b591de112d92","type":"file","name":"/usr/share/zoneinfo/right/Asia/Singapore","hashes":[{"alg":"SHA-1","content":"2b680ebc0fe16921d57ed6bce93c87f4e9f09c9d"},{"alg":"SHA-256","content":"7fbaff2860adb2356b02c311b4f27b2ef8bddc4c69643e37b3af561417a532e0"}]},{"bom-ref":"14b9e6dc1cc5c884","type":"file","name":"/usr/share/zoneinfo/right/Asia/Srednekolymsk","hashes":[{"alg":"SHA-1","content":"dcbc0f5d9fc70887e891a04fe31509acec2cab0b"},{"alg":"SHA-256","content":"2f3d3f13866fe5cf13ce3bfe86ff2f437fea0cf3a8e64f87e1e890f8b4e7e39d"}]},{"bom-ref":"0471d743e3de2f2f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Taipei","hashes":[{"alg":"SHA-1","content":"7fe467393f20d6bf96881e212bc49051624dbb77"},{"alg":"SHA-256","content":"5ac5d0257da8e472d7f55343e8bca0863ca7f3c10833aed8cbee8af6a04e77ba"}]},{"bom-ref":"f94e3d9508c517f4","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tashkent","hashes":[{"alg":"SHA-1","content":"0de9587897f05a0fa4ab21e4887b3281f867e3cf"},{"alg":"SHA-256","content":"09f62c2e37e824e2f0a75651bb94c556b000e6b09efb44d59be2e6315141d323"}]},{"bom-ref":"0fd46c6d7ed7926a","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tbilisi","hashes":[{"alg":"SHA-1","content":"41e58937e2259c746152752db4e03a6b3a729537"},{"alg":"SHA-256","content":"0fef30597eddef86e31be51e04c3c3d37bffe67c1d0c54a7db4c744c5a3d4a91"}]},{"bom-ref":"683b08345785e17f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tehran","hashes":[{"alg":"SHA-1","content":"e1f59755945f0b8f28462b4d67ee906f59697b22"},{"alg":"SHA-256","content":"ad72495c660729f0e33cf64d2e1aeea46989decac71d0a8922eff6d39591e649"}]},{"bom-ref":"cc4a16f594f47c50","type":"file","name":"/usr/share/zoneinfo/right/Asia/Thimphu","hashes":[{"alg":"SHA-1","content":"ffc270276aab42a4a3b6207073fb596e8b7e5371"},{"alg":"SHA-256","content":"794c223c90d5e126e143c118093a1bde4e89ceecfa0a3e78c06f50096338ceac"}]},{"bom-ref":"3ca2c5c564a06925","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tokyo","hashes":[{"alg":"SHA-1","content":"9432011bb4b60e4d92bda22c92f9aaad77a37779"},{"alg":"SHA-256","content":"58a1c13838423566caaea0400bee1da77ae1f4e5722a93581d64973f68c81210"}]},{"bom-ref":"210c5d792caac675","type":"file","name":"/usr/share/zoneinfo/right/Asia/Tomsk","hashes":[{"alg":"SHA-1","content":"7424bedcdb3270499cd6e1dc7e6f898b579bc1c0"},{"alg":"SHA-256","content":"dc59ef865536e017c28afefa7c37bb8480eb2a67522a44ac4bef1df21e1414da"}]},{"bom-ref":"5018d667640133ab","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ulaanbaatar","hashes":[{"alg":"SHA-1","content":"a5c11bdeba79e015210fa2764cb5d7b339989055"},{"alg":"SHA-256","content":"d10c3b0ecf5f3631dcbb43509b650909bb619f53405923b600f91fb0965e6e6c"}]},{"bom-ref":"e3f808476b029f44","type":"file","name":"/usr/share/zoneinfo/right/Asia/Urumqi","hashes":[{"alg":"SHA-1","content":"b880f2bd0dd6ed73274e29a2bba4084305db35f7"},{"alg":"SHA-256","content":"dabef678ba11b958632dc97bb3e87bb2f0da15aeb1aaf4eaea892529f3c3d062"}]},{"bom-ref":"ca53db1348e2e4ed","type":"file","name":"/usr/share/zoneinfo/right/Asia/Ust-Nera","hashes":[{"alg":"SHA-1","content":"91c20ea1632d65624de9e6264643441c70a6161e"},{"alg":"SHA-256","content":"8292be55ba54e886ea2d5ee9f1c8b1fe78a8c580f7d35812d41591c37a490f1e"}]},{"bom-ref":"6557bbdc7cae0eed","type":"file","name":"/usr/share/zoneinfo/right/Asia/Vientiane","hashes":[{"alg":"SHA-1","content":"cd3d71a15cc6459733c08220eaf7ed8f5b9a236a"},{"alg":"SHA-256","content":"a5113ea8f19c711e622ff2cf5e944bbae69c9dd40cdff3470fb27d8b6e4f7b15"}]},{"bom-ref":"3663b2f4dc422e9c","type":"file","name":"/usr/share/zoneinfo/right/Asia/Vladivostok","hashes":[{"alg":"SHA-1","content":"15aec68e06dffff513e616d7d507a6449634c59a"},{"alg":"SHA-256","content":"d357f01229efb11e34542d760dc6434a27487beca0e32706e0bd73a08c15ee66"}]},{"bom-ref":"e70445f453466492","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yakutsk","hashes":[{"alg":"SHA-1","content":"739a3a160c6b69f4a23a75bb7632af88c686ac29"},{"alg":"SHA-256","content":"a7f732eb939f61c9b302c9f7960a03044540cb9a794eba95d1544aef52d919a4"}]},{"bom-ref":"4cec48f7ddeacb82","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yangon","hashes":[{"alg":"SHA-1","content":"a5b74c112481ed5c1289b1803f585e52d06fdbd3"},{"alg":"SHA-256","content":"125ffa42c4aec706806021994c1ecaf7999146666f40dd6f3653817acecb958a"}]},{"bom-ref":"ebfb330c4c25ae33","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yekaterinburg","hashes":[{"alg":"SHA-1","content":"bbb7189f24ed3b48bfd933f3e133a76fb8c31881"},{"alg":"SHA-256","content":"3640cfff23344d084a895b2b936d181a73b323c6b746e254d1d1dd1df1c4a471"}]},{"bom-ref":"6284d4df11c0f89f","type":"file","name":"/usr/share/zoneinfo/right/Asia/Yerevan","hashes":[{"alg":"SHA-1","content":"801f9b96f7dbab8791f7f7113ea701fd860529a3"},{"alg":"SHA-256","content":"ace7e6e36d7bf12c4b5b4378dc56fd3b291663a2e4c5bb02afab5cf4b0dbbffc"}]},{"bom-ref":"d4789b39ba1bb0cc","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Azores","hashes":[{"alg":"SHA-1","content":"9b7568ddf82702bc8521e83ce4a3d84f3d05316d"},{"alg":"SHA-256","content":"3961a8c1f1d4e21c8980ef9e064aa828d9a5a35bcdf8ca1b70a9c73463fe8614"}]},{"bom-ref":"1cc28af01c6529b0","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Bermuda","hashes":[{"alg":"SHA-1","content":"d9151cba4698e465e7631cfe3b9553c53ea898cd"},{"alg":"SHA-256","content":"02d4071e74e8c3cb2c2c9bd89adcb75c4fc84588eee9c45684205906ce2ddd7d"}]},{"bom-ref":"ca371fc451d5ff32","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Canary","hashes":[{"alg":"SHA-1","content":"0c49fee21ec82746fb2b58a725eaa35cf0986ec2"},{"alg":"SHA-256","content":"9b1a4deab550ec9b67a1282214e4476744ba2af06295d08401521bc77256c5d1"}]},{"bom-ref":"66b0b870cf24cdd5","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Cape_Verde","hashes":[{"alg":"SHA-1","content":"8a257e7808339b1bd8d91a45ab192a27419a76b3"},{"alg":"SHA-256","content":"fa90f81876ba69056291d45d5768616f7cca1755c163f54606a6aedfb41bfaa9"}]},{"bom-ref":"2cdae2c62c0c254f","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Faroe","hashes":[{"alg":"SHA-1","content":"eba8b9e14bff91b31cb010254cd01ffb735f1c0f"},{"alg":"SHA-256","content":"8d4b05aabb767f726b2f88895bbda845488a365d88f28ca9d7da802b2e80b5cb"}]},{"bom-ref":"4a09bcacf69d6fc8","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Madeira","hashes":[{"alg":"SHA-1","content":"0df3dbbd224c11a5def8d0581f5ed18df19827ae"},{"alg":"SHA-256","content":"5d5c5132fe2f05c537d4b901be1cb8d9ad4d6a0bb7502a985bbd5bff7af2c055"}]},{"bom-ref":"0e0313954b7ababf","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Reykjavik","hashes":[{"alg":"SHA-1","content":"063bd38d550f52fba0f4f63c0e5aea20719f5281"},{"alg":"SHA-256","content":"26044ebfe9aa2775fe6421c8c1ed3e8ba8a7b6c869de234a387ce6bc651aa214"}]},{"bom-ref":"4b774d49f6f0e067","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/South_Georgia","hashes":[{"alg":"SHA-1","content":"492055d16a03c3a828b577928ca771167060e4d1"},{"alg":"SHA-256","content":"9dae92611be278cf1589e2dcb4cafccf751887fbc609e5f8fccde6ae19ae2b6a"}]},{"bom-ref":"f3c20d85459dd549","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/St_Helena","hashes":[{"alg":"SHA-1","content":"2b022f7c646461ff3bdf17400a3b1760054f0016"},{"alg":"SHA-256","content":"38fa7e7b14f551fcb1d5b89c68c50c56cc99437181f53b56f44b2a8bf3446913"}]},{"bom-ref":"51206a89a1d7212b","type":"file","name":"/usr/share/zoneinfo/right/Atlantic/Stanley","hashes":[{"alg":"SHA-1","content":"a535eca69ba6d124be4f34e7739950b3eb50f17c"},{"alg":"SHA-256","content":"828a8d83e57893ccbdbdbf1ad750ee07f3b2b24eb021f249161827593666e2b8"}]},{"bom-ref":"630ad6f7ad4c6ab8","type":"file","name":"/usr/share/zoneinfo/right/Australia/Adelaide","hashes":[{"alg":"SHA-1","content":"9b795f8f25d619d1f4805cf7001e0bd4f641a2eb"},{"alg":"SHA-256","content":"e39a6d188f38b6a1d159c36797ec0b855357605b1a95b1abbef2c72143f33815"}]},{"bom-ref":"71bfb6c8de8124ea","type":"file","name":"/usr/share/zoneinfo/right/Australia/Brisbane","hashes":[{"alg":"SHA-1","content":"50ff27cc928f74f27f6c94dd0e8deb0c53c7ece4"},{"alg":"SHA-256","content":"11e4c3667175e366c7d07b2e7920ac18ce3db33ac60d3bd053b9057e2104939c"}]},{"bom-ref":"01621375ce59c1a0","type":"file","name":"/usr/share/zoneinfo/right/Australia/Broken_Hill","hashes":[{"alg":"SHA-1","content":"e17abe8d5d0c242de49aebd078dda98b30c36cd9"},{"alg":"SHA-256","content":"48bf8160d40642e0c58adec8391a742285f49404c54b44cc482ad233f51cf881"}]},{"bom-ref":"97303ad171bfbe2a","type":"file","name":"/usr/share/zoneinfo/right/Australia/Darwin","hashes":[{"alg":"SHA-1","content":"953b15a08c80668d708f19eb48e18c26a1931bf2"},{"alg":"SHA-256","content":"69e90dc1d9059141fea2c359ea1aafe47cb6d600f25135902ea71163a9818a74"}]},{"bom-ref":"b5ca476fb8a527f9","type":"file","name":"/usr/share/zoneinfo/right/Australia/Eucla","hashes":[{"alg":"SHA-1","content":"fa32fc3c8cfe47c1edac956ec4b66119971623fc"},{"alg":"SHA-256","content":"be2403879f69d4fdf71b889ab089693baf7e762278d16c37d0ab58c2f115172f"}]},{"bom-ref":"9fd13aff09a2709b","type":"file","name":"/usr/share/zoneinfo/right/Australia/Hobart","hashes":[{"alg":"SHA-1","content":"bebf6902f862c232564a5ac3f7aba4940b520a25"},{"alg":"SHA-256","content":"692b51d2cbf99d56140ab30c94566be5d5f61d3fb93cb9a59c902ad8e8cd4e1b"}]},{"bom-ref":"cf11805bc2c37ac1","type":"file","name":"/usr/share/zoneinfo/right/Australia/Lindeman","hashes":[{"alg":"SHA-1","content":"617c8e10c87c8738249fed5aecf59b9d41da6a1f"},{"alg":"SHA-256","content":"711d5c83a7914d328449f9363c5199ebb0ba0e601100059075276c81a687ccb4"}]},{"bom-ref":"df3afc17edd9e58d","type":"file","name":"/usr/share/zoneinfo/right/Australia/Lord_Howe","hashes":[{"alg":"SHA-1","content":"180e5c883222ba7574b07e5405cfb373b1307d1d"},{"alg":"SHA-256","content":"f504eb72841a9ed6b7cb9e34fa394122f83e0e0d0b9d5863f53cad163edd199f"}]},{"bom-ref":"4c569b4a09268244","type":"file","name":"/usr/share/zoneinfo/right/Australia/Melbourne","hashes":[{"alg":"SHA-1","content":"c4306b6f42d04d9ceba68a7fa215cfec82711541"},{"alg":"SHA-256","content":"c5e94e7035809e180aa050b55dd448125e535cfa546078e3b251f053ad062407"}]},{"bom-ref":"e9ed1c6141ab9494","type":"file","name":"/usr/share/zoneinfo/right/Australia/Perth","hashes":[{"alg":"SHA-1","content":"61eaf161fb9d35bf2c96bc1f2abc7171358a7e1e"},{"alg":"SHA-256","content":"0fb5587b5905a2f161c674c108567ba9d37e21a4436a05bdbce24d5fa2368564"}]},{"bom-ref":"51a72b005e3ecc97","type":"file","name":"/usr/share/zoneinfo/right/Australia/Sydney","hashes":[{"alg":"SHA-1","content":"a0b0ec781fd40bb04c660218837bd57393d1c7eb"},{"alg":"SHA-256","content":"e970347c261081869c06a5c365815cc48bee0602d1e19da0d3a6e28ef5901a27"}]},{"bom-ref":"3d90c110e40b8e01","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT","hashes":[{"alg":"SHA-1","content":"b96f95d9a6800c0f74977837f058a5d56e55c432"},{"alg":"SHA-256","content":"39bef83dc0ad7e25d3d8cc1b7ba9e1b4cf34049c35af380933d1d77d2bc5caae"}]},{"bom-ref":"a70f44bb26a5a53d","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+1","hashes":[{"alg":"SHA-1","content":"812e03860a0ff6f9defe64c17a4761fa73f6eed6"},{"alg":"SHA-256","content":"c6567fa0886268c7350128a133752b33eff831898257d83d8ad8179f639ba02f"}]},{"bom-ref":"76bc6cf63f46f251","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+10","hashes":[{"alg":"SHA-1","content":"4f482c04d45750dc5fe0e00060e90e9fac44a283"},{"alg":"SHA-256","content":"19ee5a634f44691b6fafd35c0f533e9004ecb0221bdf3f8e5cf2ebb6ebead085"}]},{"bom-ref":"d5a64b6d7c3df291","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+11","hashes":[{"alg":"SHA-1","content":"0bf8bd6d3b981ed9d8ce2128871e942e8049bab5"},{"alg":"SHA-256","content":"c11f6359495493a5b150d2e8a73a61959ba51e93769d5c59a62e58ac8cf03f91"}]},{"bom-ref":"0a91c408bc6d028f","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+12","hashes":[{"alg":"SHA-1","content":"cf2d9a510415f02ce2b2f272598597588b13ce5e"},{"alg":"SHA-256","content":"b8a84265c0724ec8baa61cc913185db89cac39ba88a295e1188993d8131ed7a8"}]},{"bom-ref":"41fe44f9d00d5983","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+2","hashes":[{"alg":"SHA-1","content":"ba74f561726b37c35e279a240271ac8b97125764"},{"alg":"SHA-256","content":"c0f79340974422266215a3564959f6cca517044bc1cba2b8273b17a15129a9c9"}]},{"bom-ref":"d19837b57611a758","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+3","hashes":[{"alg":"SHA-1","content":"4d3b9d1020e5b68485484eae5b21bf5bafa6fe3e"},{"alg":"SHA-256","content":"09127dbe200bacfe14824dd6effeaf8ea6afa56c6bc8c2c5e573a37bdba3b02f"}]},{"bom-ref":"9beada631d0ac809","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+4","hashes":[{"alg":"SHA-1","content":"79eadaa9901d173b9ec9a49af593fc9e66b60b77"},{"alg":"SHA-256","content":"1e3727ae8838213327e0303fa8834569c6985e2ab858849a9c452ce8aec4f98c"}]},{"bom-ref":"ef3d4fc54ec4977d","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+5","hashes":[{"alg":"SHA-1","content":"5e8c96fa659931a7d96e678e2185502a8e3a670a"},{"alg":"SHA-256","content":"8045434e963a07aa6abdbf56d851be3073bcb0ebb0c31349d8e2d144147a915a"}]},{"bom-ref":"b1c054e5cf3142f0","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+6","hashes":[{"alg":"SHA-1","content":"e9f585299f17ea0f79e2c75d6722dc13867e2f11"},{"alg":"SHA-256","content":"5f989002e671c9e1e021710e088b3042656188425bf0b35762e9d1e091c6c993"}]},{"bom-ref":"d4db13b6e6465986","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+7","hashes":[{"alg":"SHA-1","content":"501e7937055930320b92d6450fbc35c2a07cf643"},{"alg":"SHA-256","content":"60b24a52910e9a2aaa921840cabaec35d8e68c1805aa198f50b2612dfeac663a"}]},{"bom-ref":"2b0371e1c410df0c","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+8","hashes":[{"alg":"SHA-1","content":"4778c429c2d15b15154b79ca463bd1de51b76751"},{"alg":"SHA-256","content":"75943b89555ae23416cf3cb09174ad8b318c849547e400d509840fbcab90f6dd"}]},{"bom-ref":"c819c038fba8848f","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT+9","hashes":[{"alg":"SHA-1","content":"3cd7522ae50122e38bb5a8f5f24c78ba60d6de9f"},{"alg":"SHA-256","content":"ed9a09ea8ff9196e72c9b5512e15cf9982067c9892fc0e374143803ef9db29a5"}]},{"bom-ref":"062bcf69f1438d7d","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-1","hashes":[{"alg":"SHA-1","content":"8f65531c0cff154f59ea42a97789038db9a50a90"},{"alg":"SHA-256","content":"1a78fd36aa65bfb4d1e940c36f89b0b66c28034d79f848e73cfc541f7a05666f"}]},{"bom-ref":"5cbe0700e093557f","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-10","hashes":[{"alg":"SHA-1","content":"512a56854e2bbe728d7a8af4a06b535d409c393a"},{"alg":"SHA-256","content":"2fe361f40fe58e1f76b2422a8f1d3259ac99ba5364b723f2a699769362dd76de"}]},{"bom-ref":"098619fc8d7a48aa","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-11","hashes":[{"alg":"SHA-1","content":"1378595b9a60029c3535d1efdd697080a7d9ef5f"},{"alg":"SHA-256","content":"f9529333fc6e8df23db1c6cab200718f261cfdfcd60b950827b50e8385536787"}]},{"bom-ref":"15772ebfd409387b","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-12","hashes":[{"alg":"SHA-1","content":"5b792def3f8352854b2da43c9558aa2406080751"},{"alg":"SHA-256","content":"590021b5095baccb671afd41ecbaab04eb1ce2b0e98395b05ca280821210264b"}]},{"bom-ref":"f5d06d08e8d31935","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-13","hashes":[{"alg":"SHA-1","content":"dab0685f275a0e968a52ee72e4d4a5116cfaffe3"},{"alg":"SHA-256","content":"06750a9cbe8c5902700b11ae5566ce4753592a3167c1ac59a75d8b1e5cdd0d38"}]},{"bom-ref":"59114d3c4a595bd7","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-14","hashes":[{"alg":"SHA-1","content":"a3c359abb66860ddc6f2053b453b39985e9a2834"},{"alg":"SHA-256","content":"0d13b3132c77ecc045639ad8ff63e2f687b7377446c631adb9e4df43db8cd391"}]},{"bom-ref":"8ed4b47868d2a468","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-2","hashes":[{"alg":"SHA-1","content":"ed8a5ae52dd812c6be57c73484766ae6ec09db3c"},{"alg":"SHA-256","content":"378931c0bdcaea0a41ab7a08f6ca9fd17ff83d82a4d9619c36a3cd208c078624"}]},{"bom-ref":"2c51f2666fd24b8c","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-3","hashes":[{"alg":"SHA-1","content":"2380d1725ef2311e62408ae6fe1367e5d9ed03ac"},{"alg":"SHA-256","content":"c5d7c486b2a2bd078d9b46941f1a380889c4bb91ae6c34e7b6d5eafbea355a70"}]},{"bom-ref":"3b37f6dd4ac9ab69","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-4","hashes":[{"alg":"SHA-1","content":"3e355365682fe6c5ece02207ec727667c37a0bea"},{"alg":"SHA-256","content":"a90191c0a3ed7375dcd6776a64a7aaa8612b9a4aea503b4555f8496b2bfbb38a"}]},{"bom-ref":"ff1a210a36c04015","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-5","hashes":[{"alg":"SHA-1","content":"652639f500c40e7e9456d861fa1b45a4739dcc64"},{"alg":"SHA-256","content":"58092434c80162cf2a23b506b256e1f991b25fc29d22642b3be1bdbc71f98be8"}]},{"bom-ref":"294a49aab858e11e","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-6","hashes":[{"alg":"SHA-1","content":"e199c7896a65a4a64fd73bd6d4b9a0d00ec95a7f"},{"alg":"SHA-256","content":"cfa610926189b8751342fa7fdef9f09cf72e294a0521bfea013a4a468eaffafb"}]},{"bom-ref":"54ed9ef902d61dc8","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-7","hashes":[{"alg":"SHA-1","content":"0a433f5e045b6c33e4584a0e21e5cb20c1e0bd1b"},{"alg":"SHA-256","content":"3dda58ed2feafb03deafccaacb68e3370f78fc23743740817a1d93be697495c8"}]},{"bom-ref":"4c3d935d6293d528","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-8","hashes":[{"alg":"SHA-1","content":"276f0b44a7ef890f386a3683dcfdaafed603b6ee"},{"alg":"SHA-256","content":"df59bf6611958713b8c8cd1a425d879fe02d5894c3bb37f3de5327599a62304e"}]},{"bom-ref":"1f300999c5dbf642","type":"file","name":"/usr/share/zoneinfo/right/Etc/GMT-9","hashes":[{"alg":"SHA-1","content":"18f927650fc62f4e469f21df82df94f50d1695ab"},{"alg":"SHA-256","content":"3c809522f01269598f9c1e5bb2e04389bfd3677a48d791d4e8a6656d1e4ba5d8"}]},{"bom-ref":"c7bfbaf4a81bcfdf","type":"file","name":"/usr/share/zoneinfo/right/Etc/UTC","hashes":[{"alg":"SHA-1","content":"4e8c3c01b3461f4ad5eb900b8035c4163acfa70b"},{"alg":"SHA-256","content":"ba3f58c59f1dd7b807fb3fe09c4dbabac2465307d7f5044c18cdd7f721c44fcb"}]},{"bom-ref":"1805f105d56476b1","type":"file","name":"/usr/share/zoneinfo/right/Europe/Amsterdam","hashes":[{"alg":"SHA-1","content":"0d331b923153616977f8069d8ff7fb1b9adb8200"},{"alg":"SHA-256","content":"c319bc9a155bc45b447acb2ce00fdea739043e07811abef690588fc307aa8417"}]},{"bom-ref":"e312028ab589d09a","type":"file","name":"/usr/share/zoneinfo/right/Europe/Andorra","hashes":[{"alg":"SHA-1","content":"89189a14334e9071fd3d69da9c30012ef28af447"},{"alg":"SHA-256","content":"a002c39765cca056ad2a376dff3ba17e939de31d9c3c60bbec85d979e2bba3c1"}]},{"bom-ref":"1d50942c85bd1874","type":"file","name":"/usr/share/zoneinfo/right/Europe/Astrakhan","hashes":[{"alg":"SHA-1","content":"38e3ed0cdb4ab094566ad8b851e6d0a687d03b26"},{"alg":"SHA-256","content":"266ccfb3b78123e8d957b2564c73ae08ae560975d24b90d328fc9c9b5394fd09"}]},{"bom-ref":"2fe92d428155f0ba","type":"file","name":"/usr/share/zoneinfo/right/Europe/Athens","hashes":[{"alg":"SHA-1","content":"97ed68e7e6bcc32a1ecdbec31e2de52ebe8cbfa8"},{"alg":"SHA-256","content":"32f04244ac89a0fd55c2c66af308c9bc7639ef79c127037c990f47d8e922219a"}]},{"bom-ref":"f490f71aaab00e73","type":"file","name":"/usr/share/zoneinfo/right/Europe/Belgrade","hashes":[{"alg":"SHA-1","content":"f79ab69153be375c471656a75ad24eb62c5cd5a3"},{"alg":"SHA-256","content":"7c1b9262ae825027582780b957866e5a9549ba936f466c1ee7dae8e9f34e20b9"}]},{"bom-ref":"b8ef3c254ed6e2b1","type":"file","name":"/usr/share/zoneinfo/right/Europe/Berlin","hashes":[{"alg":"SHA-1","content":"66606aa751a0bcaf1d93cf49cbbe577c057161a3"},{"alg":"SHA-256","content":"7823fbce1df592b45c804e5f213263a7b1c933ebcf3489920bbc2da066d2b2a8"}]},{"bom-ref":"6770c083edb27ea3","type":"file","name":"/usr/share/zoneinfo/right/Europe/Brussels","hashes":[{"alg":"SHA-1","content":"c4616be559fa7a029f6d9cc6f3c32d0c7469c5c0"},{"alg":"SHA-256","content":"1baeb784afd6829575c4b87ab80ee925c7799b44bb9231eb9dd35e5af899ff1d"}]},{"bom-ref":"b933b2240a4f5e57","type":"file","name":"/usr/share/zoneinfo/right/Europe/Bucharest","hashes":[{"alg":"SHA-1","content":"dcf6321761ec7c1e23c3c3ad4edf29ed59cf50aa"},{"alg":"SHA-256","content":"b156c97eabbfaccc44d7d5b589724582ae23051488210e3e10fd6048e6259127"}]},{"bom-ref":"07ce91430555b029","type":"file","name":"/usr/share/zoneinfo/right/Europe/Budapest","hashes":[{"alg":"SHA-1","content":"86fb3a67f2e7415ee3cada166a796b087fccdf78"},{"alg":"SHA-256","content":"ccffa6faeeda285e54044483121c454734a2f019cc8c0cad543720f14e3e0a3e"}]},{"bom-ref":"aca5c1771fdb55d2","type":"file","name":"/usr/share/zoneinfo/right/Europe/Chisinau","hashes":[{"alg":"SHA-1","content":"fe878a97aa3d13097a8669cb8221d8c11aa0075d"},{"alg":"SHA-256","content":"b18c3f625369d749b14e2ad149f71c2aeee021bc39a98681b8b2fec5f75e64d4"}]},{"bom-ref":"856b27ee1c51edce","type":"file","name":"/usr/share/zoneinfo/right/Europe/Copenhagen","hashes":[{"alg":"SHA-1","content":"16ceda129757faecd68f1a24d9420309d6cde93d"},{"alg":"SHA-256","content":"53363908e3a07f4005e302e6be96da2e0d4d8b9e373fbce831d2d9e75cd71324"}]},{"bom-ref":"20b0f80a96b46451","type":"file","name":"/usr/share/zoneinfo/right/Europe/Dublin","hashes":[{"alg":"SHA-1","content":"d068a97b59d1e22f7b2f078464e1cf689d2d1494"},{"alg":"SHA-256","content":"e338ff6ec99a666cf71b5e5be32a990af469b32c73cc7c61689d284144f853a9"}]},{"bom-ref":"95fb8dee1d02b7ca","type":"file","name":"/usr/share/zoneinfo/right/Europe/Gibraltar","hashes":[{"alg":"SHA-1","content":"1d5724a7efe8dcf425c5e4de09f019bf3139d4b6"},{"alg":"SHA-256","content":"43898d133325feae5395a21fde1fd5560fdaed2c93997d75d1c7d8eaccaef21d"}]},{"bom-ref":"17359d7946c9b328","type":"file","name":"/usr/share/zoneinfo/right/Europe/Guernsey","hashes":[{"alg":"SHA-1","content":"b60b29f16840abcb74fe2faa39c326a9910e1d9e"},{"alg":"SHA-256","content":"d02cb1530b51f838b934b1e2c76b7d25dbb5920529371e693581b4a679100725"}]},{"bom-ref":"96d0af3d8b08afb7","type":"file","name":"/usr/share/zoneinfo/right/Europe/Helsinki","hashes":[{"alg":"SHA-1","content":"128f3af0e78465e257260d02c6cc6e02270b1e6e"},{"alg":"SHA-256","content":"a19e7a0ac525c6adcbe41f34e7f7d11a67fa2a74c7991347c0888197217cff1f"}]},{"bom-ref":"c908e22ab8a37331","type":"file","name":"/usr/share/zoneinfo/right/Europe/Isle_of_Man","hashes":[{"alg":"SHA-1","content":"7af2c6597f93fe4dd3fc0e57ba0c4f909bffce06"},{"alg":"SHA-256","content":"01f4822009d99b2fc985b78ba4360d584f65078a51be7fab7d6d402c47bf5357"}]},{"bom-ref":"2692e27f9cbded4d","type":"file","name":"/usr/share/zoneinfo/right/Europe/Istanbul","hashes":[{"alg":"SHA-1","content":"ecf56add97055b5a5836792f3267d46387c11fe3"},{"alg":"SHA-256","content":"e2640cd78debae6a10e359224f1ef88ead514442de48f437d5985dae35e548fd"}]},{"bom-ref":"b5c25c3b76186f12","type":"file","name":"/usr/share/zoneinfo/right/Europe/Jersey","hashes":[{"alg":"SHA-1","content":"84a18626721709ae2b907c31ea68f9eb0fd3ac73"},{"alg":"SHA-256","content":"f4d162a4264877f8b597231daf724b12b15fb6c00d63c454795e8262b085d332"}]},{"bom-ref":"d62b8a80002ad776","type":"file","name":"/usr/share/zoneinfo/right/Europe/Kaliningrad","hashes":[{"alg":"SHA-1","content":"b4e34cad6bb533a99bed25184dafe22b847278dd"},{"alg":"SHA-256","content":"a734545243fa1602565e6bf8b0844b4c4d4889d108d1a2775743dce829e8b5a7"}]},{"bom-ref":"91e9f80a5df7e782","type":"file","name":"/usr/share/zoneinfo/right/Europe/Kirov","hashes":[{"alg":"SHA-1","content":"83f606ef9a7887a4e485a75a151f2c4da2339dc9"},{"alg":"SHA-256","content":"92f8371765831f78864db75804ae4b3098f871bb68a23a3da430306739f4bab8"}]},{"bom-ref":"5c81602591068348","type":"file","name":"/usr/share/zoneinfo/right/Europe/Kyiv","hashes":[{"alg":"SHA-1","content":"7f44317ff41c4aabf611099a5aad5d00f54cf0ef"},{"alg":"SHA-256","content":"a43eac7c7db8b241e43230567ccbc326ac44b1434238e906df1c058b3ce266ca"}]},{"bom-ref":"96bfada0a4a584e8","type":"file","name":"/usr/share/zoneinfo/right/Europe/Lisbon","hashes":[{"alg":"SHA-1","content":"1e9d17457501e5c26a42e1833e69930feb3a1806"},{"alg":"SHA-256","content":"58462eb76ab53da39284ce8cfb6b7f87380c91f09214b8d28f6ef4bb2a397f17"}]},{"bom-ref":"30ef2fbdfcadee0c","type":"file","name":"/usr/share/zoneinfo/right/Europe/Ljubljana","hashes":[{"alg":"SHA-1","content":"cf3cfb5f98d784850f3579a64f33a6a1ba85e835"},{"alg":"SHA-256","content":"06b419e77b2fa28593571c1532022a25f0b8b8d257ec748b110359b26bf15a3d"}]},{"bom-ref":"2ddb978d9c57fec8","type":"file","name":"/usr/share/zoneinfo/right/Europe/London","hashes":[{"alg":"SHA-1","content":"35e53cc471bcb41ea30fdd605d256827d40dfa3b"},{"alg":"SHA-256","content":"d64800146d1579a6df7d5f7abc1163d7cc299030e8b28abc1886b873db8b2fce"}]},{"bom-ref":"bc852c7dc2434e5b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Luxembourg","hashes":[{"alg":"SHA-1","content":"4acb147d5c15f0b0206c5f19809f314f2f111873"},{"alg":"SHA-256","content":"05971dd06e2529162c1c16546f0aea9c1ccbe81d5e1fb4c5c61fdc83dd5aea1e"}]},{"bom-ref":"dfdd484d83a63d0d","type":"file","name":"/usr/share/zoneinfo/right/Europe/Madrid","hashes":[{"alg":"SHA-1","content":"a2cba81ff09c8e7be57a0b82990bb7ccb153bff9"},{"alg":"SHA-256","content":"c2ae74c18f1dfd1e375fcaf0f61551724b7f0ad91ae4cc5d715d7e5522574380"}]},{"bom-ref":"dc5eb42e598ed2bf","type":"file","name":"/usr/share/zoneinfo/right/Europe/Malta","hashes":[{"alg":"SHA-1","content":"b908c254b6ee9c18d20f6c90b2a890e10ca4e4d3"},{"alg":"SHA-256","content":"a76e5bec75193fa168139bebbd3db961acf9e332b73d5bceb08266400cf28a33"}]},{"bom-ref":"f6e4b2eb5c6ba993","type":"file","name":"/usr/share/zoneinfo/right/Europe/Minsk","hashes":[{"alg":"SHA-1","content":"89060e64ddad4de6aedef9521ab6b972a1f5035a"},{"alg":"SHA-256","content":"478afd802e4e05e455198bca6f9d0baf6020143a52a7a515b00533316e10baa2"}]},{"bom-ref":"ec1dc7c7c971fa66","type":"file","name":"/usr/share/zoneinfo/right/Europe/Monaco","hashes":[{"alg":"SHA-1","content":"f91e5b3249e0b8e85885f9350f90724a42f78db7"},{"alg":"SHA-256","content":"74b149fd74025fbbd0d83ef4b39aea9c84efb95d4567867d59bcdfdeff4d3b3f"}]},{"bom-ref":"fc38e8ae87b47c23","type":"file","name":"/usr/share/zoneinfo/right/Europe/Moscow","hashes":[{"alg":"SHA-1","content":"6761875bcf2d9859bc8c455bf74dffdc06a7f7a2"},{"alg":"SHA-256","content":"3fa6d1da420a48ae49c1999e0473331ff29794ed61f1634549b29d575fd19513"}]},{"bom-ref":"ff732c2867e996ab","type":"file","name":"/usr/share/zoneinfo/right/Europe/Oslo","hashes":[{"alg":"SHA-1","content":"591b9a1dbf2c8de6d8a8837a449b7ae3313b48bc"},{"alg":"SHA-256","content":"47c1e78857e860081d6c950663343e999c10d30646fb554140a0e3a7d0154bdc"}]},{"bom-ref":"9b3addd040eccb61","type":"file","name":"/usr/share/zoneinfo/right/Europe/Paris","hashes":[{"alg":"SHA-1","content":"5a021a75231966dc01c9c936c7dfd9c97ecf4e99"},{"alg":"SHA-256","content":"772e4b7c501a44b2c153661ab23272cf2a6f0b87c1bad22034ac208e69c43d1f"}]},{"bom-ref":"f633a7620c4412e7","type":"file","name":"/usr/share/zoneinfo/right/Europe/Prague","hashes":[{"alg":"SHA-1","content":"9f295ffaf881ee3fcfe66e1a276e5926321cd335"},{"alg":"SHA-256","content":"d3f8ea734f203995e5d0212523b0e97ba5bf43518150ce6965a4ce90cafd1ed8"}]},{"bom-ref":"2f2e50a56d260f7f","type":"file","name":"/usr/share/zoneinfo/right/Europe/Riga","hashes":[{"alg":"SHA-1","content":"be3c57fb9f809426663d57103de1dba23ac6fa09"},{"alg":"SHA-256","content":"48dfec3433f4ad15f15461280a85fcb051f60774055c8a400afb6c90f1c0e8a7"}]},{"bom-ref":"f3f615e1868ce6a6","type":"file","name":"/usr/share/zoneinfo/right/Europe/Rome","hashes":[{"alg":"SHA-1","content":"0795e7a38d1de703728a4355bed56ee6cc53b58a"},{"alg":"SHA-256","content":"47b8943eb7e2b24c5e78a13c5686c6c387d0614e7d59f610c02d2612a6d6f394"}]},{"bom-ref":"d395f9b957bca732","type":"file","name":"/usr/share/zoneinfo/right/Europe/Samara","hashes":[{"alg":"SHA-1","content":"3dc626169c8056a7775637300758e9f4f89e996e"},{"alg":"SHA-256","content":"3855b13a200df6d907f8088b146cd890a61f29743fa043916bf0cae7d6171545"}]},{"bom-ref":"e18f7d078c9facfd","type":"file","name":"/usr/share/zoneinfo/right/Europe/Sarajevo","hashes":[{"alg":"SHA-1","content":"70838a38c20d4a62793af41c675b258c999523fb"},{"alg":"SHA-256","content":"050ab31da590d8e2e41d68e2feb0bcef8fb5b4e725ccf959c370b13f12e18205"}]},{"bom-ref":"f8fb6c6d208abc3a","type":"file","name":"/usr/share/zoneinfo/right/Europe/Saratov","hashes":[{"alg":"SHA-1","content":"6805e34ab35acf096015fdf8f1c163fac7607154"},{"alg":"SHA-256","content":"5ef1d024210ee5c3dbdd93411996158dd12ee5fa46db6a13f0b4471618aae433"}]},{"bom-ref":"bf1b4265119476f1","type":"file","name":"/usr/share/zoneinfo/right/Europe/Simferopol","hashes":[{"alg":"SHA-1","content":"d36739c8778383c671d36fb9865bcb5d80a2bf45"},{"alg":"SHA-256","content":"8bce314149af0b3d845d5e116198a4dcd340d4ab07ceab4df3c7de22ec1ffc50"}]},{"bom-ref":"c77608aa602dd01b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Skopje","hashes":[{"alg":"SHA-1","content":"bc2290aa3571c5b15691d5af10c24b158677ac8b"},{"alg":"SHA-256","content":"05a5a4f453b9a68a7e862a8466328de8ccc573233b2b2b0c04cd785309850372"}]},{"bom-ref":"9d913f5f30559c7b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Sofia","hashes":[{"alg":"SHA-1","content":"333e6b00be00d5b702710d2573282970ac489eed"},{"alg":"SHA-256","content":"86830f8f4f2deb5f325b57a0f8f57f3fa0c62850b4e957b0e0885b96bab1c60d"}]},{"bom-ref":"f52f8230533e6a6b","type":"file","name":"/usr/share/zoneinfo/right/Europe/Stockholm","hashes":[{"alg":"SHA-1","content":"18330a8a18e25a7688f9124add68a12eb6f7d475"},{"alg":"SHA-256","content":"ec240297bf0dd48f4418743c6455df80ecb8d05dc2b5ce01ebb347ca3a2e2c45"}]},{"bom-ref":"a7dd8865ea917eb3","type":"file","name":"/usr/share/zoneinfo/right/Europe/Tallinn","hashes":[{"alg":"SHA-1","content":"e86396a631ea6ec89613bb1a2153f81fc590d0e3"},{"alg":"SHA-256","content":"ac8d7cf012dd60c2382c128510bee536c81dd5b5f88be97f48cb4b940985d58f"}]},{"bom-ref":"2b6101f29c0ecc29","type":"file","name":"/usr/share/zoneinfo/right/Europe/Tirane","hashes":[{"alg":"SHA-1","content":"d7bb167115b2955a6392d4d4d2a1315e76e9f588"},{"alg":"SHA-256","content":"c6433608b5d62d562b7e580dc16a7b9fed07dab7934ede52cc34c1d555e10cc8"}]},{"bom-ref":"fd400b92ea6623de","type":"file","name":"/usr/share/zoneinfo/right/Europe/Ulyanovsk","hashes":[{"alg":"SHA-1","content":"ecd56cdd4bdd96e72b6ee67306c83fd492ee07b0"},{"alg":"SHA-256","content":"c1d140fe9be55f207449cc57f5b16006b6ea6e519676baaa5a10fbd3ed50cfed"}]},{"bom-ref":"5daf87097291aca8","type":"file","name":"/usr/share/zoneinfo/right/Europe/Vaduz","hashes":[{"alg":"SHA-1","content":"76145ae66e7fa246089c5a4b298ab42cdba69695"},{"alg":"SHA-256","content":"5cfebf45f4ae65ccd1c3603dccb16f7853737e2ada9fc770c39c318f4c940613"}]},{"bom-ref":"bf5c095e028ac3bd","type":"file","name":"/usr/share/zoneinfo/right/Europe/Vienna","hashes":[{"alg":"SHA-1","content":"67f3b7b29e94b2346bf4e917e03b7126fd4227e9"},{"alg":"SHA-256","content":"1c8c704b5e303be879b52a9c8e3e6457307dc9569ef3b472b795177c0567061d"}]},{"bom-ref":"1a687deb0f8b0ab8","type":"file","name":"/usr/share/zoneinfo/right/Europe/Vilnius","hashes":[{"alg":"SHA-1","content":"bd8ad4ed97da9c551ff7c4de62b3563b56b6db48"},{"alg":"SHA-256","content":"81ffeb8647187c21e0f3bb77422d988a4b1dbe6d7123d174da48a767a7a1020d"}]},{"bom-ref":"5089319a55851658","type":"file","name":"/usr/share/zoneinfo/right/Europe/Volgograd","hashes":[{"alg":"SHA-1","content":"28821df499d7dd03a14476bd91f9000cfc05d628"},{"alg":"SHA-256","content":"fe22aa87b319a9c30965a1d98c7bdd7c005bb1d2c7866ebb9f487f6426c0790e"}]},{"bom-ref":"a9a6011fe20ea8d6","type":"file","name":"/usr/share/zoneinfo/right/Europe/Warsaw","hashes":[{"alg":"SHA-1","content":"69fe8b936d8d5c2a3303d9e5551a193b826ef8c5"},{"alg":"SHA-256","content":"ffc7204033c7e0ef8411664d5d1708330eb00d63b4ad4ba157d4cdc3d6934998"}]},{"bom-ref":"88a2fcd4e338edd5","type":"file","name":"/usr/share/zoneinfo/right/Europe/Zagreb","hashes":[{"alg":"SHA-1","content":"bc845c3ae142185dd565904e1ca56a4f9dccd747"},{"alg":"SHA-256","content":"a1038d80682265d2fede04b17d1f6fe1e3bc6f1d35ef29dcdb312af0522cf0d0"}]},{"bom-ref":"1e12174bfcd34281","type":"file","name":"/usr/share/zoneinfo/right/Europe/Zurich","hashes":[{"alg":"SHA-1","content":"2cc5b8027123a1a716c64f3d713973f49f8f8223"},{"alg":"SHA-256","content":"dbe2654d9a9d59613ee28b204a1ae506ea940c89416783a2e5f4aa389749a980"}]},{"bom-ref":"25c691c7ec83f6af","type":"file","name":"/usr/share/zoneinfo/right/Factory","hashes":[{"alg":"SHA-1","content":"195b1a925c9cf2927c70cf7e43d6193d58d79bb2"},{"alg":"SHA-256","content":"ae36208305c159f17f8cc209093178b5f1815ca03983b65dec23fc72427ecfae"}]},{"bom-ref":"ffcaae209a145a6b","type":"file","name":"/usr/share/zoneinfo/right/Indian/Antananarivo","hashes":[{"alg":"SHA-1","content":"4d370a1393afb568e3b295cc2fe31f9866715f13"},{"alg":"SHA-256","content":"2d4f56ef201a27b3a47ccf5cf60c848f4bf6ff4b75b8fbfdb2e8d0a732e89c8b"}]},{"bom-ref":"e6a07f8ead35d45a","type":"file","name":"/usr/share/zoneinfo/right/Indian/Chagos","hashes":[{"alg":"SHA-1","content":"abbee69898c620bc20ce6226f40620d057234689"},{"alg":"SHA-256","content":"7a44be5cdc9c358a9d5d716c732e7376d14a748e7e16fa96a4af16d42857feda"}]},{"bom-ref":"0fe435f114ba774c","type":"file","name":"/usr/share/zoneinfo/right/Indian/Christmas","hashes":[{"alg":"SHA-1","content":"527be16d03870ef82636ea22f148f2970d161427"},{"alg":"SHA-256","content":"8e5aec67f8edd16f385d42b50198f7654e2aa6a6473baf42c0665425a569813b"}]},{"bom-ref":"617e26c8fc9a1659","type":"file","name":"/usr/share/zoneinfo/right/Indian/Cocos","hashes":[{"alg":"SHA-1","content":"92a971d1e8f14b3bbf4cc485a934cbc4cd3ae64f"},{"alg":"SHA-256","content":"1a26aa57f5c11ad1a0764b6b8ddf152def440cf4e35d6c73ca1c43b078fc8992"}]},{"bom-ref":"b73c32c31054e01b","type":"file","name":"/usr/share/zoneinfo/right/Indian/Comoro","hashes":[{"alg":"SHA-1","content":"7fe7aea91e453d7abc105a4a6e284acf11c0da20"},{"alg":"SHA-256","content":"1950d46af99f3240670d2209fffc843cba591feeee5f9445f4adc50357d82f07"}]},{"bom-ref":"819c3bc210c23a03","type":"file","name":"/usr/share/zoneinfo/right/Indian/Kerguelen","hashes":[{"alg":"SHA-1","content":"05a1be5a7decb706b63f74ffb05ab3ad90dcc5c5"},{"alg":"SHA-256","content":"648242260a6555476915ed0ef69b1137ac979a9cb022f4784f4f421717d50051"}]},{"bom-ref":"519d672938298e18","type":"file","name":"/usr/share/zoneinfo/right/Indian/Mahe","hashes":[{"alg":"SHA-1","content":"423c53aab54ae83f794d0616ab4d93247036e637"},{"alg":"SHA-256","content":"bc14770ee421d562d38891cea62e8ff6a5be8dbc6087a105026179e0d1ed087c"}]},{"bom-ref":"d67c9bdfd4d77f47","type":"file","name":"/usr/share/zoneinfo/right/Indian/Maldives","hashes":[{"alg":"SHA-1","content":"ba9af8a31c55d979fea09af6f07236b065fe038e"},{"alg":"SHA-256","content":"61b962e3a68d89e5f1a168ae4f94f98634e7c82087642bc4adec4ef8049c2a97"}]},{"bom-ref":"48ffe53bc15f9b84","type":"file","name":"/usr/share/zoneinfo/right/Indian/Mauritius","hashes":[{"alg":"SHA-1","content":"a3361b29f7b0c12558d1085609c6ece310366a2b"},{"alg":"SHA-256","content":"9791c2422a4b5b1e20bf631d5c370f8ccfbd8dc50f49870e7d32b37eb4a15e69"}]},{"bom-ref":"178b784cdfa26477","type":"file","name":"/usr/share/zoneinfo/right/Indian/Mayotte","hashes":[{"alg":"SHA-1","content":"5c3bb3cea2ec9d7fd378d73071d4390a77db44f3"},{"alg":"SHA-256","content":"7d0cd8d335c4696d0aa51175083ae64b467ca356c722615db0c75de85b51834a"}]},{"bom-ref":"cbc528813dee487e","type":"file","name":"/usr/share/zoneinfo/right/Indian/Reunion","hashes":[{"alg":"SHA-1","content":"b825283c12efe7acdcf2dfd5484da2ad6469e8f0"},{"alg":"SHA-256","content":"a63691e344a3355a864e24c401c1607853f63d604f1c962cc8872f503eb8f5da"}]},{"bom-ref":"6c0caec1ae1d2879","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Apia","hashes":[{"alg":"SHA-1","content":"7c49dc7f6c7ca95fa03b9b93d2e2d990307291ce"},{"alg":"SHA-256","content":"d7861ecaa4700f603ee593c1cf1878e0df15f2dfd3f9a11406074907795e9f8a"}]},{"bom-ref":"59c906030239732b","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Auckland","hashes":[{"alg":"SHA-1","content":"25a61bdb83cdce0152f1e448883e8f9d31e738d5"},{"alg":"SHA-256","content":"6db396b64ca16732617f100677a2c2930727b41d1308adfc15141bda92b6d7d0"}]},{"bom-ref":"8faf8affc6a93190","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Bougainville","hashes":[{"alg":"SHA-1","content":"89e2afff75d77d3563f111c735d6cf9f6cd459e4"},{"alg":"SHA-256","content":"a7a2a4d24753db30bbd686c81bd6fef86f9a84f2a6bd7b56df0dd209b92b2d08"}]},{"bom-ref":"87cb3786638f7220","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Chatham","hashes":[{"alg":"SHA-1","content":"7f94207e95d8294f405fd1d28caca2c3f3ec5641"},{"alg":"SHA-256","content":"b49934d5f4cd40cf8aec23c8ce2e65e09e8f62cf15cd1f6957c4ce3ee6baced4"}]},{"bom-ref":"2dbdfbd9a01e5304","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Chuuk","hashes":[{"alg":"SHA-1","content":"88b12afcd82b8f9c399a110de620f2371d36cfa8"},{"alg":"SHA-256","content":"66d22bd63b44fcaa0b6222e16adf5d035945a53da3db42bd0bacc4a53f7fe5b4"}]},{"bom-ref":"7a84c59dd4b56ed5","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Easter","hashes":[{"alg":"SHA-1","content":"ef6f283eba717b15c358a81a447a33cde5bc1666"},{"alg":"SHA-256","content":"1350d65a6c0a8f3f90419857d942ce6598fe540964647f0ada38054533df62e0"}]},{"bom-ref":"5db1ac7bee6919a0","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Efate","hashes":[{"alg":"SHA-1","content":"b0eae7e4436ba9f37e4d0cbf2d422475c74db8b8"},{"alg":"SHA-256","content":"7f56a3ef14ab638b4703108391c82836d1b699de402eff65df0aec9463143247"}]},{"bom-ref":"05cf9f329918e0b1","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Fakaofo","hashes":[{"alg":"SHA-1","content":"fd4ab7a60d1ad1f28997e27a215d7354bd2a5d64"},{"alg":"SHA-256","content":"c59e3ce984efb02d9a34481377abf74af648df7fc15d3f200804d71fdb441b6d"}]},{"bom-ref":"1bcbaf5f98158481","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Fiji","hashes":[{"alg":"SHA-1","content":"f7669ede07cf6ce6c9e824839b5cceee1730fd1d"},{"alg":"SHA-256","content":"d50bae2d5ecd0258e313f4cdaf7087df9dfe165cb0eca3b888c4a9ecc7ad47ea"}]},{"bom-ref":"8d47ccaa1a709b2b","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Funafuti","hashes":[{"alg":"SHA-1","content":"4d0d2661d8b7757439eff32b372df42c20949ba6"},{"alg":"SHA-256","content":"7147ec893482f862021b668c8c6ecb4fb54ed66aad0c63f82d0fe3145dd581e8"}]},{"bom-ref":"e39e9d9e3c3b09a3","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Galapagos","hashes":[{"alg":"SHA-1","content":"0113ca8fdd734b8efb56e620a31d60378c6062c6"},{"alg":"SHA-256","content":"4faf25093b31b9bb22a48c5016456292d44f5c7e68357fa52d20356ec621075d"}]},{"bom-ref":"024cdb02bacad936","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Gambier","hashes":[{"alg":"SHA-1","content":"7d0cc25608fb4decfd25f235546f7e6b4889154b"},{"alg":"SHA-256","content":"4152a43b16c08998c85400993490eff26a28164af99873f33284fc2c62e1ded4"}]},{"bom-ref":"aae6d19475e1f68c","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Guadalcanal","hashes":[{"alg":"SHA-1","content":"eac533c2135f683e2c2500015380526791bee252"},{"alg":"SHA-256","content":"e7b56a9da29a5e44ad7ccea18879d719a0b830daa900b1481bed3d4d0f971f48"}]},{"bom-ref":"3bbed8bd491d629e","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Guam","hashes":[{"alg":"SHA-1","content":"1a6ad95b6b44ad4095f04606ed18fa9ae18abce7"},{"alg":"SHA-256","content":"ee4aab7829cc0046ffd1e4d82deb087d610a9a14fd9dcfe7cf82f4224a362d65"}]},{"bom-ref":"f74421e15f7322cc","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Honolulu","hashes":[{"alg":"SHA-1","content":"d9477684b9d98d28c976f539dce9f4b8fef47e37"},{"alg":"SHA-256","content":"1e8ccbc97ab9805bad4cfce89300c2321166547f5bf4bf2b8c7a48b6f069f884"}]},{"bom-ref":"ef8b706993dfdf88","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kanton","hashes":[{"alg":"SHA-1","content":"680078c67bbbf3f498eb5ba62d16252322b7431c"},{"alg":"SHA-256","content":"042264a8b4210c8925022271fedde5bc43cb849806eaea7b2b7ca509d7111f7c"}]},{"bom-ref":"68d10a5047b20e88","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kiritimati","hashes":[{"alg":"SHA-1","content":"197290283c66572a200c37ad86f2bf6cd38fa6b6"},{"alg":"SHA-256","content":"92c95df1d19c1e86c5f62cd1acb165e465919a28a65d1823c95d20c7b0f5ae5b"}]},{"bom-ref":"53c1a4fbd36baf98","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kosrae","hashes":[{"alg":"SHA-1","content":"0f4a89b5396a96b03fddfe1c0a7ac65774adc2eb"},{"alg":"SHA-256","content":"e2564f2a4bc0443cae815bd32045462a5b19ef5eac978fa1780ecb5fb9fe87b8"}]},{"bom-ref":"7e3fe1e1b4c4d112","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Kwajalein","hashes":[{"alg":"SHA-1","content":"2505d02aa23867fa678bb9d3c735fd6ecb79abfc"},{"alg":"SHA-256","content":"1a9ebb22411c00377e506f35c1d4d0552736e480544c18ef19889b1ff1acdd02"}]},{"bom-ref":"388a0a2508f4be09","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Majuro","hashes":[{"alg":"SHA-1","content":"7906544a1e1be71a50ffb1db8393e4aa25a67b09"},{"alg":"SHA-256","content":"07a568f64b34bc821adfd5dc61693e1897c930000d0abc09977201abec6a7ad5"}]},{"bom-ref":"bcf9964a8ddf9144","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Marquesas","hashes":[{"alg":"SHA-1","content":"331c4453dbdaa9c845142025a46ad8d5060a0a48"},{"alg":"SHA-256","content":"0d6ff8d598d640f9c7a19ed7af3d47e01459264ade90290278f05f86706b1a08"}]},{"bom-ref":"933da056f36d3d50","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Midway","hashes":[{"alg":"SHA-1","content":"94c2cb96d5cd755951b92c6df2eb2f1bf683c919"},{"alg":"SHA-256","content":"cb1f6650134d59bf64d570c4e6ab63e55327209e2bd9347dede431f1e99c0b78"}]},{"bom-ref":"ed9d6d01ff44b23d","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Nauru","hashes":[{"alg":"SHA-1","content":"6fd5f5208c1054f2a7903347afb8f9a192d5d68c"},{"alg":"SHA-256","content":"21fad9210343e707ec4b881777d5a558ae755e99abb00abbbe7b2b58c1b3bfee"}]},{"bom-ref":"075ab50096f474f2","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Niue","hashes":[{"alg":"SHA-1","content":"f46810c8a008b2fea527ebc89d65e6f5d597d904"},{"alg":"SHA-256","content":"7bcc5c886e79394c40293cdc8040c89ad74c7b66fe86372c21202d07f5932c13"}]},{"bom-ref":"4fcd27d0a48a9285","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Norfolk","hashes":[{"alg":"SHA-1","content":"b5301f273aaa658d6a26887d103317da51f1c2f1"},{"alg":"SHA-256","content":"8e241cc84941853cc9c95179267bc40fb5e58558430ffc5276353d8ac2e8d1f6"}]},{"bom-ref":"992096057ff5872b","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Noumea","hashes":[{"alg":"SHA-1","content":"c0fb31fd41b972c3ce01942f6537c12d22d6f68b"},{"alg":"SHA-256","content":"d01a027312b592f682d27087752708e28f0c1ed5653a039d9ab52bb8027a332c"}]},{"bom-ref":"002dbd52ddf53cef","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Pago_Pago","hashes":[{"alg":"SHA-1","content":"0885527fb7d948280c1adc7e2ae7a9eb74eefcc7"},{"alg":"SHA-256","content":"6ee8bfcef1ffa96bb23edeea00e3e70e8204471f529a3c33b98ae575d4037d28"}]},{"bom-ref":"fcea9e847f3dbd30","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Palau","hashes":[{"alg":"SHA-1","content":"0f0b90548f237c33bfd5f50fbfdef055cd574491"},{"alg":"SHA-256","content":"fc836dffe58522d24ebb5aa5febcf72f8bbec82867bf4749fc79194555e9f7b6"}]},{"bom-ref":"c5fe7234c7f2c038","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Pitcairn","hashes":[{"alg":"SHA-1","content":"d2b42195a7cde5034c9b4db956b8e14bb1fafdbb"},{"alg":"SHA-256","content":"a408a00217a80eeb1b9c7ed80a966cf8595ee302bac5f52aab2349d9ff5c71c0"}]},{"bom-ref":"25ccabe948bc35ff","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Pohnpei","hashes":[{"alg":"SHA-1","content":"15dd92fea913bb79db93edcabe133b53ac746462"},{"alg":"SHA-256","content":"c9c21ce5b4af5e6760c1a199761ea738d530b847c7f50c62e3f512cfeaf146be"}]},{"bom-ref":"328e7fbbc5a09221","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Port_Moresby","hashes":[{"alg":"SHA-1","content":"e8418252d4469fa3caa5578df72855f49e965caa"},{"alg":"SHA-256","content":"cfa56252a887456ef7757e7a4fd2760dd5b3394489ad7836d9f4614ade7785db"}]},{"bom-ref":"8d058e5554813360","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Rarotonga","hashes":[{"alg":"SHA-1","content":"578dbcf904f1a60d91c867f00ee2aec9becf0424"},{"alg":"SHA-256","content":"a88f04061b5ecef71ec2b3a8eeff5d56844d7241389c9f12c474320f3d38a8a4"}]},{"bom-ref":"d796423fcb080959","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Saipan","hashes":[{"alg":"SHA-1","content":"16c4626aafda888ddb33cabc2c7529a8d73492ba"},{"alg":"SHA-256","content":"379af77b5aaea5a8bb8341e099ed4b1817644b677f965fb839ec9afbb988b71a"}]},{"bom-ref":"4b9a76704b847813","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Tahiti","hashes":[{"alg":"SHA-1","content":"1f5de74ccbcd9b7c435cd9c33001395ddd714b48"},{"alg":"SHA-256","content":"87bcc7f7df28bf5ac74d705b599e6948071393bbb9b60bc86bb9f96faaaeafd1"}]},{"bom-ref":"2637766d82f5855a","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Tarawa","hashes":[{"alg":"SHA-1","content":"3c5f42452cb560e1c814187d41eabc232bfd9c12"},{"alg":"SHA-256","content":"8edbbfc7dbd19b1bf2473fa735a3030ce00e14624a14f2517cf9fcc9f6a7d3e9"}]},{"bom-ref":"d6be66c8afa59e18","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Tongatapu","hashes":[{"alg":"SHA-1","content":"a517680648c55f5f0433a959aba616d59881ae14"},{"alg":"SHA-256","content":"7c3c381528eaedabe3301d2890f4183bca3b08e65310609181a0487cbbe8137c"}]},{"bom-ref":"3c21dbba6bcc3606","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Wake","hashes":[{"alg":"SHA-1","content":"51812b1c2ffedb935bfed861c9c9ca9af0385562"},{"alg":"SHA-256","content":"1c38726f086cda9b8f58210dec725d70dd82a8a4988621598ab03c7282d9cb45"}]},{"bom-ref":"952f0c0464ae215d","type":"file","name":"/usr/share/zoneinfo/right/Pacific/Wallis","hashes":[{"alg":"SHA-1","content":"6ae73f5fa00305a163b20acf2bd6c96d6a30b8bd"},{"alg":"SHA-256","content":"e1e2b54c06941be8ce91046d9697713c6f8c461b8eb90ff1dd82d54663e5cd83"}]},{"bom-ref":"f703666eb77bbee9","type":"file","name":"/var/lib/dpkg/status.d/tzdata-legacy","hashes":[{"alg":"SHA-1","content":"2bb10e6f90eaf83440bf7969fb478e41619e1786"},{"alg":"SHA-256","content":"c6d0fa582ce59b9aba43d34e627386b1d45c902d26adcf6a34129cbdc3c57af4"}]},{"bom-ref":"d840c92f91fdcf6d","type":"file","name":"/var/lib/dpkg/status.d/tzdata-legacy.md5sums","hashes":[{"alg":"SHA-1","content":"87d6ccdd545a6f91b2be310a564914efa5009068"},{"alg":"SHA-256","content":"75c6e12ce59cd6933320bdc9bfb864324e84a9a7bea100a2c313684385e945c2"}]},{"bom-ref":"f08d41f454213cae","type":"file","name":"/usr/share/bug/media-types/presubj","hashes":[{"alg":"SHA-1","content":"5dc79c4a4df9a76a5ef448a4ffc212c1f22f2df5"},{"alg":"SHA-256","content":"40ca64c14041a61aba24773d54467a4f9409d3772118348477b2578025ee99bb"}]},{"bom-ref":"e9ed8d9c78ad22ee","type":"file","name":"/usr/share/doc/media-types/changelog.gz","hashes":[{"alg":"SHA-1","content":"fba0f4c6aa89b79f8a845197cdfbf8f16069cb19"},{"alg":"SHA-256","content":"0e51560ded97811e1d905a2cad99bf74557a09959dc6d3c912397bb8fb074d83"}]},{"bom-ref":"e6bea96639250827","type":"file","name":"/usr/share/doc/media-types/copyright","hashes":[{"alg":"SHA-1","content":"122ec71bc0ee27107fe8c40b8f5b4976dcd558d3"},{"alg":"SHA-256","content":"5ded7c53199b6a1d089b0b7e231d77e5c84081c7156b372b3f11ad9c1c2c5cc7"}]},{"bom-ref":"35aa49848f728b23","type":"file","name":"/var/lib/dpkg/status.d/media-types","hashes":[{"alg":"SHA-1","content":"4ea0de54e94f111e8c83b11dbf38e3357335cd3e"},{"alg":"SHA-256","content":"60e871d56cfcc834fe0a8d0436f98996e1bb196d3ddf8f2109d0f05266a816ce"}]},{"bom-ref":"fcdb10b698161097","type":"file","name":"/var/lib/dpkg/status.d/media-types.md5sums","hashes":[{"alg":"SHA-1","content":"04f4398950c17592d0315fbf3f6f633782e7d43d"},{"alg":"SHA-256","content":"fb4ec9a3445a2b4800f35f816844f3c03b5501a83431fea326bfdf46c09a77ec"}]},{"bom-ref":"b4e6f97c88b58560","type":"file","name":"/usr/lib/os-release","hashes":[{"alg":"SHA-1","content":"f9e11c4fa1bdf2aad43c45bffd46f62246692e55"},{"alg":"SHA-256","content":"b4d56a90bdd55b9d5b9b4acabfe748f559e505e340d2d93097937e11ee423cc1"}]},{"bom-ref":"91e674b27c4a2ea0","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ANSI_X3.110.so","hashes":[{"alg":"SHA-1","content":"409633627529979500178f7acc4289f5d7630639"},{"alg":"SHA-256","content":"0d5a8ad4ff7959ceb9d4fe7951f8a38bcba8f754d50e1d4cf3c90706e54cd12a"}]},{"bom-ref":"629a13fa0f069d47","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ARMSCII-8.so","hashes":[{"alg":"SHA-1","content":"d627037d2ee6241f7113d6f133efaa087258d4dd"},{"alg":"SHA-256","content":"fddcd8b551910b2012021b70f96e8262c64336dab93656a21ea445eab9b45443"}]},{"bom-ref":"53823d1f7043d11c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ASMO_449.so","hashes":[{"alg":"SHA-1","content":"2418da9db567d71e37fe95965a297ae71d4ddfee"},{"alg":"SHA-256","content":"75eb5a620dba6be5573036b957618de8c8274c97726b87e475dc9b3a7c74a5d7"}]},{"bom-ref":"7d16addf54cd7420","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/BIG5.so","hashes":[{"alg":"SHA-1","content":"1c7489b48d3fd4999f27e1d8433b29fb760e25a7"},{"alg":"SHA-256","content":"7ef4c933ae6f245bbf7684b966055d4b2d1c68fabebd2f2520a524672b388419"}]},{"bom-ref":"c8be1f5a1c474f08","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/BIG5HKSCS.so","hashes":[{"alg":"SHA-1","content":"4ea41cfad356d749f3d9c3090e6d42584a69bdd2"},{"alg":"SHA-256","content":"9bfeb70668d1a2206056340b37af5d76c0e97dac0764f1c4d16e89e1e187140e"}]},{"bom-ref":"7610a6da8915f440","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/BRF.so","hashes":[{"alg":"SHA-1","content":"44d239db789b7a4b0223e49009910e9d5d923b8d"},{"alg":"SHA-256","content":"c6eabb5fe49fa8079c047fd79fae68ba75309547df6bba1ffc3a2bcd3ee626b3"}]},{"bom-ref":"59e51351882d3461","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP10007.so","hashes":[{"alg":"SHA-1","content":"b3a2d96fc38e327f3684a4668be5e9b79d448975"},{"alg":"SHA-256","content":"5389ff620a15579a7840f4afdebf9e7299be4c4a70743b5ac686cbd27ef8f557"}]},{"bom-ref":"46ebba0e8de0e3c2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1125.so","hashes":[{"alg":"SHA-1","content":"79e8763e5eee2e213f13563776ed516d8075d9e9"},{"alg":"SHA-256","content":"6525f831cd6613f258c7d55f7c8562aeada094310466c77d86722950c85e72ce"}]},{"bom-ref":"5a43d0e11e78c53c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1250.so","hashes":[{"alg":"SHA-1","content":"8d8b46ce3eedaf6176d5a5b23772f40c8651e03c"},{"alg":"SHA-256","content":"b2435468d269df84bf5164a1367376b97f4cd5ea62b0b24ac29bb5cc9891c1e5"}]},{"bom-ref":"256f00c07d3fdf9a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1251.so","hashes":[{"alg":"SHA-1","content":"ca603f4d8c64d43c33f7872dfaac2d8d309d0e3d"},{"alg":"SHA-256","content":"016cfc3755c5af5acaf8e5322dba359c0a062c009a70819fe2f12ddcc320850e"}]},{"bom-ref":"f46ac30e0c73ec30","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1252.so","hashes":[{"alg":"SHA-1","content":"fe274f7ab69e3b3fb6eac2a8bb6b5d94cefa6d60"},{"alg":"SHA-256","content":"b8b8de963d3ba9d2cf89f0ba9f156b9cd0b98ca9ae1bb15f0ec68a5234ad243f"}]},{"bom-ref":"8b6d9157f468575d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1253.so","hashes":[{"alg":"SHA-1","content":"9a8882efcd6ea80c8fc7ded000018513294e8039"},{"alg":"SHA-256","content":"d412206bbfe9805e0b9dd9d3772d7d26a97704a2755e2880afce8f9c98270f95"}]},{"bom-ref":"b8eb54e53b04ee8e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1254.so","hashes":[{"alg":"SHA-1","content":"d0d10f773df423efed46eaac3537468e2650c74c"},{"alg":"SHA-256","content":"30b853cff1c8f9afdf2e80c17e371169551aeabaaac0c0f9cc7b9d58d9d02670"}]},{"bom-ref":"97bbf77f05b08cb2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1255.so","hashes":[{"alg":"SHA-1","content":"64472e71c0b7089982123e0f7a3e281d2e66c111"},{"alg":"SHA-256","content":"054dde4bce770e2ce5db6424cdb3bdc27efbcfe5bdb8c23dd7415ed4d750075a"}]},{"bom-ref":"ed3349dda3f5983f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1256.so","hashes":[{"alg":"SHA-1","content":"1565431389c8a62a4f93070bad69f1653ecc000f"},{"alg":"SHA-256","content":"273b622d533d9c58f206b43ccc97db308b3d59f3cab806c3fc037d551cc990fb"}]},{"bom-ref":"1cee9de782a86741","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1257.so","hashes":[{"alg":"SHA-1","content":"ece1ce413ddb7a591f3465159cb5f2b4e148683d"},{"alg":"SHA-256","content":"d0ef101e563e6200aaac2198914b1c0beee73426c507576a16088ae22531de86"}]},{"bom-ref":"407bbdbcd2afe2eb","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP1258.so","hashes":[{"alg":"SHA-1","content":"b3c979ab733caec92c41fe2ca946bc13b4559467"},{"alg":"SHA-256","content":"089e27ad82816e81c132cb766937c14058855ae1ec19226082c85fe859b29471"}]},{"bom-ref":"89f30ebb1074dca8","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP737.so","hashes":[{"alg":"SHA-1","content":"f80be2451cd9b0b68f0374d6545bf195569e569f"},{"alg":"SHA-256","content":"8d0b29ff2e53ce7cdf06686bd6aff53849c1c23f9ff4f662f8e7696086324091"}]},{"bom-ref":"0f5d8b267ab48f17","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP770.so","hashes":[{"alg":"SHA-1","content":"fa26ac49dd121d3a624ca8e129bf855cc09e3a0e"},{"alg":"SHA-256","content":"da21cf8be043aa20e61341adc3ffa9c08dce15b21e8dd6b5cfccf953f7548a0b"}]},{"bom-ref":"10de5a0cbb74aace","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP771.so","hashes":[{"alg":"SHA-1","content":"e5d03ad77cf5b193bda1e898d6c6243b0908b34c"},{"alg":"SHA-256","content":"1a843a505e20746c81de9216db15cfecec75301dc8466d142f80cbb7e0d425c1"}]},{"bom-ref":"f861bb3a22c8d5c2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP772.so","hashes":[{"alg":"SHA-1","content":"daeac906a8d83849ae7fcd9cb061c70629ef2287"},{"alg":"SHA-256","content":"d94b169c2d1804959e48683085eac8495fffbdfc6fe0cb9135e10c58c779c64c"}]},{"bom-ref":"b498d2cf05bebc6b","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP773.so","hashes":[{"alg":"SHA-1","content":"733c2d207009ed8480f0297c50ccbd732b0ffa78"},{"alg":"SHA-256","content":"6b63c291a8b99b180717c729397d75d9d6d1450140430ad4620df84293cf60f3"}]},{"bom-ref":"9f898a4c3d9b58e2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP774.so","hashes":[{"alg":"SHA-1","content":"b119b5c4c6df5492fecf5931afeca8aa5fff6176"},{"alg":"SHA-256","content":"942456fde736ba36d86908d5f3e4c928b4ff2c923b8872bc9c2bc02e03ba0cb9"}]},{"bom-ref":"05dd21b2c5bbaab8","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP775.so","hashes":[{"alg":"SHA-1","content":"127a93bf625d819464ec9adeef565ba40259622d"},{"alg":"SHA-256","content":"8eca681340dfc9c0c3dc3af18e6071b6acf8f52594ebd98501b395a7dedff8e6"}]},{"bom-ref":"aaddac9fe2ea04a2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CP932.so","hashes":[{"alg":"SHA-1","content":"9815ff705de329c4b472063d1859aa1743545e66"},{"alg":"SHA-256","content":"42068ee6289df8dbcfe68937762078cd28bacaedb0a0f5c200edc346ae9bc127"}]},{"bom-ref":"9fecd989645ed9b7","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CSN_369103.so","hashes":[{"alg":"SHA-1","content":"39373ec01b1cb3368087262f1ad47a5c53ff915d"},{"alg":"SHA-256","content":"da46c9974daf67edc271dff74517b6d8e43d7051dcf834f954eaf8495ee6a62f"}]},{"bom-ref":"1d01267f1215b86e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/CWI.so","hashes":[{"alg":"SHA-1","content":"0146b61857fdd0b0a6c22d234660d80807fd0879"},{"alg":"SHA-256","content":"d3eefd7fddeaa38add66c49e4de449ef717cbbd25947a54b7eacd58a6b98b927"}]},{"bom-ref":"9d5b08bb312ad92a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/DEC-MCS.so","hashes":[{"alg":"SHA-1","content":"14daedab6d27c01ed199e177fcc9601c4dbbb4c1"},{"alg":"SHA-256","content":"770e86c5469c141c1f33ce01a473dcc645f9480863dd1c6ec04beb4a1a332b6f"}]},{"bom-ref":"05a74b1b0a6339da","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-AT-DE-A.so","hashes":[{"alg":"SHA-1","content":"967645e505cf9299ba981d61638df513f99b2864"},{"alg":"SHA-256","content":"ac275d762a4085d544d0eac0e95ecdf0b5bb13f80bd36cad29622014b731eeec"}]},{"bom-ref":"d8f17ed45821d0e4","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-AT-DE.so","hashes":[{"alg":"SHA-1","content":"b5f3c9dd5cdaad519bad47cc61a1cf4ac60f2e98"},{"alg":"SHA-256","content":"ccb3a4f05e9787e17cd4744bd2ea2d9ae586e2cd655125deb600ecb7c9d25e43"}]},{"bom-ref":"90812c8ce033c165","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-CA-FR.so","hashes":[{"alg":"SHA-1","content":"6eefcbdd5dbc054e6ff229d7085d32d056cbd336"},{"alg":"SHA-256","content":"bee80ed8069706ae12035c9f416b6a7e6382afa299c55871ce856c3bc4bdb0af"}]},{"bom-ref":"5f83e115652c871c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-DK-NO-A.so","hashes":[{"alg":"SHA-1","content":"db975bfc87063122bcdac6570452127b9fe5c789"},{"alg":"SHA-256","content":"27065479a1a9af9cdfaf5eb35261925c56ca92549595308bd3e309e96e0097fa"}]},{"bom-ref":"064c565b4103f23c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-DK-NO.so","hashes":[{"alg":"SHA-1","content":"337a418ca8ec09b41516da89b0c8e3cdd2bbdf5d"},{"alg":"SHA-256","content":"7d92d5bc2b4eef3b409e6e7811e1cff0ddee0525cd58db7a89c93be4453ad66a"}]},{"bom-ref":"003c7a0ac293c77a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES-A.so","hashes":[{"alg":"SHA-1","content":"eb20fd662e6b9c22c4c053a3b4a70aed3d268526"},{"alg":"SHA-256","content":"fcc26e5ddf1d2caa202637f634fc48c82be6d040d8e840f5c9ae7ae3a2660c26"}]},{"bom-ref":"41b84b6e8e4c4fc7","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES-S.so","hashes":[{"alg":"SHA-1","content":"7ca0f396dfd40ae7fde204f84f3f9309eaeb34da"},{"alg":"SHA-256","content":"27cad182cb1d0af21d79129bd1412c88a4e48a86add3e348b5ac60f0a12729fa"}]},{"bom-ref":"1f9f8b0368f3a467","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-ES.so","hashes":[{"alg":"SHA-1","content":"02a9981593ffe6ea54a9bb6516e862fc0528dcdb"},{"alg":"SHA-256","content":"db4b6bc7951175581022d57045f72d3029d5289724292ac795b91539a46498d4"}]},{"bom-ref":"41a2f6b2e56aca2f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FI-SE-A.so","hashes":[{"alg":"SHA-1","content":"e2c84ee5d5ba05dce119328f05ba7cf6834c8742"},{"alg":"SHA-256","content":"17e5af48ab9a0ead003eca1cee7b4b750d1982da254da2069be5c8634f2d0c22"}]},{"bom-ref":"beb8cbd5702ae81d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FI-SE.so","hashes":[{"alg":"SHA-1","content":"40181d319a3dd79e90a949943a9d6a36083eac00"},{"alg":"SHA-256","content":"1ba4433c59b9eb70e8f1519aa075bed9c71b75b878d7b8492b3ba2dd0ead0eb4"}]},{"bom-ref":"cee89defcdd92fa2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-FR.so","hashes":[{"alg":"SHA-1","content":"c7df8ddb3af1d29b7dfa07a67aac4219519aa8aa"},{"alg":"SHA-256","content":"c29f17eaf182000cf8900d49dc1a6566bf6ba0f38c3fb2942866c550b071e623"}]},{"bom-ref":"6f6004f6c27d3c06","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-IS-FRISS.so","hashes":[{"alg":"SHA-1","content":"37a7dd2d36a71906a9bbce44ab1faba25514730e"},{"alg":"SHA-256","content":"a1500b45b45770e895e70825e5e24f35547e2b2e965fc6ae1dc567ea3c53a55d"}]},{"bom-ref":"75969852283c8125","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-IT.so","hashes":[{"alg":"SHA-1","content":"a91ad8190e610799b7d5924c96eaf9d7477b8ac4"},{"alg":"SHA-256","content":"b683e1e29c3c8a7bf4fea1070c081c72f2fbe8acaef2ce80d99eac5ff46ddc21"}]},{"bom-ref":"9deebc193bcdf34a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-PT.so","hashes":[{"alg":"SHA-1","content":"83069e1a78af06b54990dbb45b64cee47e3278b8"},{"alg":"SHA-256","content":"a4d8daa55e0734064087cf613356b0148f2a1d84d3406221f152e678c53cfafc"}]},{"bom-ref":"bd99623099a2fe96","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-UK.so","hashes":[{"alg":"SHA-1","content":"9313fc40a343945b20cb3a8213cdb500fc08f0a2"},{"alg":"SHA-256","content":"44173ab0b218825e9793a326674638620f72ab60a740fddf8c8621088d0bc82e"}]},{"bom-ref":"a473e03fb82c6861","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EBCDIC-US.so","hashes":[{"alg":"SHA-1","content":"d09b856af3b7437634a56840432d445508f99382"},{"alg":"SHA-256","content":"91990308d22f3e7bec21d8420c13073b49bfdad318924b798054a5764353df49"}]},{"bom-ref":"e2c67d586785cf37","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ECMA-CYRILLIC.so","hashes":[{"alg":"SHA-1","content":"63304e451920dcba4e7fa77a1896927ec178e288"},{"alg":"SHA-256","content":"143cbf9b23ddfb276b9a08d2a3234a056e823e91b51f1abcd82e1ed58aa8a566"}]},{"bom-ref":"dc2aecf658f63315","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EUC-CN.so","hashes":[{"alg":"SHA-1","content":"34e034ca2b03bfa414fc0578df109a14b898e13e"},{"alg":"SHA-256","content":"6d3028137f29bc8871dead2a2eb92d7551918a536c0a55e7c60411c6fd93c180"}]},{"bom-ref":"5257cb2662cd4e0c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EUC-JISX0213.so","hashes":[{"alg":"SHA-1","content":"21637f85edd04ac7e0726577c4c6b70882d26046"},{"alg":"SHA-256","content":"ce968e0941f41a5acd9ed1eb94f545c9bf1b1d137c5c7dc04ffd57ab128d7cc7"}]},{"bom-ref":"e86eeab29d69cb20","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EUC-JP-MS.so","hashes":[{"alg":"SHA-1","content":"48dee6a373e0c155c8f64f6f9323fd14a967a232"},{"alg":"SHA-256","content":"6a947258bdc6f8e382c7e4dcf127efb6ffb064ae425d96cf05ee015a143c3dad"}]},{"bom-ref":"4a07c0dc1bdcc176","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EUC-JP.so","hashes":[{"alg":"SHA-1","content":"73da1d7a5381684f1b91cab1f3e266358dd6aa74"},{"alg":"SHA-256","content":"11a287d936112432489edff4ddd05b0ec4d9d673a73af43199446e877b31be13"}]},{"bom-ref":"d84ccbf449371abe","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EUC-KR.so","hashes":[{"alg":"SHA-1","content":"8c07323b467cc771da1682cd7114bce198b15fe6"},{"alg":"SHA-256","content":"9b2719fd1db22f3790087ea77eb337d7c068716a7a160967bef785c73ee96143"}]},{"bom-ref":"4e5ff38954cd822b","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/EUC-TW.so","hashes":[{"alg":"SHA-1","content":"1c08cd3e56f64aa882eca72d820dc496ce01311f"},{"alg":"SHA-256","content":"c29d9415f75ccf570adcb7cf03dc7816db55b78bdd86e49129160b2407bb016d"}]},{"bom-ref":"bab8fa8bd4a27736","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GB18030.so","hashes":[{"alg":"SHA-1","content":"39653b8cb394fcdafd1f12b9f6ac8f4d73494907"},{"alg":"SHA-256","content":"df7db36c1ae9cc8c1300e8fe7648fed99fc61e867f832fc846c79e635c51500f"}]},{"bom-ref":"bdecd10a4b08016c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GBBIG5.so","hashes":[{"alg":"SHA-1","content":"d3c1367d2e582281355a36b661f46f412c99c22f"},{"alg":"SHA-256","content":"c620113b4a078b9c35807c5affa8db9e3a89f11d164abbbff4c4be9115ed3863"}]},{"bom-ref":"7f6a748e6917971b","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GBGBK.so","hashes":[{"alg":"SHA-1","content":"268b08318e48b0bc3a72066f7cb3b0d3238737ae"},{"alg":"SHA-256","content":"410f8698d8ae8aae8e96d8a842b9d903ecf9fd1873c2a9df50de6cef909de5e9"}]},{"bom-ref":"f2bfd30a79af6492","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GBK.so","hashes":[{"alg":"SHA-1","content":"f5952a19f1e2d86fde25201356b13b5745cbc1d0"},{"alg":"SHA-256","content":"021f6a71d97136c8d3637701a262e09c15542e1106f4ae1fa635ed51dafd1b15"}]},{"bom-ref":"ae05a233aedb5ae1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GEORGIAN-ACADEMY.so","hashes":[{"alg":"SHA-1","content":"fcefe19eed78e8cd1e78429d88f5136b833440df"},{"alg":"SHA-256","content":"c946becfef2461fbad1efe688d3b2ce779e57b25a7c4f2dda7b15a2caf2e9aef"}]},{"bom-ref":"b17d7c5750fa5f00","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GEORGIAN-PS.so","hashes":[{"alg":"SHA-1","content":"f475c4176d70c820389955652fb0d4544d76bfb2"},{"alg":"SHA-256","content":"0f042851a5bff983d8473a237773d87923c99382203f6166c9c7fc75993aea96"}]},{"bom-ref":"75e426091ae1a745","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GOST_19768-74.so","hashes":[{"alg":"SHA-1","content":"674c804836478d60172a5351e83e4429b5b4e545"},{"alg":"SHA-256","content":"92ff9e68681f2f63ed116c329320e98b62fed526d6540ae608f35eb6700d9821"}]},{"bom-ref":"53134782d26f03d4","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GREEK-CCITT.so","hashes":[{"alg":"SHA-1","content":"a3244d4324c29ee181fb20291c20a41301cb9b85"},{"alg":"SHA-256","content":"82eb96646615a902674f26bcf02e0b95d4eaaeda17494249623e3f53233b06b9"}]},{"bom-ref":"f7045c37d754fe34","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GREEK7-OLD.so","hashes":[{"alg":"SHA-1","content":"a1e66bc6078e2870b3e9ca31972611b532eef10a"},{"alg":"SHA-256","content":"859882d67f6d17bd6fe033877ce672da898b8b25c9e7edce3b1a8b5181a299ec"}]},{"bom-ref":"3b13ef73f83120f4","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/GREEK7.so","hashes":[{"alg":"SHA-1","content":"6a3f96a70023b35071fd00bec3513679b8f27f2f"},{"alg":"SHA-256","content":"a876696104b8a2b67c7ec4fb45fc21cf8450ed19229e48cb23859ecacf18d539"}]},{"bom-ref":"7b869a6ac84a944f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/HP-GREEK8.so","hashes":[{"alg":"SHA-1","content":"4e1a0ff32b1b1946c9fe2ec94eb53c1af48c0e2f"},{"alg":"SHA-256","content":"dd3818b617967c8b77353e52602017e3ac58151caa6bcafe0d34d86b5ac5e819"}]},{"bom-ref":"6fe5237cd3c1a2ce","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/HP-ROMAN8.so","hashes":[{"alg":"SHA-1","content":"f5ae47c10d7c52b6bf8bb8b24744e02c6cf98f20"},{"alg":"SHA-256","content":"d54fa81d4bd626e25a10264985f455923bb987e87a2213e9771eb9cee3659a05"}]},{"bom-ref":"8e705a7fc0df3866","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/HP-ROMAN9.so","hashes":[{"alg":"SHA-1","content":"a33de9e8d0f578499445d8c653820da6f8f2beb3"},{"alg":"SHA-256","content":"4ea7e161062bc04672ff49309f0cf9e40350a13f793614e917f5c99ff7b4b2ee"}]},{"bom-ref":"c8e7478cf5d4b3c7","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/HP-THAI8.so","hashes":[{"alg":"SHA-1","content":"d7310fad0aa525eccfd5b2f47110f9669dba0732"},{"alg":"SHA-256","content":"779fd8d333536384350f8d91ad0388387f6602100727211e363d5de00cbe01ce"}]},{"bom-ref":"ab324c0bea36aa93","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/HP-TURKISH8.so","hashes":[{"alg":"SHA-1","content":"ed1fc53a8f14a5af28d819b96c385140e4db0808"},{"alg":"SHA-256","content":"08fd547498788ce0fc77502d6298e48a83957723a87800ec485c77f603bb9ab2"}]},{"bom-ref":"63517df8e4954f92","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM037.so","hashes":[{"alg":"SHA-1","content":"781bba33ef493a70fbd7f42437c81c8d4edc291b"},{"alg":"SHA-256","content":"36a1a6d9346e0c0c3b1c8ae012f55ae52034c585f4b2d4f47d2587d3934125db"}]},{"bom-ref":"0fbeed31149352af","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM038.so","hashes":[{"alg":"SHA-1","content":"98f52b5e6a3a83a42d9a22e96aba0bc2b243bc92"},{"alg":"SHA-256","content":"1e245d77ae88aeaac1999ae84e3b92fde8f3555aaaf37e7c27a2ac40b570c2e9"}]},{"bom-ref":"94e5feb35ccacd02","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1004.so","hashes":[{"alg":"SHA-1","content":"d96036d3b14b32fc3f64a84641ce4289f256a5f6"},{"alg":"SHA-256","content":"6d75f1d6e969042b0fdf443c86fea212d410a8fc3e0f5cfc3dc88082eb7459c3"}]},{"bom-ref":"91abe3396b528913","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1008.so","hashes":[{"alg":"SHA-1","content":"a941fd31d15f48fa94a4bebe5f4e1fea4c904c26"},{"alg":"SHA-256","content":"472b4be7c1a814340cd3751eb1074dba00b7a6f7f9e1986cfcbb7c5cbc32f24a"}]},{"bom-ref":"2f5309a60467d011","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1008_420.so","hashes":[{"alg":"SHA-1","content":"6a2994cdfc3ba5cc12015256f21ff1ba49d10eb3"},{"alg":"SHA-256","content":"6500dd0a63ae485b00baf5ddad5162358af7e3450fd6f24f06f979c1e2a5b18f"}]},{"bom-ref":"cb1ad70a63fb8d47","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1025.so","hashes":[{"alg":"SHA-1","content":"784871060610b30fbdd2c0e03405df477c28862a"},{"alg":"SHA-256","content":"8d868fba9e1a5449812fe881792052fa6a147312a6176d7221bf710248985588"}]},{"bom-ref":"9f539dd610081af1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1026.so","hashes":[{"alg":"SHA-1","content":"fd72c78caedfa4e0c9561c6964a13b193aefbd6b"},{"alg":"SHA-256","content":"00c593ce7d7aaddd8d6986cd2cc6726cb3925d4c1fe614c63ffc94a6785f3361"}]},{"bom-ref":"ad9e93691c1d1cea","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1046.so","hashes":[{"alg":"SHA-1","content":"7fc635f6aa53b70d8154dea6583397fc01ac2a08"},{"alg":"SHA-256","content":"c9aab2eab77077128a74110df8dd1762c22f598e3e9371435abd77d7ecdcf97d"}]},{"bom-ref":"4b21c4e28a8f64eb","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1047.so","hashes":[{"alg":"SHA-1","content":"03f9a478030fd61946bc08b7d37cdba76ff87b34"},{"alg":"SHA-256","content":"dae6bed473218b8094ef3ae3982a51224fec054207edeada7c76d2bfa0f21618"}]},{"bom-ref":"91fca15f57c55ccc","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1097.so","hashes":[{"alg":"SHA-1","content":"f3be802bb48c416eb6f73520013bc17bb7941471"},{"alg":"SHA-256","content":"e7b7040dc7cc1ec51567b72669464e306693ae5aa36523ac7a17b0fb21ec6816"}]},{"bom-ref":"d1b3583a69e8a5f5","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1112.so","hashes":[{"alg":"SHA-1","content":"db9104e5c3e606063b9fd2299a9ce4b636f5e773"},{"alg":"SHA-256","content":"4f55c49df9f188319fef672f59f97c67608dc56d2c8ea461f13dd0a57cc9c6d8"}]},{"bom-ref":"4e5de32baafa8b38","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1122.so","hashes":[{"alg":"SHA-1","content":"b5c1c7ed2a97e73f3c0c610d3cd712eb4d3d8dac"},{"alg":"SHA-256","content":"4438914c2859bb8686972c055784808c99c9707af1b45cd264335060e7bfd0af"}]},{"bom-ref":"f8cbab916bc17b68","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1123.so","hashes":[{"alg":"SHA-1","content":"ab45ed3e83136df4c9d45cc5f9a7df8568bedd0c"},{"alg":"SHA-256","content":"804b7f2930a35035fd418b2d861f6b082a4d724703794f3fad631a25877d4819"}]},{"bom-ref":"f8626cae31c306bb","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1124.so","hashes":[{"alg":"SHA-1","content":"d62868d4713cabcf51d3d8cfe6e4813671063329"},{"alg":"SHA-256","content":"2cc406d001cbdfdef40497e2d55ee73e44f86660d21e4932ebbba32ad05200a7"}]},{"bom-ref":"d897f3f7acf2f8c8","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1129.so","hashes":[{"alg":"SHA-1","content":"9d6230c67d3fb1a9a98bb70f89bbf04cd0f40cff"},{"alg":"SHA-256","content":"f128e2711a0ca1628b90a6c29fe94b8446dd4d8a49483950ce13bb35edf96a60"}]},{"bom-ref":"9998aa8eb2013c06","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1130.so","hashes":[{"alg":"SHA-1","content":"3da16d34e210498a6379f3c0951ea4f7b55c3680"},{"alg":"SHA-256","content":"558e89a72eb3bce8328e1b4916cc29b6de3e8a146e0e60996bbfcc1667fe5efc"}]},{"bom-ref":"a56dd12aa48766da","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1132.so","hashes":[{"alg":"SHA-1","content":"9cb754a93338e3df18e7e3a3ff49dcb7f8dec19f"},{"alg":"SHA-256","content":"2e3350ed15fceaa3903416e309b6ad3616cbee6838b296959bbe0db3fb57c72e"}]},{"bom-ref":"8134eb5cc2dafcb9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1133.so","hashes":[{"alg":"SHA-1","content":"ba833b52bd4153a157228681feac7d141a7a53ce"},{"alg":"SHA-256","content":"2527defee891afe9f80df12b7c0055aa586c2277e089a063a0ade7b0c7d71394"}]},{"bom-ref":"5a25bad96fcff355","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1137.so","hashes":[{"alg":"SHA-1","content":"c3b9b1aed852c043c9cb6b416c7237c4fad32a90"},{"alg":"SHA-256","content":"09ca0f800ab823a32b0a966a21a3f9c05c5be2e2daa7e0899884b4bd9e749dcb"}]},{"bom-ref":"501ea559250e1982","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1140.so","hashes":[{"alg":"SHA-1","content":"bb82137fcb3edb5dee3e3221fca9c50143252cd5"},{"alg":"SHA-256","content":"62d833070da5e1581457e67373e6a46a00d34a45e581ccc2c2d733e8b58c5841"}]},{"bom-ref":"f44dfb2853081316","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1141.so","hashes":[{"alg":"SHA-1","content":"2a63f38db1247a3e4b4ad76d8c68b7595113765b"},{"alg":"SHA-256","content":"25a3d776ff664f76df2de367512697f1cf7e4162cf9e8097f77e591c203cdf52"}]},{"bom-ref":"07c3d57cb1b10e86","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1142.so","hashes":[{"alg":"SHA-1","content":"e3d47aa3d0b7eb33f63d261eefcae707a02ba0d7"},{"alg":"SHA-256","content":"22f96e70342aca59c15a4248b2f9807e5056daad5be85c0696f17627aff4efbc"}]},{"bom-ref":"a850eb397015a505","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1143.so","hashes":[{"alg":"SHA-1","content":"1c13ff2ccfff84f549fe8a31a75a65adfffa289e"},{"alg":"SHA-256","content":"61de4e7455893bb70151cdae32a4e34612912d6e3e19d783d686b2d163bde48c"}]},{"bom-ref":"6a0d079f55c8e411","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1144.so","hashes":[{"alg":"SHA-1","content":"ac6acf11f6201b912f854bdd61019ba71b0e3797"},{"alg":"SHA-256","content":"86b5821484f37902304a083b1965131a7e33c9429d93e2774ada88750fcd8305"}]},{"bom-ref":"082afba1c6c1cabe","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1145.so","hashes":[{"alg":"SHA-1","content":"3b4ce14d1641df8d9811f1ede47e21efc02bb970"},{"alg":"SHA-256","content":"033a8841c80d34857cf16fb4605e7a86ccf7c130653f7a86c0db79a712b073e1"}]},{"bom-ref":"db29dafe1a06ae50","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1146.so","hashes":[{"alg":"SHA-1","content":"d936ab8e259103e4787dfbf4fc4ca0e5aa401927"},{"alg":"SHA-256","content":"51682cd12452c04122d71021684d4b9407e38ce3a76f7bea34e0b0da12a12eb9"}]},{"bom-ref":"3d9a501b4b19bba7","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1147.so","hashes":[{"alg":"SHA-1","content":"b6b90aa9c8a3fd6626f2fff70bf05cc8d2955de6"},{"alg":"SHA-256","content":"8b8c5b7ac023f60d1f4e4cc81ee86e086229a258f86cb7dbd15962a98175a668"}]},{"bom-ref":"db27a82dd1e519b2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1148.so","hashes":[{"alg":"SHA-1","content":"503add294e6fab8008b44f3d3aab0488c2148d84"},{"alg":"SHA-256","content":"1e5b1e5829fe3faed4965731ef3902251c5a172d9fe8fb9ce4868ca5ac686057"}]},{"bom-ref":"4e411000ebacc5c0","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1149.so","hashes":[{"alg":"SHA-1","content":"7eaea8ad46947564e0e6c6503ef8a475bcce0cf3"},{"alg":"SHA-256","content":"3bdf57d5c92acb58505332dea084a3d0d2970065d530c14747d9d69fc0bdd4c0"}]},{"bom-ref":"724d837f26f99473","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1153.so","hashes":[{"alg":"SHA-1","content":"1ffe7dc72e117352d95d07d7f835a0f53d166359"},{"alg":"SHA-256","content":"76f5e0b69c10fa6e939383d6c770249ca390c26984f753b8465b83e1f0fc771b"}]},{"bom-ref":"82e5eff8fe55a693","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1154.so","hashes":[{"alg":"SHA-1","content":"9b020eec38c7e40a0e90215e7069da3f00a0515c"},{"alg":"SHA-256","content":"d7b3739d76313e7a5f8b47731a383e2b35bc40fb4d9f13e4573efdb9350e8d49"}]},{"bom-ref":"44860c122d1f0c24","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1155.so","hashes":[{"alg":"SHA-1","content":"6908293ea9891affe5df30c8ffd8d86a6f086674"},{"alg":"SHA-256","content":"bc502d6e38463649c09b287069162b4ad32c2443ebaf1c2ed1232d37d3233cb8"}]},{"bom-ref":"af9bbdeb80d46d81","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1156.so","hashes":[{"alg":"SHA-1","content":"7569e2d57883fb6023078fe7d2d557471ddcf566"},{"alg":"SHA-256","content":"efe69454c863668175fee383bad53aad1f29948582344a092f9055d23458d7c1"}]},{"bom-ref":"20464e5c8e9d7aae","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1157.so","hashes":[{"alg":"SHA-1","content":"d1056136795d89d4359c4ab2e96f015e9c2e0f5c"},{"alg":"SHA-256","content":"e0be8ddba02007520952516be6a889a30e7f46dfa3e16951effa0af6a15e77ca"}]},{"bom-ref":"c45674ca37a51847","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1158.so","hashes":[{"alg":"SHA-1","content":"30c99fc245bd97dc65b654201468da1cc7c7b6d9"},{"alg":"SHA-256","content":"980edafb0c72380deb1a91f9c3bcc0e74ae559618f0a03ab4a8fe055b5f87b0f"}]},{"bom-ref":"800ff9368ae0ac52","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1160.so","hashes":[{"alg":"SHA-1","content":"9a9c663855220b91906d53504c61862776a3d47f"},{"alg":"SHA-256","content":"ad6371c73210d7c2f37cd3f61767a695676ec8277b609ce2809895b26e086936"}]},{"bom-ref":"852521d18fc0102e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1161.so","hashes":[{"alg":"SHA-1","content":"039fc4c6fcfd3de4d4982447adf3d51d9a2e9d31"},{"alg":"SHA-256","content":"599bd4a46047b5e0f3d35035447389fefafd2c7967742829ee992d6487ce7ae6"}]},{"bom-ref":"9f714432712b6446","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1162.so","hashes":[{"alg":"SHA-1","content":"f95b2acf4fccf76f5650a5e32ea1beef4f6c47c9"},{"alg":"SHA-256","content":"5151db06e95bae6d451a4032e22a65b9dc9f5023e3e2f23d826a56b9991eebfd"}]},{"bom-ref":"481834caf417eb7c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1163.so","hashes":[{"alg":"SHA-1","content":"15c42c6bd1a5691cf3f8b87a43896595d02839a5"},{"alg":"SHA-256","content":"da9d13fd5e8e950c06db58e34e9a21dd47632850bd2ae06ecb18d297b7d5c07f"}]},{"bom-ref":"c737118b92f42ae2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1164.so","hashes":[{"alg":"SHA-1","content":"2b05e9dd81393956acefab1e6382066da794b13f"},{"alg":"SHA-256","content":"d59dd93d68747b83d946ae729903cf260ec28af96ca15cdeae61a14f9829d075"}]},{"bom-ref":"d7f1b58dd713f701","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1166.so","hashes":[{"alg":"SHA-1","content":"bfdd0e801815d087d79775ac2cb0e11dd1262d68"},{"alg":"SHA-256","content":"c44773ff9a86608fe5442e7b6a2b23d05f31dd1e34f16ab16a9f467c09900155"}]},{"bom-ref":"807eda30c4801f6f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1167.so","hashes":[{"alg":"SHA-1","content":"63647d1c41e9059df2fc8e16a5aada3a3ccbde0a"},{"alg":"SHA-256","content":"838547b42fa907448c0358f3eed5afc2d89be49f79870dee6c3e51eabefd015e"}]},{"bom-ref":"45cc67b85ee4f482","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM12712.so","hashes":[{"alg":"SHA-1","content":"40897e2e7e7d07cb8ac8eb6402bd6d0f34f3b61c"},{"alg":"SHA-256","content":"03ace5a8356ada3965c9bffe1308a348eae9ee0abfb53f6d20c49d70f7c6799b"}]},{"bom-ref":"5269dcc4565ca914","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1364.so","hashes":[{"alg":"SHA-1","content":"30c25bb39bac65f819bb6af69e88f8f99ee5ce74"},{"alg":"SHA-256","content":"35bee7d4391a04f077b8236d0aed12eeeee3c12f2c3e6728281284237cdf0fbd"}]},{"bom-ref":"7a121b99f057d8c5","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1371.so","hashes":[{"alg":"SHA-1","content":"e23c702576f0890a358d815b419d30be4e71be8b"},{"alg":"SHA-256","content":"a3aa21f3116ce5ccdc3da89f81bae73279d5d34586f83bd0abdcd3852c05256c"}]},{"bom-ref":"6c5f7ff6f705c5e9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1388.so","hashes":[{"alg":"SHA-1","content":"c6e2978ca96326e7a62829322ccd96a6c67485b8"},{"alg":"SHA-256","content":"b51538931c76e8d80412209441013a64107de72be50d55e7b8937a7a09f77228"}]},{"bom-ref":"c441f8629d4235a1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1390.so","hashes":[{"alg":"SHA-1","content":"44119a1e10a7920c4715fddf867d892606235329"},{"alg":"SHA-256","content":"e14eecd2f25cb9bc0b2c095eb7011344dccdfe5805d69c4e9be81b7022dc51e1"}]},{"bom-ref":"6b857d0c497a9426","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM1399.so","hashes":[{"alg":"SHA-1","content":"9ca949379e4345a8f165c86008dfb82387e231bc"},{"alg":"SHA-256","content":"d381da17397ad700c5501bc58db04dd308326a34b4a7e8026facd1254e34d8ad"}]},{"bom-ref":"949dfab68996414a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM16804.so","hashes":[{"alg":"SHA-1","content":"1c3139fedce5cf57360681563ebcd544e7dd5553"},{"alg":"SHA-256","content":"892c4695ba21632283b01ae75d40cbdcf5ee36756b261a69187d0b6d482feaef"}]},{"bom-ref":"5f23bbd451195451","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM256.so","hashes":[{"alg":"SHA-1","content":"f5d8e8ac28265b02b37a7b585ba5330765547776"},{"alg":"SHA-256","content":"f0738773b881e254400d5ae37b2ff1e53fa71124673f3e34fc1849323b827c68"}]},{"bom-ref":"626402ba7fc4ea31","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM273.so","hashes":[{"alg":"SHA-1","content":"547b2f440e17748c170b36b9422adde03d4c0991"},{"alg":"SHA-256","content":"2d45c39bc3420c114ff1b9cc0efc48202f75ddf062699302591c9a8c533e6df7"}]},{"bom-ref":"bf589ff759e2b783","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM274.so","hashes":[{"alg":"SHA-1","content":"8bd6a8e187249599c7cef04edd9012bcee7774d8"},{"alg":"SHA-256","content":"fbb1350519eb979f14b73e6b3af8a2d22013f76055c54aed9cf991c9ade99eb0"}]},{"bom-ref":"14db1d0b2dc5b3b3","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM275.so","hashes":[{"alg":"SHA-1","content":"1ded3cd9509b244f9f3e52daed712e0e018ca642"},{"alg":"SHA-256","content":"064983ef090ab5787e32c2e0c80b36bc7622f459774105f91e03811a68f617ef"}]},{"bom-ref":"8645ab2a8c2e3e40","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM277.so","hashes":[{"alg":"SHA-1","content":"1d610684b0af992ba64bbeb47ab8aa82bff4cad4"},{"alg":"SHA-256","content":"d8e9550b6a7588e409fc134ac5a5daa13fab2d83bdd325685843dd1d4cfd9b87"}]},{"bom-ref":"3547f365a76aba21","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM278.so","hashes":[{"alg":"SHA-1","content":"285913b94905217ed1ec0aa008cd89569ca31ec9"},{"alg":"SHA-256","content":"b2ccb50c05e33412c73ca645fbdb6f9d2d0ed5297ad3333fe0c3f7754c584e1b"}]},{"bom-ref":"a32c0955a376322c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM280.so","hashes":[{"alg":"SHA-1","content":"4c96b470c2a20e6b3f658d93ae06898ad305b9fd"},{"alg":"SHA-256","content":"84ef11671d5891220d6567010c9a655d430944c75ff038054c7d91e609510b76"}]},{"bom-ref":"12fabb569ce86fd8","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM281.so","hashes":[{"alg":"SHA-1","content":"2fbd54859afec13b10027632fe23a75ef10011f7"},{"alg":"SHA-256","content":"cadc79d250c2e0c04bca46c0a49a2136b2a8e81daff80ec1367331bed221db99"}]},{"bom-ref":"909b73a93d7a2bf1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM284.so","hashes":[{"alg":"SHA-1","content":"8e0d8816605367120c7f19a4e545dc51e90fd82f"},{"alg":"SHA-256","content":"159482ab855714fa7f911ab542e8836186173d1aa19e3b14e85c4ba66769ca0c"}]},{"bom-ref":"b820674c43664642","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM285.so","hashes":[{"alg":"SHA-1","content":"6b722ba86bd36bde6165afe7a783801e03be9341"},{"alg":"SHA-256","content":"75729657d44ae77e24da987f102220129dca71964b7d256bcc573e1d3c8a98eb"}]},{"bom-ref":"c39fd4cf0b324147","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM290.so","hashes":[{"alg":"SHA-1","content":"40a8658f91c063a418048d98f1c124592f78de16"},{"alg":"SHA-256","content":"cf1d940d3357c06ef4393fc10c73920dc8475ccb2f9225632eb8b186fe23b23d"}]},{"bom-ref":"87914c309fd51a6e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM297.so","hashes":[{"alg":"SHA-1","content":"878d0a647882d1ac861ae24f475e2886b085305b"},{"alg":"SHA-256","content":"965750e3ef432eda826bcefe50f9f35e0d1ada278a91c57c1b6c2a81f22a4cf5"}]},{"bom-ref":"6eb28978e730f9a2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM420.so","hashes":[{"alg":"SHA-1","content":"f81cdd027ac8ff2472d24d2935c419ffda05d099"},{"alg":"SHA-256","content":"1e76aa4c67536fb301ee682e1bb158fac52a353e6e31f6d8a201ddb7337a737c"}]},{"bom-ref":"68d3cf2d1fc3cd64","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM423.so","hashes":[{"alg":"SHA-1","content":"0cc9ee926783b806dfec5f95d611d14c7a4d538c"},{"alg":"SHA-256","content":"d32a348dc834a45d78872f6916c200d8a09fa060a6bc4695a19821b008fabc9e"}]},{"bom-ref":"fc099f6b30c45400","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM424.so","hashes":[{"alg":"SHA-1","content":"c7031e6f3a57b23ca5f4f040f3630bc75604826c"},{"alg":"SHA-256","content":"1efe85a1456ac6d3b14a25c9b65182cd4a5bbcbdb1153911aabdd0890f962777"}]},{"bom-ref":"bc774c5f5d1fe059","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM437.so","hashes":[{"alg":"SHA-1","content":"aa6a987665d45daecc0b15d12b163b3cbcd33cd8"},{"alg":"SHA-256","content":"02573fcbba029c6a9ebaa3b8e11184e5afbafa90c5307bdade4d700e21f79c13"}]},{"bom-ref":"a69641850fe5e83a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM4517.so","hashes":[{"alg":"SHA-1","content":"bae8fb396f4e4758de551d281359e0c2cbb4719d"},{"alg":"SHA-256","content":"41b5de77bd4ef936cbde68f11b9d5920aee929efce69389c93c59a849f304554"}]},{"bom-ref":"c2f07712a6d5621a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM4899.so","hashes":[{"alg":"SHA-1","content":"8e748deb66b7df4f9b5c1229683c28fc1913e7e7"},{"alg":"SHA-256","content":"f9ea44e52bd249655b562da2af0573451adcb0e816cba90e687666eb84d826d1"}]},{"bom-ref":"09fcab7dcaa7e9f7","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM4909.so","hashes":[{"alg":"SHA-1","content":"c30d9bb1fd4cf16309cd39a2bf57372485b9c326"},{"alg":"SHA-256","content":"0d98dc9164f01c5d7001a5f9c98def026c3d10c2df2ee5fc90459ba2248dab5d"}]},{"bom-ref":"7113465c1ce6a324","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM4971.so","hashes":[{"alg":"SHA-1","content":"68e41444f7438484d4f312fa362761a9c5849bf5"},{"alg":"SHA-256","content":"901179541435c5d0bba7b2fae3769bae0ade59a4c53d7f4e7d5bb71074bd3329"}]},{"bom-ref":"d3b25dc9ac8ed475","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM500.so","hashes":[{"alg":"SHA-1","content":"93ddba9c6b2f9110bcccb9f72a8a65b94c83f205"},{"alg":"SHA-256","content":"39d67dabbbdd888a1441188a8c304811b624cbc9fd4721864869ceb53407185b"}]},{"bom-ref":"ed1b9b2f3483023d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM5347.so","hashes":[{"alg":"SHA-1","content":"1360478bb3c9d9f6c4a27fbd38c720284101e5d7"},{"alg":"SHA-256","content":"88ac9a23037c4fc1c0c5c41ac7bbc4923c005125425ecfcccd626dc018ff068e"}]},{"bom-ref":"0d2a602adb1d4e13","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM803.so","hashes":[{"alg":"SHA-1","content":"8e202537947f5389562adcbdb1c87be128cde292"},{"alg":"SHA-256","content":"31a32bc3f2a1038e98f917153c041e4726069cefc7d5fb67ecfd4d53e45c18eb"}]},{"bom-ref":"693352c5e972a117","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM850.so","hashes":[{"alg":"SHA-1","content":"f8e3070c1bd620401260a091d4a4cb7f378f1157"},{"alg":"SHA-256","content":"adc8f5a235fd5c08e80872d292c16484c06e6f92a3ea0d393d5cad831d6b6442"}]},{"bom-ref":"5c51c5c6b0298de2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM851.so","hashes":[{"alg":"SHA-1","content":"340f294d90bc44690bc59151d72016a08fe43457"},{"alg":"SHA-256","content":"ae0e2d04a9d8d8b910cc42379e8c9cc0d34b5cc63ca2f0a04644d3378ea3c256"}]},{"bom-ref":"b7f39918faac1f78","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM852.so","hashes":[{"alg":"SHA-1","content":"83ce36f8db0cdd9d5030a33b375fc1ab5397f545"},{"alg":"SHA-256","content":"87bfd24867ff2e4097fcc15bac062016dc4513b147fd05771b9d1403dd78139c"}]},{"bom-ref":"28ca3f6b0d3e9575","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM855.so","hashes":[{"alg":"SHA-1","content":"b3adbced46cb168d12969992e7085d3a1cfa8f80"},{"alg":"SHA-256","content":"d1e8b2b12eb989d7c3509a13e446eee3880638b8fe15c6cb7cf89e6383ca06e1"}]},{"bom-ref":"e584677311481bd4","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM856.so","hashes":[{"alg":"SHA-1","content":"25f8290555173d99589679bdbe0cbade1c0d2d05"},{"alg":"SHA-256","content":"ef072995b77c9c8c7c05dafe26e67b71918abf42e9f7e00cd9336bb38114c57e"}]},{"bom-ref":"42f4ad09c24bb239","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM857.so","hashes":[{"alg":"SHA-1","content":"72c55796d3928c8ab333d58f92d159603cbc8162"},{"alg":"SHA-256","content":"3d88ffcd2271ac0e286daf9960ad1b743246fd818577cdd04e21162e44a22485"}]},{"bom-ref":"8466a9cf11488508","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM858.so","hashes":[{"alg":"SHA-1","content":"3a140b46e9a3a4308d4465ca9a8cf091e8f6db53"},{"alg":"SHA-256","content":"7b19d67b10ff0ac4bbd9f997c83bebb48566b4da6b88ce52c2b1ce40a9c78eab"}]},{"bom-ref":"f5fd09d837062b5f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM860.so","hashes":[{"alg":"SHA-1","content":"8ff4244656c5ff0b8e29bbe0e493c741aeecbb3e"},{"alg":"SHA-256","content":"734189758002d54a3f00c96cae6945514e14d3b2a780fd33813bbe71d7c71f81"}]},{"bom-ref":"a8c2087aa9f50311","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM861.so","hashes":[{"alg":"SHA-1","content":"a8b209e6cbbec743c7d46199f57109c392927021"},{"alg":"SHA-256","content":"aa0ada92e0c4b63b416c8818570bfc81df21a844f2117e4ecc02fa57cdc1a066"}]},{"bom-ref":"63a8357bf35f68cc","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM862.so","hashes":[{"alg":"SHA-1","content":"685bcdf12637fd0b19abfaa2a04273adaa58f53a"},{"alg":"SHA-256","content":"4f060577dda5661b08d271d27e097fbb871d4b96f49b0b7f22bb30611ce23090"}]},{"bom-ref":"bff6f7c7f5475f79","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM863.so","hashes":[{"alg":"SHA-1","content":"6b87d44d1c917665c9aaaacc9a18a47ca46c2f3c"},{"alg":"SHA-256","content":"47bc22ff17a84fc5896c3f901fa589de0a142051f38a25c314f58fa7c3bc5318"}]},{"bom-ref":"9ba0b953fd72e9ab","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM864.so","hashes":[{"alg":"SHA-1","content":"2c4236b730f69f22158328c012457a3d578e0c4b"},{"alg":"SHA-256","content":"392c2ad23e2c2a8e4212aac3b5066367388d94b4a8e3ef1344d438c2d3da8c61"}]},{"bom-ref":"97ff5dcfa6fffa4d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM865.so","hashes":[{"alg":"SHA-1","content":"2e399d19e53ae11667ff2c1e0b7f2771f613537c"},{"alg":"SHA-256","content":"f84309d979ade17928d4ca5c37280c20006c85f9136c1d95123e78fa32775bb2"}]},{"bom-ref":"929eb3e621a27978","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM866.so","hashes":[{"alg":"SHA-1","content":"91d86bb65d9a533c2a22f15ab3849216560c9024"},{"alg":"SHA-256","content":"86dd9fd6ac02b2485e11ea339a815eada6b04ad60b0b6e11d0c5514312c78e93"}]},{"bom-ref":"99fdb37b830b1531","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM866NAV.so","hashes":[{"alg":"SHA-1","content":"a274f0dd41ab68da9f39c742ce961dc47ebb0a8e"},{"alg":"SHA-256","content":"0bbf733a27b600f70654bdb6e291dfa52586a14966516c6a845ce2248dc8b8f9"}]},{"bom-ref":"7872ae3234017ae2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM868.so","hashes":[{"alg":"SHA-1","content":"d7f50f80dd82a7396ca37a15ed34bd9462159859"},{"alg":"SHA-256","content":"33635705237914399c9ca2c9e1983211c312c8baf14b9c102d05eb2cdbd97a33"}]},{"bom-ref":"e5252e864496b833","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM869.so","hashes":[{"alg":"SHA-1","content":"b2d8c14cb89c396db3ccf5efdc87953edc949003"},{"alg":"SHA-256","content":"8c82171b285c9ec971fda62e7a333c017524d1a17c73a7bb9740bb342c56a503"}]},{"bom-ref":"a894b845b7799a51","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM870.so","hashes":[{"alg":"SHA-1","content":"5124a8fb874575bb11cd708ed2ae2535e92edb1e"},{"alg":"SHA-256","content":"9643ebf12f8f7e836ae1e943ab658206b23f821ba9c1deff79b3513621b3d227"}]},{"bom-ref":"8d9a3e70aaf3d2db","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM871.so","hashes":[{"alg":"SHA-1","content":"3f0595e31ca15076a52288a689545f9b9470a116"},{"alg":"SHA-256","content":"640cce1a127516498ff534ea978d42ede7407177e3b9731e6d8c4d6318082f95"}]},{"bom-ref":"547e7541b9518b46","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM874.so","hashes":[{"alg":"SHA-1","content":"cb90df7fc64d2ef0992869e801c41e945ebced10"},{"alg":"SHA-256","content":"e46780da922139e568f1cd5818df0325c5f26ec14b41c04df493ea8b065cad3f"}]},{"bom-ref":"e86cfd3e1ccb4fb6","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM875.so","hashes":[{"alg":"SHA-1","content":"698cef1f83b26746211af0c824a3f396a699a30a"},{"alg":"SHA-256","content":"46cba9b55e0954111b34d5d401d5926930d3528b872ae9bc2fce48a3a0a5d6c6"}]},{"bom-ref":"5e3406f6fb4dab0a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM880.so","hashes":[{"alg":"SHA-1","content":"d0352642dced0ba04cb8441c7ea238d565df33c8"},{"alg":"SHA-256","content":"1389a8ea1dbbaf408eb9053ff84c788cd56073820a2806ac4bfc8f9832f09458"}]},{"bom-ref":"e972a9157b6fa9e3","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM891.so","hashes":[{"alg":"SHA-1","content":"962ce994f068d435911decd9be9296cc40cca3dc"},{"alg":"SHA-256","content":"b93135bb22290722b5e7d56159d8a7a61d3e41e4e21c61bbde12c555ac4b3a2b"}]},{"bom-ref":"2f753132bdf80a82","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM901.so","hashes":[{"alg":"SHA-1","content":"957969ed4461271c89836e740d80223b2d1e31c3"},{"alg":"SHA-256","content":"bb9630564bcd250b6d13ca7b04c2c36c962db865225baa6196df871323408334"}]},{"bom-ref":"b0ad7649075912c3","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM902.so","hashes":[{"alg":"SHA-1","content":"d1347dcf88a75e18c8d9ba8cab27f3ad8feac2fc"},{"alg":"SHA-256","content":"f3fc47360c3dbfa49f5c3d4811b21de35a624aa88d0f4dc3f5864a02eb585f5c"}]},{"bom-ref":"60191dcfc08e432f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM903.so","hashes":[{"alg":"SHA-1","content":"a98c8cf3811aadab0b5bbf83a5d9dfe1ba24b01f"},{"alg":"SHA-256","content":"52b748554c2e1a26417c55b2799d2edf0641d54126cbd0a1179d671eaaece048"}]},{"bom-ref":"b835352d774ff4a9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM9030.so","hashes":[{"alg":"SHA-1","content":"038b99e467cb9b88364d4c482500fdd98d960a76"},{"alg":"SHA-256","content":"26f5f618b7992f5b6c7114e5f17a9abf7a4803c4120e5fdda75099ae7118284e"}]},{"bom-ref":"c4f6dc05aacb8148","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM904.so","hashes":[{"alg":"SHA-1","content":"750a0cba31d0fe609734bd9ecee7a677c5f7fc81"},{"alg":"SHA-256","content":"0054162ecd4c9a5ea0ea2fb7a105e652e347fe4a6eb280e386812e8f75140e49"}]},{"bom-ref":"4f3d977c6992ca20","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM905.so","hashes":[{"alg":"SHA-1","content":"fc95a78266ddb47b946d85b6761e8664555657da"},{"alg":"SHA-256","content":"e8392f6485994593c08726c2a58d860e6de87cf73c8ed1a0c6f0e100f44e6fa1"}]},{"bom-ref":"65a54f2597a81269","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM9066.so","hashes":[{"alg":"SHA-1","content":"40617d497be169ad0750257633a4a0a576d19eaf"},{"alg":"SHA-256","content":"16a8443adbf0daa31175ab319e18845ecd0ebd708d00f86281f5dd437f6da8cb"}]},{"bom-ref":"2e0a7f235097fa3a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM918.so","hashes":[{"alg":"SHA-1","content":"68ca6dbeb090270894bc343fe3d2e5cd0ed1a5a3"},{"alg":"SHA-256","content":"423132a8cd7fb360d0d143bc72d806bbd9b102edfc7009712061dd74a6e89ada"}]},{"bom-ref":"4104ed8649f7d3cc","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM921.so","hashes":[{"alg":"SHA-1","content":"b2c8556fa5c6162f21416693869892974b2a473e"},{"alg":"SHA-256","content":"6d9a254310910e830816cd6c968eae1eda4038b3c5e73de075ee93967f655481"}]},{"bom-ref":"54746e801cdb9e8f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM922.so","hashes":[{"alg":"SHA-1","content":"99c59dad2d3df5f812170105462da1d3229efd2c"},{"alg":"SHA-256","content":"34712307cab7d404392c0e1862095887a3bd3894e1e9b757acdad63d298b6530"}]},{"bom-ref":"a9a0e0f37771ec0a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM930.so","hashes":[{"alg":"SHA-1","content":"a60b7ce4333b07bb544d79cdfcd5789b9a0b2b96"},{"alg":"SHA-256","content":"bfd882554d8b9dcb3223ea80ae3a4cc393f9e2751bd874b63960dfc305150e4e"}]},{"bom-ref":"ed781636a84e1789","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM932.so","hashes":[{"alg":"SHA-1","content":"19a557f4048c65182f915a83401a2228f8c816f8"},{"alg":"SHA-256","content":"a6411594c7431152ea50d7103d0ceac47f599775569e90006b667ac6c03ca589"}]},{"bom-ref":"c9ddcdcb5c166ce3","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM933.so","hashes":[{"alg":"SHA-1","content":"927eadb124913f953d84dbf8c8d0bffb1934e481"},{"alg":"SHA-256","content":"75df00b1876cd4e6c753861598d94b92a70198aed5f32f9d53e15de142a77eef"}]},{"bom-ref":"b36a823666452292","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM935.so","hashes":[{"alg":"SHA-1","content":"7e174af6acd8de9c3794bc126e78020fc626aeb2"},{"alg":"SHA-256","content":"3ec6b44268004a9f4ffc744ad9989ea89fd9c2e793d511e904c7117785f60211"}]},{"bom-ref":"b6210b94224f8dc6","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM937.so","hashes":[{"alg":"SHA-1","content":"fd3a6ca849c12baa73021fc56e48b6d59ea3037f"},{"alg":"SHA-256","content":"3a2e23786f7d24f4f38b7b15e283f6b1349916dc409a766a635cf40a08708742"}]},{"bom-ref":"91d71b8c4ca2869f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM939.so","hashes":[{"alg":"SHA-1","content":"cbaaddd54ea26a11664580547982906e95804438"},{"alg":"SHA-256","content":"c4e652204de387e31d33fc45773e7ec6b6b9d55c4e55fa7a9ef663fe7974adab"}]},{"bom-ref":"10ee37e49682545c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM943.so","hashes":[{"alg":"SHA-1","content":"ce5b548d9be996abe37ec63a6e3c9e594c385823"},{"alg":"SHA-256","content":"daaf2823fe388fb3bead246195498406696edfd66687bc09ad7887ef35360f93"}]},{"bom-ref":"11f7298c3dd3968d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IBM9448.so","hashes":[{"alg":"SHA-1","content":"7fc6a734440387280afe9d9972899764c6f95f8a"},{"alg":"SHA-256","content":"d5d34d753a050bf6cfc5a5b8ad7ebb2817fb61d762f8c04306a6da3271a0a82c"}]},{"bom-ref":"2d11626d72c341d5","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/IEC_P27-1.so","hashes":[{"alg":"SHA-1","content":"cc6ba0fbd0380c5f7fab1762cdfd884d90eff382"},{"alg":"SHA-256","content":"600fbf4991fd6e66d8c347e55ac6aeeb2fce7e37764801eac3f24f429ffc27df"}]},{"bom-ref":"b33955689e3aafe1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/INIS-8.so","hashes":[{"alg":"SHA-1","content":"3f624b0ae39e9f226f034d1a8c67437a215ad7a4"},{"alg":"SHA-256","content":"38685f5e3a6c55d0bec24289617b863c059acb7804fea89380d26c3cd1f85566"}]},{"bom-ref":"d841b64ac723ccf9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/INIS-CYRILLIC.so","hashes":[{"alg":"SHA-1","content":"90cb6d6d0a7d397b54544177d8d826cbe08264ac"},{"alg":"SHA-256","content":"89a1bc042150a9c9ce16af3aee091bb6c973f6054bc7251a56f3ea5dcfb28a75"}]},{"bom-ref":"2cf7375e11a0a895","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/INIS.so","hashes":[{"alg":"SHA-1","content":"c05aefdfb6bfbf3178f392a59bd383d6c68c88de"},{"alg":"SHA-256","content":"c26a1024584b6b4ade773af2572a155f230750c3a4073c63f0fcd841e43d382c"}]},{"bom-ref":"3edb935321561ac9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISIRI-3342.so","hashes":[{"alg":"SHA-1","content":"0840c66e82a7573b6e20fd4910f08f6139bcdaac"},{"alg":"SHA-256","content":"6f614df79bad0db871339453347513cc045c96b2cc3bf212c3267bab987b4885"}]},{"bom-ref":"a2c715f86b55ccba","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-CN-EXT.so","hashes":[{"alg":"SHA-1","content":"4a94c480a503de5c06660cbdd29d7ef7b28857ad"},{"alg":"SHA-256","content":"dee0a1dd6fa5ce9eeccaa05df4b210a9b6b5221c87185904969d8cc947e13ebb"}]},{"bom-ref":"eb4f594cdfae944f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-CN.so","hashes":[{"alg":"SHA-1","content":"be53e162234ffd48ac667512f845b3d2db156261"},{"alg":"SHA-256","content":"1b0dba89519f5909fc22a5a210bcf1dfbea8e0c3309be3f71f69293baf3f0ec9"}]},{"bom-ref":"d1bd1a1778a43093","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-JP-3.so","hashes":[{"alg":"SHA-1","content":"85ac9d3f21f1d0b9b47838233d2f3f6558909af2"},{"alg":"SHA-256","content":"681e7119c8a7f565bb58b15a5596f387da5ffd38c5c3de8898c4775e0771681b"}]},{"bom-ref":"271673f72d660f26","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-JP.so","hashes":[{"alg":"SHA-1","content":"506bda3d9cfa2236a96940c67af71df43e025050"},{"alg":"SHA-256","content":"039590b6ded9c204bb9f30695ff10a5487b01ef4add10beff838d0134eb8f916"}]},{"bom-ref":"eea2156e2161bed5","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-2022-KR.so","hashes":[{"alg":"SHA-1","content":"7fa97bea656e2c518f82368387e29559b3f95d36"},{"alg":"SHA-256","content":"cac0d12fe1f35442058b64a3d5372aae7269d584f71d3b6f08cf68792ac3131e"}]},{"bom-ref":"1e49bee77f46291a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-IR-197.so","hashes":[{"alg":"SHA-1","content":"8335fb6887c0f3e078ae17088d5765a0b4522e46"},{"alg":"SHA-256","content":"09d1ee66f350266cc7bd25ec7b6d31c622342907f2f94cec4c6fb0f1bcb48898"}]},{"bom-ref":"efae51eb28393eb4","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO-IR-209.so","hashes":[{"alg":"SHA-1","content":"e3d8321a9fff1a05feade79010a6c12883a7e317"},{"alg":"SHA-256","content":"bf4e273b333c2619b47e22c2698a82198dbeed5b02ee67b2756ef60baea4ede7"}]},{"bom-ref":"c1a2a749adc5d7c9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO646.so","hashes":[{"alg":"SHA-1","content":"c7478862190db6127300a82debdece60c6c5186a"},{"alg":"SHA-256","content":"9e23c1d546da398c6124c731721de8aaa7f63332a7ce8bee35f6fa7cfe99efdb"}]},{"bom-ref":"f0a3b28ae2eda589","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-1.so","hashes":[{"alg":"SHA-1","content":"a25593ec25ef48b3929fbe92aba50d20e2ec6c09"},{"alg":"SHA-256","content":"bd3a5d2897dec394e22bd6b68efeb4c2264103cbd8a5736a581327d0e73f17cd"}]},{"bom-ref":"2e9413be96d53484","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-10.so","hashes":[{"alg":"SHA-1","content":"2dcbc0690ae2414727fb7dafbb084676a94b42a4"},{"alg":"SHA-256","content":"83837583a01a4d1cca81d382f615caa809d794aa4a9d07ddd44ae99c6b9370f9"}]},{"bom-ref":"7d6724f6c9949762","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-11.so","hashes":[{"alg":"SHA-1","content":"c7c4a9990a8a46905d744cf23587902db02c6057"},{"alg":"SHA-256","content":"c55cce553b8a54aafa4494e6888a517286773b84308be7f30df20d1ddb5a8211"}]},{"bom-ref":"7377cc9ab8fa2d7f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-13.so","hashes":[{"alg":"SHA-1","content":"939342cbd84f5566fde4bb20dd1c7f4333a50383"},{"alg":"SHA-256","content":"2567f89d084589bbfb6d8255f1151b0516accfd884d598ca1a3674c5c739033a"}]},{"bom-ref":"32a5d4d41d601230","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-14.so","hashes":[{"alg":"SHA-1","content":"01c24a929d41955d23bc802f5494765af5e17722"},{"alg":"SHA-256","content":"edb8d671d14e30d9278d3d5a8f4428bd31cd2e083f467df00462cb9a42f591ac"}]},{"bom-ref":"8c588d8b81d733f1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-15.so","hashes":[{"alg":"SHA-1","content":"3269462b4deb515f62ba100054fda9abcd84b82b"},{"alg":"SHA-256","content":"e33d963df18131206668c2fb0eb48dad78a55e14296e805c6b289377eba64b68"}]},{"bom-ref":"129702294ae08279","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-16.so","hashes":[{"alg":"SHA-1","content":"1ddefc665efd4a032384a5fd042a4283f590a4f9"},{"alg":"SHA-256","content":"7b0d95477d119b535bda1bd9986a56ac6cb2c4b88ea109b2b3a95314794159c3"}]},{"bom-ref":"9cbad33f4f949745","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-2.so","hashes":[{"alg":"SHA-1","content":"08be6822226bfd7d4e80e6f13e1f7e01356b2eea"},{"alg":"SHA-256","content":"6ea76cf74aabd4469a9eceabd83aba367a563fcd7ebabc461fb318a60782e536"}]},{"bom-ref":"c0f28d5ecc36ee71","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-3.so","hashes":[{"alg":"SHA-1","content":"4bf8846b397c98fc182b1e9e9b52f8e24904d260"},{"alg":"SHA-256","content":"1a77c57abdbc6daef61c37569f4b08a9e09df0d01649c381ea14f843bd54619e"}]},{"bom-ref":"f47503fe16832ad9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-4.so","hashes":[{"alg":"SHA-1","content":"b6424a614662442708c03e4651086f7dde8d38ff"},{"alg":"SHA-256","content":"adce551366d7bae03fd0a106572d015951781181cbe0d5a80b6325407aecec44"}]},{"bom-ref":"2173cd21ae3a08c1","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-5.so","hashes":[{"alg":"SHA-1","content":"cb9a5b608bc562225cb58c43fd3e8801e0887ab0"},{"alg":"SHA-256","content":"c185984e00a2de8c613b72aa196eb0bbbf70f197476db00533fb685b3507f5b1"}]},{"bom-ref":"d9824b33e00762a8","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-6.so","hashes":[{"alg":"SHA-1","content":"eb1b350f8ac3bb88750c746cf67666ca2ce3a53a"},{"alg":"SHA-256","content":"f1aae4e04dee0de78e950c87adb39405e70075d3346d33ad4db69f478be78c8b"}]},{"bom-ref":"dbb5f89eb4a72745","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-7.so","hashes":[{"alg":"SHA-1","content":"f6603a2a643146844be60dc40752cb7b36d757c0"},{"alg":"SHA-256","content":"2451b75c205f96ae35379cf93c1324dd5ddca344194f0d16e14cf510b063f524"}]},{"bom-ref":"c3c04e17b297a257","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-8.so","hashes":[{"alg":"SHA-1","content":"089a1560d7f571b2273bc22e8f2c93829d1a1813"},{"alg":"SHA-256","content":"73f7a3eab666fed448b338de148fea05e1214fdad5dbee788cc803f878e5484c"}]},{"bom-ref":"a3329ed8be7e716a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-9.so","hashes":[{"alg":"SHA-1","content":"d30d05c0fe91c836c278b85ec92d5a7c47be3d25"},{"alg":"SHA-256","content":"ece79e250dc95004500bdc1fd7552db6627593c1b98f0ae6d03e7a6fa0011ef0"}]},{"bom-ref":"210dc1ea01f342e9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO8859-9E.so","hashes":[{"alg":"SHA-1","content":"a28fa655e06f6544e018c74627394a6e12fa2cba"},{"alg":"SHA-256","content":"f2366c9fb64056f862e43f3ec78a66f295f63a431ccd4259a004d3297d41b5ca"}]},{"bom-ref":"decc9bdf5b46a051","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_10367-BOX.so","hashes":[{"alg":"SHA-1","content":"7673924ef07ae7ea632cf8c00a56d54d195e357d"},{"alg":"SHA-256","content":"19e7385141aa6f139f1af21fd9c0302d07f51a03ffa32ceb68bed27041b2f76e"}]},{"bom-ref":"25de0b5b8f156c7c","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_11548-1.so","hashes":[{"alg":"SHA-1","content":"7022e6502b878969a7b37345863c43a12cf8a9b6"},{"alg":"SHA-256","content":"96eb6375be90383269027cb55995400e812bb2116c4f7fffa27959122ccc1b2a"}]},{"bom-ref":"bd4829375ca72e47","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_2033.so","hashes":[{"alg":"SHA-1","content":"80dc594c9938185d59ecdc7b97bd37afaa9f06ea"},{"alg":"SHA-256","content":"d47fd2626055291b25bf68b50d183c7453b98e0c9bb53cb64769fa24c0248704"}]},{"bom-ref":"61816751a0cb2328","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_5427-EXT.so","hashes":[{"alg":"SHA-1","content":"5c9566d1dcb9045e0ddc68908e9d8549c074fd9b"},{"alg":"SHA-256","content":"e25d71ad4a45cb6215e377c8138e8eb798be324fa950b5ec4f802b52f4a3998f"}]},{"bom-ref":"fdcd21443c4f297d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_5427.so","hashes":[{"alg":"SHA-1","content":"211e9d212cbfc35b3d0c184d73c10bdd1e3bd9c4"},{"alg":"SHA-256","content":"aabdfca942fee3fe040997b9828208ba1996913747a3b9cce61d9771e0ac4713"}]},{"bom-ref":"8b0943d46f8ef4c2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_5428.so","hashes":[{"alg":"SHA-1","content":"b38f520ae65ace0887fd71f52c520edc7f666fb2"},{"alg":"SHA-256","content":"981a8d67d2326b18b320a49d1e25f5bb7851c3d34c3019376e953c279af4ae02"}]},{"bom-ref":"f9af92957406a1cd","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_6937-2.so","hashes":[{"alg":"SHA-1","content":"0e365b5eef44305bd378a3d2727fcdf54109813d"},{"alg":"SHA-256","content":"0274d18b72e0c01d508b2f98ed4b2224893f84a4f2795a6d70408681a6b375a8"}]},{"bom-ref":"8a1c8c3181a793fd","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/ISO_6937.so","hashes":[{"alg":"SHA-1","content":"d9dc2612ac1cf87ef0e20ca0a2a231096c380a06"},{"alg":"SHA-256","content":"23d569dfb25e14b0b8c50e6a0dc503a07f0b5fbf717ae046dfe8f77b135c2243"}]},{"bom-ref":"148ae9d7c1499e21","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/JOHAB.so","hashes":[{"alg":"SHA-1","content":"d7b95ce1e3c69aae15ac3b0e987604a7b9b699a7"},{"alg":"SHA-256","content":"c932cf12abbd1187d434d31aa353135f4234b45032e10dbf3db7e18891fdf5b5"}]},{"bom-ref":"fcae4730bf68f938","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/KOI-8.so","hashes":[{"alg":"SHA-1","content":"4cc2ef2b95187d5f8672d3fd3fe5d0d1fa3e085a"},{"alg":"SHA-256","content":"3eaf326a500955a3fb1ed1c4071bde56e20d371562e770017a227301f3a98212"}]},{"bom-ref":"3e594fa55aa6defa","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/KOI8-R.so","hashes":[{"alg":"SHA-1","content":"f4170776294b7c31200db4e66ee86c2ebd4915ca"},{"alg":"SHA-256","content":"7aeb9eb97ca21aefac0fa48a0e0af622eebcefccef9f995252b0665aa764bac4"}]},{"bom-ref":"a9fbd2e84a5fd00e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/KOI8-RU.so","hashes":[{"alg":"SHA-1","content":"4fe91cbf0955b05fd2b867eb5b035649fc944904"},{"alg":"SHA-256","content":"5dccab01e591c24b17a887a4e37be1523a60cf2bcfc0137973d05ded80c76efc"}]},{"bom-ref":"b9888fa6c8c91b1a","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/KOI8-T.so","hashes":[{"alg":"SHA-1","content":"e1b39fafe2b3900b654c28ced6fcef86598e51a6"},{"alg":"SHA-256","content":"1e20fba3e2d666f881be1fa647235d397c5083bdad4f9815fd0a798c9a650134"}]},{"bom-ref":"27758a8121796213","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/KOI8-U.so","hashes":[{"alg":"SHA-1","content":"4b4ba74d1055db3f5faca4293074327c62822acf"},{"alg":"SHA-256","content":"8414389b319b1175d0b4aafccd5334d9507f53bc8bb2ce2f9ea856b1ffe6cec0"}]},{"bom-ref":"7edf1e11d0929bf9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/LATIN-GREEK-1.so","hashes":[{"alg":"SHA-1","content":"54247a79ec87a8ee7073c4a4d6364a8b6f593bb7"},{"alg":"SHA-256","content":"ad349716e880aca600eacfcda504a66dc480079f4d646d47176ed70d1d3165af"}]},{"bom-ref":"0f2060c45c77ca1b","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/LATIN-GREEK.so","hashes":[{"alg":"SHA-1","content":"d37f31a024beb34cf6405bb733d5fd4f96952bed"},{"alg":"SHA-256","content":"99860e2bae738e1f90a8e6ce784c75498868cdd70aa00b8c05fa63204d3040f7"}]},{"bom-ref":"267170987c998a24","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/MAC-CENTRALEUROPE.so","hashes":[{"alg":"SHA-1","content":"925c676d4dd9f99a2e0e947226afb6d2639907b1"},{"alg":"SHA-256","content":"c6e1b276faa7bb14d89f73f93397e7cf03c48070d665d513d03bb77537b8c3fa"}]},{"bom-ref":"4762a1f04f3b2ee5","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/MAC-IS.so","hashes":[{"alg":"SHA-1","content":"b9c81c872499560e82b3f905048eb9984fed668d"},{"alg":"SHA-256","content":"8310b9333b4ee76392bb35d2138a06dc948a04397e160ee525e8e1bfa98fa59c"}]},{"bom-ref":"0a8c9582fc2250f2","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/MAC-SAMI.so","hashes":[{"alg":"SHA-1","content":"76bd9e2e8aa6673663d361e69ec887cce5ba7d8e"},{"alg":"SHA-256","content":"482da4a53b2cde16de9e753665b01d0b6e9451e163c2b46d52f3f22177414b7f"}]},{"bom-ref":"d860efb50110b315","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/MAC-UK.so","hashes":[{"alg":"SHA-1","content":"e256eb34931bead7038f3768b74cf4de31354455"},{"alg":"SHA-256","content":"ddd7c422e596a0e29a42f800ed5cf17089eadec6e4d6a409d951701bb55f7556"}]},{"bom-ref":"317bb0bb8822d520","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/MACINTOSH.so","hashes":[{"alg":"SHA-1","content":"d4287c37ca97f39be6093ed7a79fbe65f71f60c5"},{"alg":"SHA-256","content":"2dfb6f92f87e2d943d64e616add71e80a24926a913ee66bb55e9f63e81d64dd7"}]},{"bom-ref":"9bf3740398746906","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/MIK.so","hashes":[{"alg":"SHA-1","content":"3e9e2d6499a596ed1d0f33d6a12893bd3060bada"},{"alg":"SHA-256","content":"370306737b4f104476e898d5ed80c5e11cd2558f52c40635686c61804749b3e6"}]},{"bom-ref":"e73bd510ea9a9928","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/NATS-DANO.so","hashes":[{"alg":"SHA-1","content":"c94cac60159790b87e953e312dd7ce348e0e0f10"},{"alg":"SHA-256","content":"f78c8d27e8c051f7b6d305d157df4b80b07bbe9a00d1f185d96233e33896d13b"}]},{"bom-ref":"f985c9cacecbff11","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/NATS-SEFI.so","hashes":[{"alg":"SHA-1","content":"0b48c71742f3c91a6b6cd3ce2efd693baf98e83f"},{"alg":"SHA-256","content":"5251742c02638ea2d76408ad6acbbfc8ea5f9e437d93d0e299051fbfd4735d23"}]},{"bom-ref":"ef18848ac0c6a281","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/PT154.so","hashes":[{"alg":"SHA-1","content":"3b7c5b01b64080bcd5bcffd774d007f5b4de2d9c"},{"alg":"SHA-256","content":"2a235bbff0679d4b763a711cb45b2d36fa0d7c8c43df40ee5036f2fef2561b33"}]},{"bom-ref":"166f281103bc157e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/RK1048.so","hashes":[{"alg":"SHA-1","content":"68a46e6146536da6233b0a85c7fd2449fe1ebbb2"},{"alg":"SHA-256","content":"eaf826bb359d77eed4f6d3f0ef16a7ef611a944c3ed056c82478bdc69e0c0e25"}]},{"bom-ref":"5be340cae91b7cf4","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/SAMI-WS2.so","hashes":[{"alg":"SHA-1","content":"93ffc4cbcc3ad1c6feeeaa41e328410c9d9f6f59"},{"alg":"SHA-256","content":"b782f7be53d9a1b8898a9443cd18d7f7981d77b0be12123fda57555db509ba52"}]},{"bom-ref":"37ed5d31f95de4c3","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/SHIFT_JISX0213.so","hashes":[{"alg":"SHA-1","content":"d18026a3f159449c970b48d472a4649d88779dd1"},{"alg":"SHA-256","content":"739ed9831b4016c4308484671ff9ab72a75178d03cd9eec567e9b6a8b4c2a6be"}]},{"bom-ref":"75c012eda0646f3d","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/SJIS.so","hashes":[{"alg":"SHA-1","content":"713ad7d24a4fefcc3d1ae7b3516ac14374216f18"},{"alg":"SHA-256","content":"67b6ed87d9a6a8431895d27e21cea2af006229ae93920267566e6bfc0bad9928"}]},{"bom-ref":"b6b1585356bedafc","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/T.61.so","hashes":[{"alg":"SHA-1","content":"06d736d824e9242fb7fb5e4e91f4abcdc1537730"},{"alg":"SHA-256","content":"8b98f3579a50fd1198ea6b13f6eeff194a555e990ec44c2aedc7472087615b0c"}]},{"bom-ref":"b39b3462c7ed8647","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/TCVN5712-1.so","hashes":[{"alg":"SHA-1","content":"20d857b2035085c6fd6d41a70783d9ed56f339bd"},{"alg":"SHA-256","content":"f89b2b4dd127fc82047e3d71ea38cf57abf99c6ea2c2c12ed0691d4c8b770f4f"}]},{"bom-ref":"4ef3acdff1d3373f","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/TIS-620.so","hashes":[{"alg":"SHA-1","content":"27707ee6aa84ba32d91a46069258af25c7bd203c"},{"alg":"SHA-256","content":"74e52b3f5b19a52de340536d3b9bf7827de9d905ef52b634a84448a96aae6627"}]},{"bom-ref":"0284126bc8d7a9fe","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/TSCII.so","hashes":[{"alg":"SHA-1","content":"0fe47ec87e0ba9ab87a77f9d04d14502daf1cb26"},{"alg":"SHA-256","content":"9e3a9087b114ac3d9dfe77aeebdedb7c8e1ba964ad21d536c0b92fb9c75e24b8"}]},{"bom-ref":"ece5d4239c6c61a6","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/UHC.so","hashes":[{"alg":"SHA-1","content":"6b56aa9df3c28d3c6a1e53eca7b4e63f11ff0279"},{"alg":"SHA-256","content":"80e7c9e820a0b1017b7d0365cd0f039bb01aa3af6918720bc5d5cdbeb68bf1f1"}]},{"bom-ref":"3769db2065042d04","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/UNICODE.so","hashes":[{"alg":"SHA-1","content":"071e86a0822ee9a15a91ed8eccdd322ed0ffea7a"},{"alg":"SHA-256","content":"77f78e859196641934994f33afd3053c463a2a199dcd8277ff40caae67b43b47"}]},{"bom-ref":"5a0aa770d4223538","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/UTF-16.so","hashes":[{"alg":"SHA-1","content":"d95e49459bd88528aaf85071307c8fc2f655d03e"},{"alg":"SHA-256","content":"228f673f221b51f0eb761dd614d14f23ae451c96eb1697c7819935664f20fc55"}]},{"bom-ref":"f92f0b1e4b11fcc6","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/UTF-32.so","hashes":[{"alg":"SHA-1","content":"6f08c73097b212a47b1153b71febd447a02744d8"},{"alg":"SHA-256","content":"faa4963c8ffad1c04bd4759f90d622f7cc53de4ca0cf8b2b9da2f449b6ddda7c"}]},{"bom-ref":"0550cfae129a8980","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/UTF-7.so","hashes":[{"alg":"SHA-1","content":"78f997c89fb2194a235120acdd084a6da8565b91"},{"alg":"SHA-256","content":"e8098db5d7cbdc416b6f3de95b873cfbcf0bed12f557b2bcbba05a3da6aa26d3"}]},{"bom-ref":"f5053ec10b024de9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/VISCII.so","hashes":[{"alg":"SHA-1","content":"35597ab26d22a4eb7d31c069e2fe257bd3056da4"},{"alg":"SHA-256","content":"1b1a40aefdb1273539a6168c2b1b676beca4789de58a59342f09360f16ea03aa"}]},{"bom-ref":"5b4f20cb85f7f5ae","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/gconv-modules","hashes":[{"alg":"SHA-1","content":"df58fc83a379e5325c5615b78da32ee67a374933"},{"alg":"SHA-256","content":"ca370833ebc1ec0283a3e6b66cea63d5b1d2e118272e963d2a25c891564aa89d"}]},{"bom-ref":"b2cd200e11b8448b","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/gconv-modules.cache","hashes":[{"alg":"SHA-1","content":"a56d4cca508e06928b6658fb38eb92d4e4420ca1"},{"alg":"SHA-256","content":"c4c52c0df6f3809f1b85927a85f322d102cffebb6b517b44b37048f6fd620c01"}]},{"bom-ref":"7106c9c71c0c10be","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/gconv-modules.d/gconv-modules-extra.conf","hashes":[{"alg":"SHA-1","content":"d06dfc489784aa2b0bd5b19d9e0113fa394fa98e"},{"alg":"SHA-256","content":"efd92404c912b44689b96e311c2d827944c54df21f1509985d122495bda6f9aa"}]},{"bom-ref":"798d0c45fa2caaac","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/libCNS.so","hashes":[{"alg":"SHA-1","content":"460a9e6395b94338e11e36fa3a5e15aeee3b9759"},{"alg":"SHA-256","content":"4230689e522b220aa9b5a711ee886a8938894ddb7cdbcc1cc10416ff6012229d"}]},{"bom-ref":"2fddc886386423b6","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/libGB.so","hashes":[{"alg":"SHA-1","content":"cafda02108f75862fb5e09e9650a23fdb44c5a00"},{"alg":"SHA-256","content":"816573cf2a67625e848e2e591dbc8a2d91932cc8f0ed91c6cea3d69904632c36"}]},{"bom-ref":"f3fca3cf39830378","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/libISOIR165.so","hashes":[{"alg":"SHA-1","content":"79e773f46d5e51a863f3be2d2931bf7aca4d241c"},{"alg":"SHA-256","content":"5afc13bcdfeb5ef1e674d397336fe3ad8a992c2cc598e5cfa328f1301ce260a9"}]},{"bom-ref":"e2c4fa36d856f9e9","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/libJIS.so","hashes":[{"alg":"SHA-1","content":"dd24a03ca4dc2ea4f5b00e1124226edd08259d7d"},{"alg":"SHA-256","content":"403a91f35f0acc5d60f4839e29b2452c9b62f4ed7b3911b957f04214d2ac9b77"}]},{"bom-ref":"6e28372650cab48e","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/libJISX0213.so","hashes":[{"alg":"SHA-1","content":"cab87e6eac39a759bbbbf9a75f592904cde8ac15"},{"alg":"SHA-256","content":"f05ac3f7f6d8ad126f7e169f9b94b46a45642677e8aa5ef34da3b1c960a03c9d"}]},{"bom-ref":"a67697a4121295c6","type":"file","name":"/usr/lib/aarch64-linux-gnu/gconv/libKSC.so","hashes":[{"alg":"SHA-1","content":"4ebe017edc0f786552f75e702d38f8d172828395"},{"alg":"SHA-256","content":"e7e64156c1ce06e12a5d423d7940ecce0e36cc2b459d376c6f16b65c6704c4c0"}]},{"bom-ref":"d627c66d22ae6aaa","type":"file","name":"/usr/lib/aarch64-linux-gnu/ld-linux-aarch64.so.1","hashes":[{"alg":"SHA-1","content":"670471f8a6476d7036fbfce1ca2e6d89478b0b1c"},{"alg":"SHA-256","content":"52a8dc3663b1068c45fb325ad32134a11764973785eee99cb2ee84aa62b7b0f1"}]},{"bom-ref":"4b7fd80a95db218a","type":"file","name":"/usr/lib/aarch64-linux-gnu/libBrokenLocale.so.1","hashes":[{"alg":"SHA-1","content":"fd3dca93c02617a1cbb78c7e622bdba0d0968960"},{"alg":"SHA-256","content":"fc1c314e4f687ce4c5f81d3d83a2138d3ffaf523ad196cdb3e24308542bb4b5d"}]},{"bom-ref":"11de5a0be3ffe31c","type":"file","name":"/usr/lib/aarch64-linux-gnu/libanl.so.1","hashes":[{"alg":"SHA-1","content":"5692b52082463619810a50530f0a3b3f0d7f6dab"},{"alg":"SHA-256","content":"76adaed6c3d615135dd2ec39a80b1636d7baf745afa3ee77f4fc7a04efe948b2"}]},{"bom-ref":"ab66c2e0602ae218","type":"file","name":"/usr/lib/aarch64-linux-gnu/libc.so.6","hashes":[{"alg":"SHA-1","content":"02585efed5261192916b8fdfa106a1f9bec1ee37"},{"alg":"SHA-256","content":"53ccedf551e22a6935fab85293ed22590b3c0d0d413c6f73878eb3acc7b08eff"}]},{"bom-ref":"ab2193e3bd4929d9","type":"file","name":"/usr/lib/aarch64-linux-gnu/libc_malloc_debug.so.0","hashes":[{"alg":"SHA-1","content":"87c68b30377a2a845495815a00a355b6c3b6dad0"},{"alg":"SHA-256","content":"1ea6f14a46b4252c35fb3aaa2a69ce07d4c6b0d884794792aaf055fa1ea4dea9"}]},{"bom-ref":"f9c30f556f8c07f2","type":"file","name":"/usr/lib/aarch64-linux-gnu/libdl.so.2","hashes":[{"alg":"SHA-1","content":"02437a2a4df73420071c463e3e192da87882301b"},{"alg":"SHA-256","content":"8023ba7cb6ecabb57d1910ecd24ce347cba5653d1b547d9c7950301ed59716ca"}]},{"bom-ref":"344732bd6d666735","type":"file","name":"/usr/lib/aarch64-linux-gnu/libm.so.6","hashes":[{"alg":"SHA-1","content":"f598059acab63450c575e1c450c740389da5f1a6"},{"alg":"SHA-256","content":"a8afb2d1f4a0c5e14c0fc82f794ec839eafe29738907aa92895410f57630bbe2"}]},{"bom-ref":"386b3df3273bfdca","type":"file","name":"/usr/lib/aarch64-linux-gnu/libmemusage.so","hashes":[{"alg":"SHA-1","content":"d79b3890164d6ee0f5fbf441c5c4b9453ab59287"},{"alg":"SHA-256","content":"74a3f43ba04f63f626ad6a6aa5cd5051ae16fa33d2aeca993e6617ebe062ba61"}]},{"bom-ref":"b00b604b389ab7a2","type":"file","name":"/usr/lib/aarch64-linux-gnu/libmvec.so.1","hashes":[{"alg":"SHA-1","content":"4fc699c6e78af8245b22c11e4bdb3211a356fd08"},{"alg":"SHA-256","content":"56a0c6ff299d2961dc75e94161164aef4721f490ee8bdb23c27ea806e1f1f13f"}]},{"bom-ref":"393ff7f47b371919","type":"file","name":"/usr/lib/aarch64-linux-gnu/libnsl.so.1","hashes":[{"alg":"SHA-1","content":"9da7734939fa344ec1b3778a15a4e8f3e6f87748"},{"alg":"SHA-256","content":"e86e41cfd758953005042ba1d63f4ef8bf7695135b9670e0c1036e37e084a063"}]},{"bom-ref":"019ae2147299a81c","type":"file","name":"/usr/lib/aarch64-linux-gnu/libnss_compat.so.2","hashes":[{"alg":"SHA-1","content":"89945dc27258819c96b2e8d1a1405296e28ef0ec"},{"alg":"SHA-256","content":"592b029a3e03e8f7357205a49dede7af16c7ed6a63afbd7a1d1f994e743294cd"}]},{"bom-ref":"064f12a5929c0043","type":"file","name":"/usr/lib/aarch64-linux-gnu/libnss_dns.so.2","hashes":[{"alg":"SHA-1","content":"e3fe9caf7fff4a15cbdbbff5b80e7926bc4b729a"},{"alg":"SHA-256","content":"a69d397ca7b354e1e954ce87cbb046c06a62d8042721f90d6d9ef47773af2e7d"}]},{"bom-ref":"9a6483b5f0b480e1","type":"file","name":"/usr/lib/aarch64-linux-gnu/libnss_files.so.2","hashes":[{"alg":"SHA-1","content":"d257a599e184ba794f6ea6c1dfea64668612b880"},{"alg":"SHA-256","content":"5dff3521fe00ea802ff94f4285f35e9038f52fc80ba4906db068392cb4eff272"}]},{"bom-ref":"2c5b8e710fb53246","type":"file","name":"/usr/lib/aarch64-linux-gnu/libnss_hesiod.so.2","hashes":[{"alg":"SHA-1","content":"f5475406d3dd13cf0ba26863599c2443942b0744"},{"alg":"SHA-256","content":"8bc817883c329674e0223ad88a9fb92a365a7f816121b01803bb4bd606b07ef1"}]},{"bom-ref":"72c3052eda868287","type":"file","name":"/usr/lib/aarch64-linux-gnu/libpcprofile.so","hashes":[{"alg":"SHA-1","content":"bba852730e6f5cc5c143ebb389e36d127899a4e2"},{"alg":"SHA-256","content":"8348f90859edb4c1b4a41582418583c9b320168cd909d0184ca257bd32dec76f"}]},{"bom-ref":"17c3d72f74f15899","type":"file","name":"/usr/lib/aarch64-linux-gnu/libpthread.so.0","hashes":[{"alg":"SHA-1","content":"bbd82185ba9c1d90c9e809c85245918da140a8ca"},{"alg":"SHA-256","content":"b4f0bcbb029e42861545757592356a490d87ef42cfa8a7f2d4295846e42698b5"}]},{"bom-ref":"c217473a1aeae8d3","type":"file","name":"/usr/lib/aarch64-linux-gnu/libresolv.so.2","hashes":[{"alg":"SHA-1","content":"1088d0c1f5e82ddef9a32fd7de5a0543740558a5"},{"alg":"SHA-256","content":"cb9756963306434c0fbe3351ded4041a5cc6e6ce37efc175de1093e13b3747fc"}]},{"bom-ref":"ebaa2202fd49cebc","type":"file","name":"/usr/lib/aarch64-linux-gnu/librt.so.1","hashes":[{"alg":"SHA-1","content":"b3a28064671569edcf2bb7764a4472d1330fccc0"},{"alg":"SHA-256","content":"a4b07c4b8bf45da4ec97170e6cd15097c42af1f94124a9ab251551a9a0a79556"}]},{"bom-ref":"f87c9636440a7640","type":"file","name":"/usr/lib/aarch64-linux-gnu/libthread_db.so.1","hashes":[{"alg":"SHA-1","content":"1c7d853ccecec734a9a614c9b41ed2b411576366"},{"alg":"SHA-256","content":"8bbc54f7f7ee348e1bdb2423d847f1f4f34c219d7f348587cb90ae8f9cbf2630"}]},{"bom-ref":"32b943204d4edc92","type":"file","name":"/usr/lib/aarch64-linux-gnu/libutil.so.1","hashes":[{"alg":"SHA-1","content":"69f02e8bc6602c60371a7dae5db6d96648f03ea9"},{"alg":"SHA-256","content":"7a9ee1e1a208b3721b1cacc5c68beb8f03c588cc270da5842af0c2de368d5354"}]},{"bom-ref":"580c59ce4832e049","type":"file","name":"/usr/share/doc/libc6/NEWS.Debian.gz","hashes":[{"alg":"SHA-1","content":"86762439ebfca233c0ac382b8d0891f39de70bf7"},{"alg":"SHA-256","content":"f410947e3ddd98dbdf630b23ce93a014f09a79789c7c1319fe511241bceb8826"}]},{"bom-ref":"438e32721c62f1cf","type":"file","name":"/usr/share/doc/libc6/NEWS.gz","hashes":[{"alg":"SHA-1","content":"4930e1685fb5058c571f5151d0b8b985ef2bc23c"},{"alg":"SHA-256","content":"c4124e2ca1ee602b27e1275cb5c1ce905d8018a48f5fe96d40933426ae26e126"}]},{"bom-ref":"002223c9314f9a6c","type":"file","name":"/usr/share/doc/libc6/README.Debian.gz","hashes":[{"alg":"SHA-1","content":"6f97553bcf63fd634f55c095c7d320fc5710a527"},{"alg":"SHA-256","content":"103388d45c31c59534c3c71378dd532a69d90b6fa0618cf41cdc123613d463ac"}]},{"bom-ref":"9699ddec402b013e","type":"file","name":"/usr/share/doc/libc6/README.hesiod.gz","hashes":[{"alg":"SHA-1","content":"995889e16580609ff355e7dbf26d72685e4dc727"},{"alg":"SHA-256","content":"13e364163184406285935cea0fd0555aba252dc92e85ef72988c4c7e7617a0cb"}]},{"bom-ref":"7aac32fabfadcfb8","type":"file","name":"/usr/share/doc/libc6/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"2f66b2acec23662b3fb470afe50a494f7e0c30d4"},{"alg":"SHA-256","content":"2766740ffa0728506485e74f4c1ba493c664c3f26bda9810beac69da0f2a9a5c"}]},{"bom-ref":"378a4194eba5ca04","type":"file","name":"/usr/share/doc/libc6/changelog.gz","hashes":[{"alg":"SHA-1","content":"f7ae4398742b7f55ccc4b70211ab3a1c7dc7c2de"},{"alg":"SHA-256","content":"b66db2deaee0257c5a456c17ee3058e014b51d596466b8454da17936a38d7e88"}]},{"bom-ref":"2717fe7e4250478f","type":"file","name":"/usr/share/doc/libc6/copyright","hashes":[{"alg":"SHA-1","content":"5db687e636814b9460f1a0cb1e52d41d4003af7d"},{"alg":"SHA-256","content":"f5788886720a2605a946e81d571e6c8162b09f58d2e2ceb8d36e5768fccd850d"}]},{"bom-ref":"e201cbcfcb8021f8","type":"file","name":"/usr/share/lintian/overrides/libc6","hashes":[{"alg":"SHA-1","content":"1bc0f013a68bdf7f31f5bb556506d098ddbc4b2e"},{"alg":"SHA-256","content":"0897b1b340b6588f122f63908fb930a292c0b533de1ccaa588ae4b9aa0927b2b"}]},{"bom-ref":"6ea3097207c48717","type":"file","name":"/var/lib/dpkg/status.d/libc6","hashes":[{"alg":"SHA-1","content":"5943bb057661e612cfc905a90eb479e09191fb84"},{"alg":"SHA-256","content":"293fb6b1052f1ddb34e91bfc1469cb7e4e78daa862f32e988d1949011cd3cdd6"}]},{"bom-ref":"5ce411518af94caf","type":"file","name":"/var/lib/dpkg/status.d/libc6.md5sums","hashes":[{"alg":"SHA-1","content":"aa08d832ba313bc39c44cbc7b5836fa97b57714b"},{"alg":"SHA-256","content":"20116dc6824a0e4071e3f510f092cceb40eef36623a40e555741d96065bb1a95"}]},{"bom-ref":"c3a7af91384f314b","type":"file","name":"/usr/lib/aarch64-linux-gnu/engines-3/afalg.so","hashes":[{"alg":"SHA-1","content":"0ddb413fc807ae21c2f3659ced13f133fe263b1d"},{"alg":"SHA-256","content":"6d583e599cb34fa24f7c51dafdc2ed1d3096d1387a3e5fa1ed5190519f4236ed"}]},{"bom-ref":"01e6a9b5ca3c5580","type":"file","name":"/usr/lib/aarch64-linux-gnu/engines-3/loader_attic.so","hashes":[{"alg":"SHA-1","content":"e68372a4c72f9c562f358baab64c1bea22d27fba"},{"alg":"SHA-256","content":"4843c07df7601a915db34e94011d73a766cb8d01d054fa969b9377231f053b2c"}]},{"bom-ref":"a486122fc3a90125","type":"file","name":"/usr/lib/aarch64-linux-gnu/libcrypto.so.3","hashes":[{"alg":"SHA-1","content":"3292dbbaacb5ee6f15eaa6b09d1476817dd52d53"},{"alg":"SHA-256","content":"ff12f533992752a7d1f626154b497bbf12d44e875571aa2681da63cf425aaa52"}]},{"bom-ref":"2fadf9a6ae4a3652","type":"file","name":"/usr/lib/aarch64-linux-gnu/libssl.so.3","hashes":[{"alg":"SHA-1","content":"b0198e73aa4d12a392330be8d54040c46f205499"},{"alg":"SHA-256","content":"ae8b21d13ce4031c3c43dbbc969cd1255d3366d89372aeedf1ebf801a3f44556"}]},{"bom-ref":"584956605d92fedb","type":"file","name":"/usr/share/doc/libssl3t64/NEWS.Debian.gz","hashes":[{"alg":"SHA-1","content":"b249adec42f79c7e0f21f718397bfeb85a1ff70c"},{"alg":"SHA-256","content":"89f06e9c3b0b0a2d956552ef2ce2107a3c0a8caf2ed0d655f7fdb26ea16ca579"}]},{"bom-ref":"f548172f71647587","type":"file","name":"/usr/share/doc/libssl3t64/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"af1ad64eb48dbb8f56bebbd72cbe95218e59bf84"},{"alg":"SHA-256","content":"4ee7a6042a6f138cd1702345c9641d018e1b5a43217c49ef1f4cadce26416173"}]},{"bom-ref":"9e529509cc4a0342","type":"file","name":"/usr/share/doc/libssl3t64/changelog.gz","hashes":[{"alg":"SHA-1","content":"79b42b3712b1b8b62bc45eb864d20531845fe2da"},{"alg":"SHA-256","content":"96f254358e813735c69a887d3c8c68cec900a3f89e0d64edaeae8230a3c776b0"}]},{"bom-ref":"05299976d90c066d","type":"file","name":"/usr/share/doc/libssl3t64/copyright","hashes":[{"alg":"SHA-1","content":"b936c38070ff5b477030a02e903cc7cbc1f1f11e"},{"alg":"SHA-256","content":"6a7da622fe0637a334d2a8fc470852d2ffb77d9a2b2f930f854e32a41ad6ef35"}]},{"bom-ref":"22ff34765ac581b1","type":"file","name":"/usr/share/lintian/overrides/libssl3t64","hashes":[{"alg":"SHA-1","content":"b67bf31f583d19da3df4935b9caffbef07b532ae"},{"alg":"SHA-256","content":"418ab624307a41fdee3c70f79632449caad9b6407c2d63ad06443a80852622c4"}]},{"bom-ref":"3a17e5f4d320b505","type":"file","name":"/var/lib/dpkg/status.d/libssl3t64","hashes":[{"alg":"SHA-1","content":"9d109f79b9b099ac0d16b5fd0395841c9937b142"},{"alg":"SHA-256","content":"272c517b818100724817a62806f604e1b8b0fe683be534d08337dba11229412f"}]},{"bom-ref":"86f6b509e3a7935e","type":"file","name":"/var/lib/dpkg/status.d/libssl3t64.md5sums","hashes":[{"alg":"SHA-1","content":"3bac632972e2d949d10949a0a0706826c866ae26"},{"alg":"SHA-256","content":"de2693c2ad022b00a12d2393569bb5168bf45506c56b447efcfda5887222bc71"}]},{"bom-ref":"be31a8964d558904","type":"file","name":"/usr/lib/aarch64-linux-gnu/libzstd.so.1.5.7","hashes":[{"alg":"SHA-1","content":"10d640924669e4de449e4a1bbb22f1e91639492e"},{"alg":"SHA-256","content":"1279c4edfbfb08878b5b7fb40d392c1bdc9b30100d9b7a019d4aefaf10d2046c"}]},{"bom-ref":"7b4834f384973e53","type":"file","name":"/usr/share/doc/libzstd1/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"3d44a83a2aeffb44818feecd891ae35875ba6730"},{"alg":"SHA-256","content":"7b0d4a55026eb5dfbccbb2ebeac75db9f848679958f6b50ac94192d35e424c75"}]},{"bom-ref":"bbb23c59205efbef","type":"file","name":"/usr/share/doc/libzstd1/changelog.gz","hashes":[{"alg":"SHA-1","content":"fde4ce44e9d7377107624a9a73b2dd6e83d71d39"},{"alg":"SHA-256","content":"9d9bc4945d1802ffe12cca4e3c5013839550cf95cfc53ddeaa0280827d45fc6f"}]},{"bom-ref":"047c23c6b57e419f","type":"file","name":"/usr/share/doc/libzstd1/copyright","hashes":[{"alg":"SHA-1","content":"30af3496fe86a55c6df5011d609261cc1029432c"},{"alg":"SHA-256","content":"5cec9fef4d3fa7e0371fbef4ec3fc416e0105dc2a9922117f84e825cb11f50f8"}]},{"bom-ref":"747169d76f8aff7e","type":"file","name":"/var/lib/dpkg/status.d/libzstd1","hashes":[{"alg":"SHA-1","content":"3cb5106c668d6d3ea5710d7e627995a904aea70d"},{"alg":"SHA-256","content":"3aa7fa6699ab7bc778a3d931d570a48553f4f3aebcd7db5255557c2c27a9390b"}]},{"bom-ref":"4446d836a626fa28","type":"file","name":"/var/lib/dpkg/status.d/libzstd1.md5sums","hashes":[{"alg":"SHA-1","content":"46d195e73d50a5009e0c59269be844f7720aaa3d"},{"alg":"SHA-256","content":"0fe95cccf4c2ae34cad9be0f11cca08eb9f7bda2c918816988fa8806be9d4e93"}]},{"bom-ref":"0f8a401d5c8388c3","type":"file","name":"/usr/lib/aarch64-linux-gnu/libz.so.1.3.1","hashes":[{"alg":"SHA-1","content":"f92ec5fa1ecd354add3ac3874bfbbc2b43a536ac"},{"alg":"SHA-256","content":"6fe00acadf8119ff245855e5dcc7f26c6c0ffaf4bfa2baa88feab58f23727d65"}]},{"bom-ref":"5e8b1122b2f23ef0","type":"file","name":"/usr/share/doc/zlib1g/changelog.Debian.arm64.gz","hashes":[{"alg":"SHA-1","content":"ed70a95f411ac38b3d52693f378d10433e93f0ce"},{"alg":"SHA-256","content":"06a1cd9ca7015657943b00a0a38ef646e27a6db031f78d2e5d933ec3abfdb718"}]},{"bom-ref":"e9b9a96372e6db80","type":"file","name":"/usr/share/doc/zlib1g/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"3b564752876bb5dce5fbf27c7ff3b4f447895194"},{"alg":"SHA-256","content":"c631c3743056aea5d6c114efc27fc9f53f32a75d3f33767f4d244746e8fa153a"}]},{"bom-ref":"4c30dec3f7559dc3","type":"file","name":"/usr/share/doc/zlib1g/changelog.gz","hashes":[{"alg":"SHA-1","content":"60d8261f9115e426a2af462431702458a9009155"},{"alg":"SHA-256","content":"a697e1cefca8aa7ad377a5a46b941f7ccb8c15686d781f74c923c7ecf46afd5b"}]},{"bom-ref":"c9fa127244f02e15","type":"file","name":"/usr/share/doc/zlib1g/copyright","hashes":[{"alg":"SHA-1","content":"27c676ac10db9b80a5287200d6810e34edbfa201"},{"alg":"SHA-256","content":"9e5b96d63773a5d177ba264254390f792be07e41748ebd94730981c6cac31cc6"}]},{"bom-ref":"71f0489bfff4d181","type":"file","name":"/var/lib/dpkg/status.d/zlib1g","hashes":[{"alg":"SHA-1","content":"d78c3a04bfbbd82a17288bba00069691b00b9e47"},{"alg":"SHA-256","content":"291c96ee5aaa09ada55e367cc7a847da2f5351b2219f93b8735ecf4ce57fc6a3"}]},{"bom-ref":"6534cac23e59297f","type":"file","name":"/var/lib/dpkg/status.d/zlib1g.md5sums","hashes":[{"alg":"SHA-1","content":"d8c298a346ba07edda13c9e11ace7dfb653cb388"},{"alg":"SHA-256","content":"617805d119f4aab94e57059a06a7d498d4517da55ca2bfd8bbdf0e4780a72fb8"}]},{"bom-ref":"bedc2454f8343082","type":"file","name":"/usr/lib/aarch64-linux-gnu/libgomp.so.1.0.0","hashes":[{"alg":"SHA-1","content":"62aef2435af87944fc085f8bde59db163ef4f5e6"},{"alg":"SHA-256","content":"a2286e5fa0f7601afdfae2a750536f409bc8c3cc5b0bb9e93a4afc5c3779a510"}]},{"bom-ref":"ed3d6ad3e22afc26","type":"file","name":"/var/lib/dpkg/status.d/libgomp1","hashes":[{"alg":"SHA-1","content":"c6e0e80029da337ae45b85ddb9f07453d13c4619"},{"alg":"SHA-256","content":"b30cd089e46d5aa4363157ee67194f58ecdc0f2583ff521f7bc59112ff52f826"}]},{"bom-ref":"1c2118839e0404af","type":"file","name":"/var/lib/dpkg/status.d/libgomp1.md5sums","hashes":[{"alg":"SHA-1","content":"13edc65fdf9669b83f957b3dc05079671c74da84"},{"alg":"SHA-256","content":"d089967b53fdde90aa0025f164fb3f02dc26a21df7ede9510df34ed973588fc5"}]},{"bom-ref":"9866e937b1fba9f2","type":"file","name":"/usr/lib/aarch64-linux-gnu/libstdc++.so.6.0.33","hashes":[{"alg":"SHA-1","content":"d1aaaad742567fa74224616105ee0dc96c0dba27"},{"alg":"SHA-256","content":"fff1f0050a33ddf29c44634c7639ac16e2573a61e3daab4fcc4c007b432ccf19"}]},{"bom-ref":"f9bb8e895255e611","type":"file","name":"/usr/share/gcc/python/libstdcxx/__init__.py","hashes":[{"alg":"SHA-1","content":"adc83b19e793491b1c6ea0fd8b46cd9f32e592fc"},{"alg":"SHA-256","content":"01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b"}]},{"bom-ref":"919a1bdd6661b7d2","type":"file","name":"/usr/share/gcc/python/libstdcxx/v6/__init__.py","hashes":[{"alg":"SHA-1","content":"07debee3b247ac4fbf776e891d74b95bb932d8f8"},{"alg":"SHA-256","content":"88b4b04c123fd76e303ad47a8b74034552a28e0c65eac77685afeb738037337a"}]},{"bom-ref":"c2ca252db3e88c62","type":"file","name":"/usr/share/gcc/python/libstdcxx/v6/printers.py","hashes":[{"alg":"SHA-1","content":"f445b74e2eeec3add07388c39373819e4bdfb265"},{"alg":"SHA-256","content":"96a9c8547fe0e7291fc0dbe8c481f84c95b03c0dba4780d18d21a70b91d2df5b"}]},{"bom-ref":"ddb2356f920f1e49","type":"file","name":"/usr/share/gcc/python/libstdcxx/v6/xmethods.py","hashes":[{"alg":"SHA-1","content":"bb7f9f3e2b1fa0625a9f89d09125c873cce30e6e"},{"alg":"SHA-256","content":"75e4daa102d918a9b2b1f6ccd0a11881e9f079d7da074e56f0fd3c1937b5fb6b"}]},{"bom-ref":"4fd6b83f9e6443d5","type":"file","name":"/usr/share/gdb/auto-load/usr/lib/aarch64-linux-gnu/libstdc++.so.6.0.33-gdb.py","hashes":[{"alg":"SHA-1","content":"3b4b86252332a29e32ed118ce1494435ca758833"},{"alg":"SHA-256","content":"392e28361977fd0d2ce0e8627a71587810ed146a4955b317df7f2ba3d0cce3e8"}]},{"bom-ref":"a3bc4ee825abd176","type":"file","name":"/var/lib/dpkg/status.d/libstdc++6","hashes":[{"alg":"SHA-1","content":"4e679eaf38ac2cd637a017e3253421428fd8762b"},{"alg":"SHA-256","content":"1a9b70cb06a828f9ffea9c9329c71f69701982223c9a9ea713a35af59484fd2f"}]},{"bom-ref":"7da8cda7d719817f","type":"file","name":"/var/lib/dpkg/status.d/libstdc++6.md5sums","hashes":[{"alg":"SHA-1","content":"72e0ad07f6beab2db8da9d5e807bae1be31863d0"},{"alg":"SHA-256","content":"58a76f387630725be73c3f6076a4cbcec106ee3eb3cc54747a4a4d9da3d35351"}]},{"bom-ref":"3cc39bd1e5ee0258","type":"file","name":"/usr/lib/aarch64-linux-gnu/libgcc_s.so.1","hashes":[{"alg":"SHA-1","content":"52e81ef4558e3693d76b6c06978c9ea1faa78e31"},{"alg":"SHA-256","content":"9a146967dc38c3820c5dc21c3209812655f66b6551264072b187bd0e787947e0"}]},{"bom-ref":"344badc429bb7895","type":"file","name":"/usr/share/lintian/overrides/libgcc-s1","hashes":[{"alg":"SHA-1","content":"6a437a448c534d9b9fff0b406a7569308b81f73d"},{"alg":"SHA-256","content":"eed87afa7d83880a25ae5a41ba9d98d89a1fc2e2e3bba0f4d5c3cdda21a457a4"}]},{"bom-ref":"7994cb3f4d47e6fb","type":"file","name":"/var/lib/dpkg/status.d/libgcc-s1","hashes":[{"alg":"SHA-1","content":"6c2af94c4a873496d721c8f9aded9a4630afa97a"},{"alg":"SHA-256","content":"3acca2dc69993457f7b4fa66d1e059335bef033472fa6b7fbd97bef88d9b8362"}]},{"bom-ref":"b3b9154501c96f88","type":"file","name":"/var/lib/dpkg/status.d/libgcc-s1.md5sums","hashes":[{"alg":"SHA-1","content":"22b20b28dabb9514e24ef5295ecfac02e65dd4d0"},{"alg":"SHA-256","content":"2ff73bb867856f54cd6492ecae4178b22de4db498a3691ef6c12c846d335ef87"}]},{"bom-ref":"17d27299c79cbf94","type":"file","name":"/usr/share/doc/gcc-14-base/README.Debian.arm64.gz","hashes":[{"alg":"SHA-1","content":"8b57d6f55d51253125fd4928aa3b0b92ac8f6c84"},{"alg":"SHA-256","content":"d3231c5267f2095b57011b80cdacf3169bcc9bac472bf032bdb59195eecd70a7"}]},{"bom-ref":"08ec27df460862db","type":"file","name":"/usr/share/doc/gcc-14-base/TODO.Debian","hashes":[{"alg":"SHA-1","content":"98cf44e59ce96c1e737613d13cdc8944060cd662"},{"alg":"SHA-256","content":"aba726eeeafd7ae426552559759c83ee93249d0d9c4e3e19f146fde6d2cde448"}]},{"bom-ref":"799de7ec0f9ec4be","type":"file","name":"/usr/share/doc/gcc-14-base/changelog.Debian.gz","hashes":[{"alg":"SHA-1","content":"afd297c5dd437b68cb230719db98df094ac02b18"},{"alg":"SHA-256","content":"96566a2df70b85708bd8edf8a41c5dc87eca402199f2480df23abe4be4a92757"}]},{"bom-ref":"51635ffd453907dc","type":"file","name":"/usr/share/doc/gcc-14-base/copyright","hashes":[{"alg":"SHA-1","content":"2891df267ea14e7723fb2bdd705858679660fd97"},{"alg":"SHA-256","content":"20390f8a6f3b1e4d7cb45dd8652dabb259bbef688cbad839bcdb0b9ba7252f79"}]},{"bom-ref":"e2b0f68ce753b089","type":"file","name":"/var/lib/dpkg/status.d/gcc-14-base","hashes":[{"alg":"SHA-1","content":"f84f36a84a149d5b1a70301e6a6f802b0bdd3d34"},{"alg":"SHA-256","content":"74f23a7441b165dcf42a8c6736f12d6eda1288287e0ace3f84249c2e4ae4a9cb"}]},{"bom-ref":"37d59165441372d5","type":"file","name":"/var/lib/dpkg/status.d/gcc-14-base.md5sums","hashes":[{"alg":"SHA-1","content":"beeb1f9d22579b4697b2bcf592b4b138002d256d"},{"alg":"SHA-256","content":"757887e78c73a7fc16578e96e336bf8157eb2ebf07582d59306cb32ad7d371f6"}]},{"bom-ref":"06647fdebf7faae4","type":"file","name":"/nodejs/bin/node","hashes":[{"alg":"SHA-1","content":"825b74be8d7d3b293bf3ba18780f70568df01f3e"},{"alg":"SHA-256","content":"d0b9f94a9771bba3c30a54f0aee622fa0bee37be684cc1df6da2d3448606d98d"}]},{"bom-ref":"e4324f791c95116a","type":"file","name":"/juice-shop/build/package.json","hashes":[{"alg":"SHA-1","content":"9ad576c8901f4b6894aa994f4db0015fc845ff22"},{"alg":"SHA-256","content":"2c19a523f81507522144bdebe6ddaf6165812e6c4a657efd48f64320ae8367c0"}]},{"bom-ref":"e15a24b4fc6c7f1a","type":"file","name":"/juice-shop/frontend/package.json","hashes":[{"alg":"SHA-1","content":"272f84f582f7ee72700a9ceac4094bc22fc681f4"},{"alg":"SHA-256","content":"94f162f916c9329de4e002d7bcad8e53694c92ec3e97a6c7286c7f0c3dfc37da"}]},{"bom-ref":"11a14efc018c13e3","type":"file","name":"/juice-shop/node_modules/@adraffy/ens-normalize/package.json","hashes":[{"alg":"SHA-1","content":"b4b51cee01a8bfd426a63712cf29e2c60ca79c71"},{"alg":"SHA-256","content":"9cdfe2227ce61c1a701da4e62ca73f6fdce1fce6f076015c18d420efb8c7c833"}]},{"bom-ref":"65d6d5df0fec3242","type":"file","name":"/juice-shop/node_modules/@ai-sdk/gateway/package.json","hashes":[{"alg":"SHA-1","content":"879925e27cf9cbdf8e408d63df9d1043d1c90d6f"},{"alg":"SHA-256","content":"74a5fafcf0d6cdbab041f12727214b50f7860f303fb6b44829b36053aa3a699c"}]},{"bom-ref":"05adb410819c1aa6","type":"file","name":"/juice-shop/node_modules/@ai-sdk/openai-compatible/package.json","hashes":[{"alg":"SHA-1","content":"1677d0330028fff0c5c1f622080360f1aa4eefc1"},{"alg":"SHA-256","content":"04fc0d170834025d8bb1a1e7ae915b740644301700c1ba37e3de9042426ff066"}]},{"bom-ref":"f5ed58f7f2f653d1","type":"file","name":"/juice-shop/node_modules/@ai-sdk/provider-utils/package.json","hashes":[{"alg":"SHA-1","content":"6eef84e1a97bf27c284928bfd1335dba7f5fc2dd"},{"alg":"SHA-256","content":"7a36dab5baf983cfc9b8c73bd8f38f484c70847a3878356e06910981703d65e4"}]},{"bom-ref":"1403a4b36a2f579e","type":"file","name":"/juice-shop/node_modules/@ai-sdk/provider/package.json","hashes":[{"alg":"SHA-1","content":"ddf7ff73e95991c3745f512dbeadf9660653e207"},{"alg":"SHA-256","content":"b68e8fcbec4e0d780607b0ad5a2baefafcaa41416ab5056b7d1b829a5e58c503"}]},{"bom-ref":"00b4707bdeb934af","type":"file","name":"/juice-shop/node_modules/@babel/helper-string-parser/package.json","hashes":[{"alg":"SHA-1","content":"f02c656ee72f28316f9cb9641fc95fbdab02a2c4"},{"alg":"SHA-256","content":"2ed21f6ba1c3ad4b49e247fc9b6bc3274ac7160613879f4fd6e770a53d976d8f"}]},{"bom-ref":"9cb4863ab8bde929","type":"file","name":"/juice-shop/node_modules/@babel/helper-validator-identifier/package.json","hashes":[{"alg":"SHA-1","content":"fd051f4e7b0ff3b42f8e109da06e98bfd66a0bdf"},{"alg":"SHA-256","content":"716eb3e9a849686b727f4c6fefb8aa48c2740ce18685cc8c73922be0e08b11df"}]},{"bom-ref":"a26f713566ed7c9c","type":"file","name":"/juice-shop/node_modules/@babel/parser/package.json","hashes":[{"alg":"SHA-1","content":"d5838c6a5931d227997296dd2b918066488a464e"},{"alg":"SHA-256","content":"989bf032e3fd9714dcbc85bfcb012314ba674f789cf5aa2fd6ac3bd46401df91"}]},{"bom-ref":"cbd09883ed889111","type":"file","name":"/juice-shop/node_modules/@babel/types/package.json","hashes":[{"alg":"SHA-1","content":"453aef876044b751d304e1d39199679dead5f8c4"},{"alg":"SHA-256","content":"3c3c04e2170a1015f2108af564b5602f0962a437a03dd3bc19782bcf77476b20"}]},{"bom-ref":"89418097f15ab52a","type":"file","name":"/juice-shop/node_modules/@dabh/diagnostics/package.json","hashes":[{"alg":"SHA-1","content":"d1c351ca94e65e029133dc4a45c98b008896f355"},{"alg":"SHA-256","content":"407f69c7a7f98cd50fb9fab358706493c5c07e6c56cb90cc0825fef280e04ab6"}]},{"bom-ref":"eb4768a17dd59cca","type":"file","name":"/juice-shop/node_modules/@fontsource/roboto/package.json","hashes":[{"alg":"SHA-1","content":"9aff3b16e32119d59106920948bb2c103930fe0d"},{"alg":"SHA-256","content":"225f588d35e158c34229edbb25c0f3829315cbd80ff8e7f21520cdb9f731c754"}]},{"bom-ref":"01309be88653daf6","type":"file","name":"/juice-shop/node_modules/@gar/promisify/package.json","hashes":[{"alg":"SHA-1","content":"02e977a876bd7e3217381e7ba9d2cb07f379d274"},{"alg":"SHA-256","content":"dca651c9d8bb01b3691f5c6e2ad4be9ead2b031c27fd9d545c8d4f546917c6d5"}]},{"bom-ref":"d4e1bfc50fd41907","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"ce200865f7a4839de6213072c7986484139c50b1"},{"alg":"SHA-256","content":"a58f1d6dbaca116f4aaa83906a0a992da2303a07ca920b2ce877573988eae352"}]},{"bom-ref":"6821c2709ec23e19","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/emoji-regex/package.json","hashes":[{"alg":"SHA-1","content":"238c48183550d02ab5c0dd37e13d57006dce640a"},{"alg":"SHA-256","content":"181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a"}]},{"bom-ref":"d437c292bdb11617","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"53ae7a1b3953e86624927fec8421d453d9c88e41"},{"alg":"SHA-256","content":"adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659"}]},{"bom-ref":"07870adc216d8fff","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"6c109cf2dd51ea9d89ed05e64161782df7559477"},{"alg":"SHA-256","content":"228b214dd06ca80ab3c36e2b890a8696a39cea65585f6d61498c922c615e18a0"}]},{"bom-ref":"2d4fb9d2efbc465c","type":"file","name":"/juice-shop/node_modules/@isaacs/cliui/package.json","hashes":[{"alg":"SHA-1","content":"5f8f4c1e3bf1144f3a52c51bf040d843bb2a8b90"},{"alg":"SHA-256","content":"b4f9cc8d09602a487dea1c227ce24777cda87e2ad8a29ab9f741214ab78dc065"}]},{"bom-ref":"3e8e037e5687f9f3","type":"file","name":"/juice-shop/node_modules/@isaacs/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"504edba0a95630e08edf150335c2fe914825fc5a"},{"alg":"SHA-256","content":"ab8c1c2bce664e4c76b1937fa1a28f00ca5231a70cf0c1f78dd473101a9d2a88"}]},{"bom-ref":"5139798267f31862","type":"file","name":"/juice-shop/node_modules/@material/material-color-utilities/package.json","hashes":[{"alg":"SHA-1","content":"1a6e7aa5519862989bf58eb3a85aef278dd677f7"},{"alg":"SHA-256","content":"bc6d0c72745cef5488b2eaecb191eb5b8b91036d21e5c35985fe9f5069c683a4"}]},{"bom-ref":"a0986a1f81c958c8","type":"file","name":"/juice-shop/node_modules/@noble/curves/package.json","hashes":[{"alg":"SHA-1","content":"0fd9f24eefe764a426a907c1f677dd70068dfcc3"},{"alg":"SHA-256","content":"bf61194229da9a7fd331fcf44cc24f746b5cbaefe941a312215376584c269bd5"}]},{"bom-ref":"be74d376a8381aef","type":"file","name":"/juice-shop/node_modules/@noble/hashes/package.json","hashes":[{"alg":"SHA-1","content":"696457a8c87f5f6da7f2844a140e72f84b782b8c"},{"alg":"SHA-256","content":"8d8203c66e91a9e6ee510facf378a2c7420b27139360132a257010c2e5f091bc"}]},{"bom-ref":"04ab6e68e242cdb2","type":"file","name":"/juice-shop/node_modules/@npmcli/agent/package.json","hashes":[{"alg":"SHA-1","content":"ca472993ec88d2b98a488f843d480575f24092f7"},{"alg":"SHA-256","content":"d67f4edf03680423c43434e3b28902feec2a136da2e85355034b174ba286828b"}]},{"bom-ref":"7c929de1f6232bbd","type":"file","name":"/juice-shop/node_modules/@npmcli/fs/package.json","hashes":[{"alg":"SHA-1","content":"cf0302511d637d6a1f8b5e49b3d9b42210c7b8f0"},{"alg":"SHA-256","content":"028cce261f1b1840efa893492a88911e0f4832e29b46ae0dd38eb6ba5ae85856"}]},{"bom-ref":"8a42156d4d3e863f","type":"file","name":"/juice-shop/node_modules/@npmcli/move-file/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"83be0799f38c9ee0","type":"file","name":"/juice-shop/node_modules/@npmcli/move-file/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"46da394a85c88f3288e19ccd89c03174e1360c52"},{"alg":"SHA-256","content":"a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2"}]},{"bom-ref":"74ee59758df84c7d","type":"file","name":"/juice-shop/node_modules/@npmcli/move-file/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"ed8ec0789d4558ea2492b653fd0be9f16b90020d"},{"alg":"SHA-256","content":"fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c"}]},{"bom-ref":"39395ac9714d9bff","type":"file","name":"/juice-shop/node_modules/@npmcli/move-file/package.json","hashes":[{"alg":"SHA-1","content":"5d957f7d5bfb7d98d91c207e0d0a2471fbdef3a4"},{"alg":"SHA-256","content":"8fe75d037af2bfe77e1e675a77015f3522a2fdaf0a638907c9a925ee507e9e90"}]},{"bom-ref":"cc9b6c94b253b5ee","type":"file","name":"/juice-shop/node_modules/@opentelemetry/api/package.json","hashes":[{"alg":"SHA-1","content":"757db9254518b8ae5b5d6c5492c524410ff00196"},{"alg":"SHA-256","content":"c0d7c72331bc8cd456dd791f2f429ddafa1d0b5b8abeb4104e6deb12f18b4a86"}]},{"bom-ref":"59339b15f092de70","type":"file","name":"/juice-shop/node_modules/@otplib/core/package.json","hashes":[{"alg":"SHA-1","content":"2b604ed4b65e5f82e69aa436ff70a119eed8cb75"},{"alg":"SHA-256","content":"3e5dead41ab9ac095b3be44ae6e0c37f5ae831636cfce1abdb56ce0c57e41a8b"}]},{"bom-ref":"50bff2cd01476b55","type":"file","name":"/juice-shop/node_modules/@otplib/hotp/package.json","hashes":[{"alg":"SHA-1","content":"501e485e1d0a89be763043557f4083b3f72c3d5a"},{"alg":"SHA-256","content":"7b477349c8cc2bf83f5f593e15c26f48e9d12a4490d42994db5acacf8abb3acc"}]},{"bom-ref":"7dad14dde6f6bcbc","type":"file","name":"/juice-shop/node_modules/@otplib/plugin-base32-scure/package.json","hashes":[{"alg":"SHA-1","content":"82855112525f4ab2b940e2281a9fbb6e9b96febd"},{"alg":"SHA-256","content":"e6205d670f1a1210ad004c915ab689536179ddfd667d93fb5d304087aef96564"}]},{"bom-ref":"b8384915141e471d","type":"file","name":"/juice-shop/node_modules/@otplib/plugin-crypto-noble/node_modules/@noble/hashes/package.json","hashes":[{"alg":"SHA-1","content":"0186cd2ad6472c0d911913d93c60f35fd62d6e0b"},{"alg":"SHA-256","content":"df2580ed1896b0deffc07437c6a8d83fcf233e4c4c1e77c12e491563222c4719"}]},{"bom-ref":"7d73fb24c4164cab","type":"file","name":"/juice-shop/node_modules/@otplib/plugin-crypto-noble/package.json","hashes":[{"alg":"SHA-1","content":"0f9c4699286df76536177a6ca6967cd92456c68e"},{"alg":"SHA-256","content":"5baca1740e78d476073ff1731b99e35b0611c12c494c06dfff1d4278e3c5d90c"}]},{"bom-ref":"9a5096ad979ddec6","type":"file","name":"/juice-shop/node_modules/@otplib/totp/package.json","hashes":[{"alg":"SHA-1","content":"658b331371efdd4be9c8012ed7441575a7236abb"},{"alg":"SHA-256","content":"10892f195500ea44311121979ac424f38d31972ec1a69ab762980eb1a0a13050"}]},{"bom-ref":"f1c4b8374352dfa2","type":"file","name":"/juice-shop/node_modules/@otplib/uri/package.json","hashes":[{"alg":"SHA-1","content":"70638d409ca6d13f8cd6adda67a4661446741dbf"},{"alg":"SHA-256","content":"f66b3957f6e0fc8c5a04fd52262416d778696cce44df144a90f6ae19216850ec"}]},{"bom-ref":"6922ca6851e37f1c","type":"file","name":"/juice-shop/node_modules/@pkgjs/parseargs/package.json","hashes":[{"alg":"SHA-1","content":"0dd3949ab9157869b8d3387f50a149bca2638d73"},{"alg":"SHA-256","content":"c52af8cea1efc18fc306336d6ade5a1d8d9ccd8916a5d2246bc585a92635901e"}]},{"bom-ref":"6fbd6e20077457fa","type":"file","name":"/juice-shop/node_modules/@scarf/scarf/package.json","hashes":[{"alg":"SHA-1","content":"1d33fb93dace20b12286fb4b7f1682646af3f82b"},{"alg":"SHA-256","content":"f19876be1dc7b05cb55fb3ab06c20cc0ac87769287b3aad6cca50660a4b314fd"}]},{"bom-ref":"7e0c73f269bafa47","type":"file","name":"/juice-shop/node_modules/@scure/base/package.json","hashes":[{"alg":"SHA-1","content":"9fc2af29fd8cc0d1358820a4fa5a88d1626c9037"},{"alg":"SHA-256","content":"cfdeaaeafd8ebfb6b380e39348d755654363980b42903de26a5d70e5c5f68498"}]},{"bom-ref":"794555372a1cbcd1","type":"file","name":"/juice-shop/node_modules/@sindresorhus/is/package.json","hashes":[{"alg":"SHA-1","content":"8ea4d75fb2542edc23ac23515566932977d948a5"},{"alg":"SHA-256","content":"55307d8c3e660374d48940083df93fd8f3a865eaff6bc34b5e5e455be718d439"}]},{"bom-ref":"1adaad9e5e9ef147","type":"file","name":"/juice-shop/node_modules/@so-ric/colorspace/package.json","hashes":[{"alg":"SHA-1","content":"bf076b63871ce44c3a145305715ab0a0c4278bc7"},{"alg":"SHA-256","content":"86b3cce52cb2f3418fb1bd20578fd194de861d9e5ad7d9348bc577a71bf03100"}]},{"bom-ref":"cacf44e90e635796","type":"file","name":"/juice-shop/node_modules/@standard-schema/spec/package.json","hashes":[{"alg":"SHA-1","content":"ef122360f134701af5258c890c303eb6f487f92f"},{"alg":"SHA-256","content":"58e5bd75ddd0684c88b07cd799585cc72a37fd6efb8ab0c936d49e230d5164fb"}]},{"bom-ref":"cc6100bca3db1027","type":"file","name":"/juice-shop/node_modules/@swc/helpers/package.json","hashes":[{"alg":"SHA-1","content":"05c138187e3e03162e3013e7f2f13fc18c0c2fff"},{"alg":"SHA-256","content":"135140ae9edbdeafd3bd5e9c369a6828820f74ab2ce66c78a54743814da12282"}]},{"bom-ref":"7bf6c093c5d14495","type":"file","name":"/juice-shop/node_modules/@tokenizer/token/package.json","hashes":[{"alg":"SHA-1","content":"1a93635fac9b224d4d9cec1fadb28b3086d283ee"},{"alg":"SHA-256","content":"a677763aaed22462b4f9df2526b1038cef3a90bc6cf80be27b4e65d0f14472a9"}]},{"bom-ref":"2f222dec5fc60ff2","type":"file","name":"/juice-shop/node_modules/@tootallnate/once/package.json","hashes":[{"alg":"SHA-1","content":"ae912343fcf0eccd8a5f754a72bf2e9eea63a176"},{"alg":"SHA-256","content":"91391dee2904a0bb0de498cc0a41e020338d671a4c85f5bcafa15dde73eb26fe"}]},{"bom-ref":"eae57c9d26e35036","type":"file","name":"/juice-shop/node_modules/@types/component-emitter/package.json","hashes":[{"alg":"SHA-1","content":"ccdbee7ccc3f57a596e334aadea037c5c1447b36"},{"alg":"SHA-256","content":"ad6d8f6ce55d30e47af416a460b07e27d39c8d953356dd708f8333984328ac24"}]},{"bom-ref":"be6d75fe5d4ea56c","type":"file","name":"/juice-shop/node_modules/@types/cookie/package.json","hashes":[{"alg":"SHA-1","content":"9a6923a33ab098b02ad284c092970aeb6b4e0f91"},{"alg":"SHA-256","content":"e71f9bef0642169c02de9e503e801f58aa259c58bbe51451a6ed618424f4048f"}]},{"bom-ref":"9417fb823002eea7","type":"file","name":"/juice-shop/node_modules/@types/cors/package.json","hashes":[{"alg":"SHA-1","content":"e40b9fa3d6c69bb63b0f8c946c073b445acf32b0"},{"alg":"SHA-256","content":"668eaf9685f07c43881b376ddf4fccf6d1896c0e46e528b0a32c383e15237271"}]},{"bom-ref":"43656c768b1e35cd","type":"file","name":"/juice-shop/node_modules/@types/debug/package.json","hashes":[{"alg":"SHA-1","content":"e327bb983e50e3857d539486a379ad0d6a8a3967"},{"alg":"SHA-256","content":"3593dbd35512e263c1a4ed9e30545e7f8ffb2f7efabc4e536dddc0868be4e872"}]},{"bom-ref":"fb20d523732d839e","type":"file","name":"/juice-shop/node_modules/@types/ms/package.json","hashes":[{"alg":"SHA-1","content":"2c98c18c958411b8b7fe5b181770ff00346947af"},{"alg":"SHA-256","content":"bbd8f5322ea82216e826e522a6a4ec2ed3086b57a25234d0044673eb374b8e2d"}]},{"bom-ref":"2ed78110c9df7608","type":"file","name":"/juice-shop/node_modules/@types/node/package.json","hashes":[{"alg":"SHA-1","content":"7787cbe72d49a1174ccabc243e7859843a2aa817"},{"alg":"SHA-256","content":"e6b573ab97177c4d783cc85bd1c369d374ef242f461e8c0264c58327ef1653ca"}]},{"bom-ref":"c9d4efee8527c6af","type":"file","name":"/juice-shop/node_modules/@types/triple-beam/package.json","hashes":[{"alg":"SHA-1","content":"c8ff7e60bf9d5507804b6906a5e020081e5f68f4"},{"alg":"SHA-256","content":"c8ed1c5130fb111dfad72c99a414eeb10a3171be8076aca86307b4d80c9ca079"}]},{"bom-ref":"5566c5ef0f2d78d2","type":"file","name":"/juice-shop/node_modules/@types/validator/package.json","hashes":[{"alg":"SHA-1","content":"36a07478450a7244efc8318bcdd5c3363dbcebdd"},{"alg":"SHA-256","content":"40e18e86a1328233729a4b46b2d636ff9ce4a0144123e27dee851d5ef9f4e460"}]},{"bom-ref":"ea4eca02cb9841be","type":"file","name":"/juice-shop/node_modules/@vercel/oidc/package.json","hashes":[{"alg":"SHA-1","content":"3994d0ee8f9579a315dfe2198e4e5563cd5cdb8b"},{"alg":"SHA-256","content":"989edf56a27f7fc414d6718aad5d5d69e83f14ef14eaacd2b3e59b47a67a51b5"}]},{"bom-ref":"10f7528bb7d6f51c","type":"file","name":"/juice-shop/node_modules/abbrev/package.json","hashes":[{"alg":"SHA-1","content":"bfc3606e605421f81936c77f156694df03ea1f55"},{"alg":"SHA-256","content":"5bcbdff71c063d5177f25fd3a5c7a6c2a9d565d968765ee3a1e73449dc0bc671"}]},{"bom-ref":"69c7d253a56524f3","type":"file","name":"/juice-shop/node_modules/abort-controller/package.json","hashes":[{"alg":"SHA-1","content":"1919f0e7e241c60fff52bdd87df08ceee790ba05"},{"alg":"SHA-256","content":"3d64dcdcf9d0a1d045eb6bcaa5013d486f15527a3668e64b1155839a797da164"}]},{"bom-ref":"4b5992f5fea424ad","type":"file","name":"/juice-shop/node_modules/accepts/node_modules/negotiator/package.json","hashes":[{"alg":"SHA-1","content":"3c1b22e6ecae04b514912326957e6a205b015098"},{"alg":"SHA-256","content":"8672e91f7395ce51ec789d883d7f7d872a40847bb83a6a3f89c3d1ded39e55d9"}]},{"bom-ref":"6b9ce693503c3bd9","type":"file","name":"/juice-shop/node_modules/accepts/package.json","hashes":[{"alg":"SHA-1","content":"131ba4d63747e6663a9c19409e43ac034bd532cf"},{"alg":"SHA-256","content":"e5716d5d939db08c5c28ec6ae86ed67be5320f91089e2673fca1c5b876e57aa3"}]},{"bom-ref":"388f5efc7eff115e","type":"file","name":"/juice-shop/node_modules/aes-js/package.json","hashes":[{"alg":"SHA-1","content":"02af0ae260ec880f2595635440d69184dd3ae979"},{"alg":"SHA-256","content":"60fc352466697ba86743b36101b2157cf413ac0e7d317788548993600f10cd7d"}]},{"bom-ref":"531bac5ac0808031","type":"file","name":"/juice-shop/node_modules/agent-base/package.json","hashes":[{"alg":"SHA-1","content":"126adbedcff6faa6826eca63c75e9193237ab10b"},{"alg":"SHA-256","content":"7a08cb2fe1d2b788e0a7bf6a9b7597dbeeeae804698c2fbd15de786d284d327c"}]},{"bom-ref":"bb293d70e322e077","type":"file","name":"/juice-shop/node_modules/agentkeepalive/package.json","hashes":[{"alg":"SHA-1","content":"56d77987880ed3be6c5c0a6370f7fcfa1dc2cb58"},{"alg":"SHA-256","content":"8bdeeb4c6f66678c3a97b2fbc3a0c93b9e03dc021e85145859e1c72be7526822"}]},{"bom-ref":"8e47c714bdb22be0","type":"file","name":"/juice-shop/node_modules/aggregate-error/package.json","hashes":[{"alg":"SHA-1","content":"1a2aa44c34e2912cc96c75d0f1c2865a23a5e6f8"},{"alg":"SHA-256","content":"903137f787b80f82cdd11659b386966fa716be537e81fe9d474ef04ea0918f26"}]},{"bom-ref":"b31ad5251d1f594e","type":"file","name":"/juice-shop/node_modules/ai/package.json","hashes":[{"alg":"SHA-1","content":"aaa4507d92144a156d8c6c97c5e91e45913d8350"},{"alg":"SHA-256","content":"d0a1d23f6547b777a0fdabce6c92bcaff7fb5db463235d8b2b814da7bb389d99"}]},{"bom-ref":"e47c5bd870e5b43c","type":"file","name":"/juice-shop/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"f1b78e043012e1ab5689d57377093e88f1400677"},{"alg":"SHA-256","content":"8b2dc166f2b74d5098bad38bdd3dd2f4d4775c626199872f5e36dbb48c40931d"}]},{"bom-ref":"0ea041a38219a5cb","type":"file","name":"/juice-shop/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"2abbe25af4f77cdc6986e0a6b14e9088aa6d3d93"},{"alg":"SHA-256","content":"8a015c815240c949222d5f474721b5888dd9413fccbbd91ab552bac134317f76"}]},{"bom-ref":"5e75288224be73a0","type":"file","name":"/juice-shop/node_modules/append-field/package.json","hashes":[{"alg":"SHA-1","content":"0c83d1d2369a3dac3edce107c0e7ca22f5d853c3"},{"alg":"SHA-256","content":"e8af240292f03363891c9fbb252d78dfcba4a4cba574d30aace32341d2fe7a22"}]},{"bom-ref":"3ad0d6891edfd77c","type":"file","name":"/juice-shop/node_modules/aproba/package.json","hashes":[{"alg":"SHA-1","content":"a705c382734b6694d6c98a8825d7b38d905cad58"},{"alg":"SHA-256","content":"6dcea0602535f88458b2e93b4dcad98451fdf1ee5dd5cbe8538cad12c3379068"}]},{"bom-ref":"129a66102f936600","type":"file","name":"/juice-shop/node_modules/archive-type/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"3e30390a94384a39e4b46e8d55ea92f4a68f19c5"},{"alg":"SHA-256","content":"731f325f6221bea8b2168c6f207296f9bcfc88f4f3189f38ac126ad663feb671"}]},{"bom-ref":"2dc3923723ce69ea","type":"file","name":"/juice-shop/node_modules/archive-type/package.json","hashes":[{"alg":"SHA-1","content":"4ba4289c5ce1187cbb36a9debbea25356b9bc864"},{"alg":"SHA-256","content":"0f1d1cab9005aad5785c5544a117accf97bd896243131ebe6eb74b0a5600fe1a"}]},{"bom-ref":"73fa7431a10ddc55","type":"file","name":"/juice-shop/node_modules/archiver-utils/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"e9d95d7ae899322c","type":"file","name":"/juice-shop/node_modules/archiver-utils/package.json","hashes":[{"alg":"SHA-1","content":"b87a5196d43a0b967228fe8975640cf4eb50970e"},{"alg":"SHA-256","content":"dcf66f1fe9ce29bdcaf6b866e878365b8b1ebe76cab20149511529679c847ca1"}]},{"bom-ref":"29b551e4cf5f51c2","type":"file","name":"/juice-shop/node_modules/archiver/node_modules/async/package.json","hashes":[{"alg":"SHA-1","content":"5da55b9a896c8eed5f30013777ffbc8181bdfa67"},{"alg":"SHA-256","content":"180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1"}]},{"bom-ref":"670c381f9c93c77c","type":"file","name":"/juice-shop/node_modules/archiver/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"98807851ad6b1731","type":"file","name":"/juice-shop/node_modules/archiver/package.json","hashes":[{"alg":"SHA-1","content":"66e8510aed54598ae1c823c8fee5f5a328374dee"},{"alg":"SHA-256","content":"b64c234b963198bceb01078344022ed411c86b1239d58aa84ef93a2f143b5289"}]},{"bom-ref":"7b20bd365983cefe","type":"file","name":"/juice-shop/node_modules/are-we-there-yet/package.json","hashes":[{"alg":"SHA-1","content":"03e43bddeaf901ecbd2f1d09ee3f1efdfdd7da61"},{"alg":"SHA-256","content":"a68108794c8c3b8c1806785cbaa94dd8a338907bd4676d2b54a4216edfa73b56"}]},{"bom-ref":"75250c45d458759f","type":"file","name":"/juice-shop/node_modules/argparse/node_modules/sprintf-js/package.json","hashes":[{"alg":"SHA-1","content":"dee1e26f14c8468e2e42814a439315ce89ee517a"},{"alg":"SHA-256","content":"f7ed5a0dc9b4c939e92be6acdf3bd83abc3d7e5def9c1307f3c9f53bd7cb2f8c"}]},{"bom-ref":"92bcbd1d6e952f4c","type":"file","name":"/juice-shop/node_modules/argparse/package.json","hashes":[{"alg":"SHA-1","content":"98f9959fac3c999adf8991e2a4ac3c874c93f00f"},{"alg":"SHA-256","content":"48b848e56c31eda738f76fb8573ae1fe0012c4b1ec9d9cfe8783517a142e9531"}]},{"bom-ref":"c7fb288c7965acda","type":"file","name":"/juice-shop/node_modules/array-buffer-byte-length/package.json","hashes":[{"alg":"SHA-1","content":"79c934e5f793f408bf9e7d6cdae3b00479c8f882"},{"alg":"SHA-256","content":"477d1c0349dfbe051b3bc99b289a8360570264a1731f73e3c594ed8b9a3b6252"}]},{"bom-ref":"c559248b18567f45","type":"file","name":"/juice-shop/node_modules/array-each/package.json","hashes":[{"alg":"SHA-1","content":"ee5fd48cb545b4345405c98bbfa05dbbc9ae1623"},{"alg":"SHA-256","content":"55d0a75c82606adf64ec0f98d93db3920a4f3c882a253c10ec58b519c336e72e"}]},{"bom-ref":"a4e671febf3e6523","type":"file","name":"/juice-shop/node_modules/array-flatten/package.json","hashes":[{"alg":"SHA-1","content":"fc51b89d0fb7cc640a0495baa4005364e83718c3"},{"alg":"SHA-256","content":"5c5e0e10cfa23f163d1fe68aa57a881d09cac39d720e1361c697b86c4d33e0f5"}]},{"bom-ref":"6f820baad3e87eda","type":"file","name":"/juice-shop/node_modules/array-slice/package.json","hashes":[{"alg":"SHA-1","content":"498e1b0981039be5c67000ecb466f0b4ba520bd9"},{"alg":"SHA-256","content":"456b16091f29b8d2343819f68f2dc4f890bd234cd9a2e27b30e28990663b076f"}]},{"bom-ref":"94ab408cca768436","type":"file","name":"/juice-shop/node_modules/asap/package.json","hashes":[{"alg":"SHA-1","content":"c768bb58495d19e1d5d195d3f212204714c7378d"},{"alg":"SHA-256","content":"f69d11cfb6add01ac63fce2a47e0b4596d667d8f43d89853ac27aab06a9fcf28"}]},{"bom-ref":"525d2394e0255eb8","type":"file","name":"/juice-shop/node_modules/assert-never/package.json","hashes":[{"alg":"SHA-1","content":"a38c1ee73c79bb5548e0119f2df68a26b6839439"},{"alg":"SHA-256","content":"ab906b2a34e8f397a6006e587f5d716d24ebb58cd82eec36cb4e3476c500f78b"}]},{"bom-ref":"9bc2879ca1738c1c","type":"file","name":"/juice-shop/node_modules/async/package.json","hashes":[{"alg":"SHA-1","content":"edef722d2ef943350b398c9c11b1fc4e2e4928f5"},{"alg":"SHA-256","content":"e010fe63aa861e8a60fb8b9d3e7fb5205e3b8d6001ebe3ff95985996abe581a9"}]},{"bom-ref":"9826cc1cb6b4e6dd","type":"file","name":"/juice-shop/node_modules/at-least-node/package.json","hashes":[{"alg":"SHA-1","content":"9271d65ae400dff5e800ae6f031d1bf6f58252c6"},{"alg":"SHA-256","content":"cf26ac7a79b89eed8c70f7ee8b5195ed925f535b7c52577b9034702e7117fbc5"}]},{"bom-ref":"5a358e1553103b29","type":"file","name":"/juice-shop/node_modules/available-typed-arrays/package.json","hashes":[{"alg":"SHA-1","content":"13e400badea570dca072b1116d9dbc627c94c4f8"},{"alg":"SHA-256","content":"ffce2bbb0b85b9a20bcc674e4c78307ead42af0299e1d28a9dfb249566e0a319"}]},{"bom-ref":"126f3ec2ebb9909f","type":"file","name":"/juice-shop/node_modules/babel-walk/package.json","hashes":[{"alg":"SHA-1","content":"f10c8c76a7c340e00bc91168a1ff049dbad7d173"},{"alg":"SHA-256","content":"1549b64069d6ae24d7d91a466204624ab1509f12abb7924b6e0b603323d34d87"}]},{"bom-ref":"dbf5ea33735fa806","type":"file","name":"/juice-shop/node_modules/balanced-match/package.json","hashes":[{"alg":"SHA-1","content":"ef0a0d2fd68c3396309ab54ab08c5f8d362436ea"},{"alg":"SHA-256","content":"b30c328501dead1870b894ad604405b2284b571c1f12664cdc61d92a2e3397c2"}]},{"bom-ref":"5c6b81297885fecf","type":"file","name":"/juice-shop/node_modules/base64-arraybuffer/package.json","hashes":[{"alg":"SHA-1","content":"1853ae06931a67b3eb8bb76c801ac258966ff74e"},{"alg":"SHA-256","content":"c137a784510ece7d3b9b1d4de59c55a0594b1ed51b30c9581e8279cb705b0286"}]},{"bom-ref":"372cf503143a2853","type":"file","name":"/juice-shop/node_modules/base64-js/package.json","hashes":[{"alg":"SHA-1","content":"e17d74f1f7f0fa4bca8ba3a2cff79b34f64718ea"},{"alg":"SHA-256","content":"9758f3ab8c45e07bb9a368e32f9a8b3729623bbf47cbbb205b32d674ab2a91f0"}]},{"bom-ref":"673bc497a7465a27","type":"file","name":"/juice-shop/node_modules/base64id/package.json","hashes":[{"alg":"SHA-1","content":"25c444de022a4b4bb9e98d09bb0e8fe5a66d1b9b"},{"alg":"SHA-256","content":"26250fc512e912fc8dcdd1728025c79e85cc4727ba7e662d0ec0700f843efae4"}]},{"bom-ref":"5e2d451167141373","type":"file","name":"/juice-shop/node_modules/base64url/package.json","hashes":[{"alg":"SHA-1","content":"30611c9388765dd6c0c1291183460b5b99ae40a6"},{"alg":"SHA-256","content":"5d243a76cc698b4dbf9eeea3f62dd96719753b7d369860b6c8722146f7b83c7c"}]},{"bom-ref":"a5c83d8cc73c6ac0","type":"file","name":"/juice-shop/node_modules/basic-auth/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"},{"alg":"SHA-256","content":"3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"}]},{"bom-ref":"2dbf60b08a148c64","type":"file","name":"/juice-shop/node_modules/basic-auth/package.json","hashes":[{"alg":"SHA-1","content":"b2df92eda0861bfdf03b3689d8e6a53bbd607901"},{"alg":"SHA-256","content":"eacbd5624f044dbbdd9daf971ee004012e835368f7002f2dee742275e463eeea"}]},{"bom-ref":"4fe5a140886e9223","type":"file","name":"/juice-shop/node_modules/batch/package.json","hashes":[{"alg":"SHA-1","content":"b5ed756847feb09f819111e18a8b51b6683ce916"},{"alg":"SHA-256","content":"8b7595e8387929390fa5432f184e98059e32323a9ae3757fc0d251f44da22f36"}]},{"bom-ref":"29c4ab4f33cd41fc","type":"file","name":"/juice-shop/node_modules/beercss/package.json","hashes":[{"alg":"SHA-1","content":"c4b84c6c4761bcd00ec2f252b16b0f1b90a864c9"},{"alg":"SHA-256","content":"02bd416d4df9c80e93838afc594798391bfa396fbb87eaacf4ce30908ae2ce9f"}]},{"bom-ref":"3b1e74762afb1222","type":"file","name":"/juice-shop/node_modules/big-integer/package.json","hashes":[{"alg":"SHA-1","content":"c504e3cd069e16c72065b57157c1a923ec93ed7b"},{"alg":"SHA-256","content":"720c9966ac00b6e579aed1c8927f9d9a98dcd4a0cf738276e83899e023595266"}]},{"bom-ref":"37677ea5c1e5f59b","type":"file","name":"/juice-shop/node_modules/binary/package.json","hashes":[{"alg":"SHA-1","content":"8cb90d0e380085f35eabe6b378749d8402f9db2d"},{"alg":"SHA-256","content":"355ec61b56448e3d9ad74b286fa07e1b18bcbf153f45223b1a4f68d86bec891f"}]},{"bom-ref":"fdc5ad4bc35eb7b2","type":"file","name":"/juice-shop/node_modules/bindings/package.json","hashes":[{"alg":"SHA-1","content":"14bbbadeb1307b1f711ee10093d5b46a7889677c"},{"alg":"SHA-256","content":"a87721fe406e1f1798fef44d697b46ea1efe346fda118010334713346ee4207c"}]},{"bom-ref":"b61ca112dd4b48fc","type":"file","name":"/juice-shop/node_modules/bintrees/package.json","hashes":[{"alg":"SHA-1","content":"0541c9772153e0380217e17b877f3865ffa176ed"},{"alg":"SHA-256","content":"b1428f5f1084ec992b386903254420e8bbbd3cc9b3482dd8a8a031c749b1c5f9"}]},{"bom-ref":"89538df7b14a9c96","type":"file","name":"/juice-shop/node_modules/bl/package.json","hashes":[{"alg":"SHA-1","content":"95c3eee39930a1a112884e039aa18eef6440528d"},{"alg":"SHA-256","content":"cac689c32b3053d3f3ad5fb36209c9a6300eecac11e258daf9098cc9974460d6"}]},{"bom-ref":"27803c508fb47d21","type":"file","name":"/juice-shop/node_modules/bluebird/package.json","hashes":[{"alg":"SHA-1","content":"3bff8f918f77c01976fa2bff8bb461bf23783e55"},{"alg":"SHA-256","content":"06b909dc60508422d664b7734fb45f5466bfcbccff796db5413fcd1afb194712"}]},{"bom-ref":"5909dbcf8abf3a8d","type":"file","name":"/juice-shop/node_modules/body-parser/package.json","hashes":[{"alg":"SHA-1","content":"50351230f348a07c5f98fb390f78bb32d23ff589"},{"alg":"SHA-256","content":"387e86820743b803cea33ff5ccefe0f9b7dfe7f561a5b2df5b98312c68d27e79"}]},{"bom-ref":"7768c766b890b677","type":"file","name":"/juice-shop/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"494bd77ffaa1fc9d904a930b9e6adf6a12fed472"},{"alg":"SHA-256","content":"14798eb9b63a84e9243a616a0bd25829e766a4311e19603b1b6df2dd8c551862"}]},{"bom-ref":"403a905e568490c1","type":"file","name":"/juice-shop/node_modules/braces/package.json","hashes":[{"alg":"SHA-1","content":"124d44a7e3c5fd1b2370ff51929158c7c39c46c2"},{"alg":"SHA-256","content":"56f08b888a4f30dc7cf8a7dbb36ffe92b737912ba36abe9d069d32167c957ac7"}]},{"bom-ref":"83f536e76455d362","type":"file","name":"/juice-shop/node_modules/brotli/package.json","hashes":[{"alg":"SHA-1","content":"1f95a73a0930da325211f5d256c3210e33f3c715"},{"alg":"SHA-256","content":"387b47d00ea96cab9b4c521629fbcdc7621053ac061812526f3c69700924cef5"}]},{"bom-ref":"c149b350cb9b7688","type":"file","name":"/juice-shop/node_modules/browserify-zlib/package.json","hashes":[{"alg":"SHA-1","content":"b76ac0de775f96ff1cf65c9a7f2892a5a6bc3f0f"},{"alg":"SHA-256","content":"85034e889a63cb57e947d2ed81a87ffcb32831f7854a2e2648eb96ff56b10b91"}]},{"bom-ref":"d595ea7fc2f4c330","type":"file","name":"/juice-shop/node_modules/buffer-alloc-unsafe/package.json","hashes":[{"alg":"SHA-1","content":"eac3922d78d7c767750da439f58b88df8966ddca"},{"alg":"SHA-256","content":"abd77cd9f8e32a213714c6a188c62a59d97bb9359824022db89f57da4949a549"}]},{"bom-ref":"f34285303aea11ad","type":"file","name":"/juice-shop/node_modules/buffer-alloc/package.json","hashes":[{"alg":"SHA-1","content":"6acc40da3b381363e82c3d32b8b64510d6627ba8"},{"alg":"SHA-256","content":"d607efec5e54b94b612bd7065186e00f1591fade12aaf41a170606d02f6ac670"}]},{"bom-ref":"ab11db294e6e4bba","type":"file","name":"/juice-shop/node_modules/buffer-crc32/package.json","hashes":[{"alg":"SHA-1","content":"1ec2ea09d6d0b9bf7e3ed6e75af3d50bfe578902"},{"alg":"SHA-256","content":"f94d0f0c1be8f8714670c5fee03899bdb6485d430236d81726e24012a3696e6e"}]},{"bom-ref":"fe26e224140d9e7a","type":"file","name":"/juice-shop/node_modules/buffer-fill/package.json","hashes":[{"alg":"SHA-1","content":"a57438f89e767aca1edc938a71bbe480917ee65f"},{"alg":"SHA-256","content":"602a10e946f2f5eff5b19781d13fb3b589babe12815a1a9be4c7a673eb0fdd4f"}]},{"bom-ref":"3af0c1b1983512fd","type":"file","name":"/juice-shop/node_modules/buffer-from/package.json","hashes":[{"alg":"SHA-1","content":"49b8d27c728855d92e2609b2c67e82b89f57cee5"},{"alg":"SHA-256","content":"f7cde31d1db3e71738045206397d472e1f12513643ba4b9fd60ea337f22b1e3f"}]},{"bom-ref":"c7d52ab7a6cc3294","type":"file","name":"/juice-shop/node_modules/buffer-indexof-polyfill/package.json","hashes":[{"alg":"SHA-1","content":"981d326c4f01015129658b464df7d98938100cd9"},{"alg":"SHA-256","content":"cd2622bc8900ccc51417ed40ae01922030eaba84760b5aa6f820b4c431e7ac65"}]},{"bom-ref":"cfb2092f0946c9f6","type":"file","name":"/juice-shop/node_modules/buffer/package.json","hashes":[{"alg":"SHA-1","content":"2b48c222660295ee0110538cfdd70b220aedf800"},{"alg":"SHA-256","content":"5af7b62dbf5575a301cd13e8616f1d7d9cff3c90f9fab7bc3d6a1f4fbfee94eb"}]},{"bom-ref":"6f1c18097274941a","type":"file","name":"/juice-shop/node_modules/buffers/package.json","hashes":[{"alg":"SHA-1","content":"8324a9b6635486c55bdc9921641dcc039b2f9528"},{"alg":"SHA-256","content":"7091616d3b687b0de9dfbc6a1f8ab61e01742a3ec87f977bef64d1f299e231b9"}]},{"bom-ref":"383132133e311a4b","type":"file","name":"/juice-shop/node_modules/busboy/package.json","hashes":[{"alg":"SHA-1","content":"b1d7ef4a9a615c7a947a39139af8edf1972546ab"},{"alg":"SHA-256","content":"4faefdc1fc73a2c8a87dfa0cc6ca3dc3d9e518abf9b92d84aa495c59b3e20c92"}]},{"bom-ref":"7f03dce0e5bb179d","type":"file","name":"/juice-shop/node_modules/bytes/package.json","hashes":[{"alg":"SHA-1","content":"d8fe3e70eb4ecf4bf58385e4b27f89b7ce656a28"},{"alg":"SHA-256","content":"99b21c09ce812dc76a06cd87c4753247cb9615c6a8501c5a5a9d9caa22ea2d12"}]},{"bom-ref":"1f1a9fc5d499afd6","type":"file","name":"/juice-shop/node_modules/cacache/node_modules/p-map/package.json","hashes":[{"alg":"SHA-1","content":"f7afd4bd0f710b2b0c099a22a646cda6fb927688"},{"alg":"SHA-256","content":"3869a3eed147c70e77d2faece50ee97e7e55b851e8f46428fe71e218a349237f"}]},{"bom-ref":"7e182075835e17cb","type":"file","name":"/juice-shop/node_modules/cacache/package.json","hashes":[{"alg":"SHA-1","content":"4bfa58e7ac62a86d0f86b54faa34f063f3344a61"},{"alg":"SHA-256","content":"3b4d9ce8c3a3f853d903c06b5ec38a06c8ac9a2ccb236bf6a532d92cfe1b07de"}]},{"bom-ref":"e27d34645929393d","type":"file","name":"/juice-shop/node_modules/cacheable-request/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"000b39656a452f8e4ddcedb94597a6970c3f456a"},{"alg":"SHA-256","content":"08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b"}]},{"bom-ref":"841d8ae966b0f3c8","type":"file","name":"/juice-shop/node_modules/cacheable-request/node_modules/json-buffer/package.json","hashes":[{"alg":"SHA-1","content":"6a175397a93014316dcf454724d6f93f2dac12b7"},{"alg":"SHA-256","content":"fa9898eaf4e2fb3ed3e0201cb1c40df1fa7aa67fc2442cb87827ac1435dd5d09"}]},{"bom-ref":"0b11b6f1d8ebb7c1","type":"file","name":"/juice-shop/node_modules/cacheable-request/node_modules/keyv/package.json","hashes":[{"alg":"SHA-1","content":"2315bf1117b2f6bebee08fb9fd639a00ed7f099d"},{"alg":"SHA-256","content":"d86d32aa7e20779ba4ec8884babed30632cfd1cf193070eda9d8ef5c8640c1db"}]},{"bom-ref":"8ea0d757193b998a","type":"file","name":"/juice-shop/node_modules/cacheable-request/package.json","hashes":[{"alg":"SHA-1","content":"9ce876f09b4eaf8362aed671962a970175bf3bf5"},{"alg":"SHA-256","content":"45bc898c23761b5ddd1fc7dfc1c09663969115ab867496af0fa075e71ed22c68"}]},{"bom-ref":"7a1f4f1fde53ccb1","type":"file","name":"/juice-shop/node_modules/call-bind-apply-helpers/package.json","hashes":[{"alg":"SHA-1","content":"ba7d54557351d8746e4d2f88e7d4106ca4d0d541"},{"alg":"SHA-256","content":"59639b628c6846f674857c6a613fd47e2e4d2a24036cdf0f7a62ac634f4c8a5f"}]},{"bom-ref":"016bd9fb12def769","type":"file","name":"/juice-shop/node_modules/call-bind/package.json","hashes":[{"alg":"SHA-1","content":"d0223fac2c7e7a940010416c2b34a562659d9ba0"},{"alg":"SHA-256","content":"c11be8b7f9bbe367c27d42fba734b8226c0b15e1e5e1c2d842822d9791f053c7"}]},{"bom-ref":"e7ab03480025149d","type":"file","name":"/juice-shop/node_modules/call-bound/package.json","hashes":[{"alg":"SHA-1","content":"7c7c20ff22ed55c0f73a9ca1e378190b9ab3ba29"},{"alg":"SHA-256","content":"dcc8abb3c4ad3774234272149020cb36d7b1a3d377a419454d1e7adb368dd9c3"}]},{"bom-ref":"e29db01d677ed175","type":"file","name":"/juice-shop/node_modules/camelcase/package.json","hashes":[{"alg":"SHA-1","content":"7b4c16368eaa4ca5dba17965ea8557a35368a0f0"},{"alg":"SHA-256","content":"b6d533c740d144de4da1493940b541978a77aae9d712dd0d609f60c58c83a73e"}]},{"bom-ref":"9ccd061c7c2649dd","type":"file","name":"/juice-shop/node_modules/chainsaw/package.json","hashes":[{"alg":"SHA-1","content":"f1208fa90fe3f162e1a72f3ce3751b66f6775830"},{"alg":"SHA-256","content":"51910ad64abca4eb8c2c23abb2f713ba5220db89ed89c9fd198d27241a5a70ea"}]},{"bom-ref":"84a99bb43530d1f8","type":"file","name":"/juice-shop/node_modules/chalk/node_modules/supports-color/package.json","hashes":[{"alg":"SHA-1","content":"12db9c2598721e751dffd0b42a20b7ae419b20e2"},{"alg":"SHA-256","content":"34c434b27dc21bd0de7b5edca42fa0d9ebf72d2ac823c72865a334cb8fcfb9b5"}]},{"bom-ref":"41c61a2e2dc9e704","type":"file","name":"/juice-shop/node_modules/chalk/package.json","hashes":[{"alg":"SHA-1","content":"6837c455c887920ad9b0cad624aa4b9b51625fd8"},{"alg":"SHA-256","content":"80052c957e397ff669429ea957c2bdc792578c2178866f7a940c8eb975b5ca91"}]},{"bom-ref":"b62396efdc553409","type":"file","name":"/juice-shop/node_modules/character-parser/package.json","hashes":[{"alg":"SHA-1","content":"a1b981e621b2868fbdb14e10de12ceea86bbe82e"},{"alg":"SHA-256","content":"49974b723e98bec9dab8641bca5ee468739c04a0b7fcc501d762924f32f80aba"}]},{"bom-ref":"83f4744a00d992e1","type":"file","name":"/juice-shop/node_modules/check-dependencies/package.json","hashes":[{"alg":"SHA-1","content":"0d5968e7c7e3727e9c4001180104b0eddd93cbd2"},{"alg":"SHA-256","content":"94e24419ae07c9befa0ddbacbb12f26e030a288c78c37db8f5b62558ce3e8620"}]},{"bom-ref":"1f0589ad9ae4160e","type":"file","name":"/juice-shop/node_modules/check-types/package.json","hashes":[{"alg":"SHA-1","content":"f424a387a8b8c162e56279ca5259b40edd9f522b"},{"alg":"SHA-256","content":"fb5b3c004a773d1927ff110d5caa2080a6c5a89a0f61612d251296879b46f62d"}]},{"bom-ref":"a82d5ef619e9fb78","type":"file","name":"/juice-shop/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"fc7d452c2e7e9b57f311b04f8b5826656ccc8e1b"},{"alg":"SHA-256","content":"4300e90fdd91ec7035047473c60f880251a9801bd786302729d4277751d3b948"}]},{"bom-ref":"b041ca649e9af449","type":"file","name":"/juice-shop/node_modules/clarinet/package.json","hashes":[{"alg":"SHA-1","content":"4dc5d68200d25cdd05e4e38fef2ebb6ce2b6b299"},{"alg":"SHA-256","content":"b6ed9b595f76a6c8e4a7db7cae4e7df7beeeede69de0e9908a69143599be1b41"}]},{"bom-ref":"86522d2d9e8328d5","type":"file","name":"/juice-shop/node_modules/clean-stack/package.json","hashes":[{"alg":"SHA-1","content":"4783e06a89ee21c7109f053235b03211ec87f5af"},{"alg":"SHA-256","content":"9b4a4a5cc61a09e61aa1ce84bc68c84aef90abf9a0280d09214a89189257ca7a"}]},{"bom-ref":"f7088a958b48b3da","type":"file","name":"/juice-shop/node_modules/clone-response/package.json","hashes":[{"alg":"SHA-1","content":"c109beb613fd2573d6b8ccb99ed48f2b25360e94"},{"alg":"SHA-256","content":"5c4ec09512661e52caf27ee747116d8104fb7da25c7fbe82ffe760dbdda99e63"}]},{"bom-ref":"903ad5ca99c324f0","type":"file","name":"/juice-shop/node_modules/clone/package.json","hashes":[{"alg":"SHA-1","content":"0fdce1636b3aa8c1df63be2fdb3e3b66066b82d4"},{"alg":"SHA-256","content":"07e9c7efd55a99cbe2909d1fd46b032b67cba6b493d1fbc974fddf4f2adebc83"}]},{"bom-ref":"ce87336d3c40eb3a","type":"file","name":"/juice-shop/node_modules/code-point-at/package.json","hashes":[{"alg":"SHA-1","content":"b223a41679c19b6eb58a4ebb29c7bb5c23ffb2db"},{"alg":"SHA-256","content":"25069e9b754306d51bb333f034a741d99e052bee4c99d13ecdba7f485bb01749"}]},{"bom-ref":"f2818f8a66270425","type":"file","name":"/juice-shop/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"799d15c0afcf7b320069d0734a1806b3062da05b"},{"alg":"SHA-256","content":"b19880ef7c610484649d11309820cd55c8934ebc4bde0b37706e94483bf2bd0f"}]},{"bom-ref":"6d16e82c1aa86b61","type":"file","name":"/juice-shop/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"5aa7aaf5028aece2d7a920d5644c25c87723d203"},{"alg":"SHA-256","content":"522669bd4c785d5c372377f5b139243f5fb6cf6335fc9df0e7c2d294b6b678da"}]},{"bom-ref":"5705f64503a05431","type":"file","name":"/juice-shop/node_modules/color-string/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"bb882040c18e17fb8cbc49f064b62796ca24fe48"},{"alg":"SHA-256","content":"816c067d75efb40e8daf99d11a40029c95cb3634bbaf8ba1a09505c56705ab5e"}]},{"bom-ref":"a05e1d4e692c5526","type":"file","name":"/juice-shop/node_modules/color-string/package.json","hashes":[{"alg":"SHA-1","content":"18e0a9c366ada5dfe0d8d04698e3cf60f3044d5b"},{"alg":"SHA-256","content":"c07e159e468107920cf59dc92a06185593c180c2bbf12cd6baf9494da68c8d35"}]},{"bom-ref":"d5c972262fec62fe","type":"file","name":"/juice-shop/node_modules/color-support/package.json","hashes":[{"alg":"SHA-1","content":"a47d93a86d7864eb1866a3367f7c5ace53dc18d1"},{"alg":"SHA-256","content":"baf5cca1519cfaa530a21810bda9fe6236082d855a59ff66f5ef437bf51451eb"}]},{"bom-ref":"4c0040a4efb8adfe","type":"file","name":"/juice-shop/node_modules/color/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"4907e98a35921c9d764aeb9df809fdaa89120a9d"},{"alg":"SHA-256","content":"2ca1a776fdacc56b2c1463045e8b2edcc7ff31490c362ee84e258cc905b90e73"}]},{"bom-ref":"4bce00deb15b2612","type":"file","name":"/juice-shop/node_modules/color/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"bb882040c18e17fb8cbc49f064b62796ca24fe48"},{"alg":"SHA-256","content":"816c067d75efb40e8daf99d11a40029c95cb3634bbaf8ba1a09505c56705ab5e"}]},{"bom-ref":"7a591d5940603d89","type":"file","name":"/juice-shop/node_modules/color/package.json","hashes":[{"alg":"SHA-1","content":"35844a694ca86f5724ae9b515c09453e5b0d79f1"},{"alg":"SHA-256","content":"e056a5ef1ac8bd65d4a19eb544b2b3dfb69e21da39543e3f58456d6f1793019e"}]},{"bom-ref":"dd8a533268243431","type":"file","name":"/juice-shop/node_modules/colors/package.json","hashes":[{"alg":"SHA-1","content":"a4f69f04fe66223dfe4b4bc5c73653a2a6d410b5"},{"alg":"SHA-256","content":"12d1b76eb6efbe581026d035eba2a3c916fc5d4664a9476d23bafc6813db9176"}]},{"bom-ref":"6b5b2990b66a7183","type":"file","name":"/juice-shop/node_modules/component-emitter/package.json","hashes":[{"alg":"SHA-1","content":"93e268feac3350d3806f9deca82dfce16d06d9fd"},{"alg":"SHA-256","content":"cdb4584e6657cbc5bd76295b0e3828969fec5cdf3c812178ea80f37378398080"}]},{"bom-ref":"ace4cf44075fb98f","type":"file","name":"/juice-shop/node_modules/component-type/package.json","hashes":[{"alg":"SHA-1","content":"03289fd70f7e974c6f698df8d877912ccd127e29"},{"alg":"SHA-256","content":"93a42e729e1f42670f510fbb1b7e90e6834a4e60657c67da82d321a4d99a30d3"}]},{"bom-ref":"3e0941aa7c8c5bc2","type":"file","name":"/juice-shop/node_modules/compress-commons/package.json","hashes":[{"alg":"SHA-1","content":"49b373b2919e1a111b2b198de6f73e229c1b4708"},{"alg":"SHA-256","content":"0144c9f8c98abb94ae03eaec71cd3fe7190a8f1c77ea898a012ce30e72bdc6c1"}]},{"bom-ref":"1f63a726d778b3cf","type":"file","name":"/juice-shop/node_modules/compressible/package.json","hashes":[{"alg":"SHA-1","content":"dd8d4a57b09cc1f78941ee6b3c36192c64775600"},{"alg":"SHA-256","content":"78af3f89054f6ef1bc4ba56724a5edb55babf7fc6a4e88b8bb5ae631afcf9219"}]},{"bom-ref":"dc8ca1076969a404","type":"file","name":"/juice-shop/node_modules/compression/package.json","hashes":[{"alg":"SHA-1","content":"12e3bb6f942049ca301efab637953ab8aad3e61a"},{"alg":"SHA-256","content":"5c2303e1e6b34b76a1c913d4f09fc0b3e374d4539aa5c89b99d6d58ed91620e2"}]},{"bom-ref":"0786275c397f0ae1","type":"file","name":"/juice-shop/node_modules/concat-map/package.json","hashes":[{"alg":"SHA-1","content":"10e204a14998c9e1d13bba6ab5243194a94d5d6a"},{"alg":"SHA-256","content":"4fe5e8089b65ebfd55bb86f465ba896ba6a8e24b7b61de1e0f420f590616b118"}]},{"bom-ref":"f81705f83ae4840d","type":"file","name":"/juice-shop/node_modules/concat-stream/package.json","hashes":[{"alg":"SHA-1","content":"bf0359010a483481d391dca89ee461e718627b0d"},{"alg":"SHA-256","content":"90182f042f9d995d6021ee7b9cb56d044b700fbf5f7dc03057343dcca4df00d5"}]},{"bom-ref":"d4bc052f039f52f1","type":"file","name":"/juice-shop/node_modules/config/package.json","hashes":[{"alg":"SHA-1","content":"e8ef1128810fb2561de65ece79eb48991c87014c"},{"alg":"SHA-256","content":"f1bb1cba9e9cb4cc00e33db8dd4f254810d5df5f9ec4f51c6ffe9e396f84b0fc"}]},{"bom-ref":"7eb3051f10106c84","type":"file","name":"/juice-shop/node_modules/console-control-strings/package.json","hashes":[{"alg":"SHA-1","content":"48149fd6456eb7fa73b547c26577132ed9fb15ca"},{"alg":"SHA-256","content":"2da7c4bb166dfa347305d34eebafaec098a9afeaaa26e4844736597507dbb968"}]},{"bom-ref":"d121ee6e625ea855","type":"file","name":"/juice-shop/node_modules/constantinople/package.json","hashes":[{"alg":"SHA-1","content":"04d4d5b1853df1f182ee1f1a285c283c25c3fe22"},{"alg":"SHA-256","content":"7b0cf478d904186f397b8c75c0f8129d0f36bfcde75929880ac0bedb38c76c7f"}]},{"bom-ref":"3350034f065e5cb9","type":"file","name":"/juice-shop/node_modules/content-disposition/package.json","hashes":[{"alg":"SHA-1","content":"1b871ffaefe2a1fd69aa9b1538b4003bf0eae9ab"},{"alg":"SHA-256","content":"2459c0e8fbeb5716ab06e9ef73747bba46ed2bc52e310bd4e9f0ef1f102da61f"}]},{"bom-ref":"e7c5bf59b08ef9dc","type":"file","name":"/juice-shop/node_modules/content-type/package.json","hashes":[{"alg":"SHA-1","content":"1545c6d8538d7e59f375d4ae4b0e0d10471a6c1c"},{"alg":"SHA-256","content":"bd78a5427ffca1966621301edc6cac2146c8c1e137f122161ba90dca7ec89f77"}]},{"bom-ref":"697f1e8b6a7eb8d2","type":"file","name":"/juice-shop/node_modules/cookie-parser/package.json","hashes":[{"alg":"SHA-1","content":"5e3c194dcb531a61c8dc8c6d97fc65f138d52a09"},{"alg":"SHA-256","content":"27eebaa9ad78117c9b6965e3c6cd24356504e5a7abd3450cafc46a1b6e1e97e5"}]},{"bom-ref":"901a695222deaf15","type":"file","name":"/juice-shop/node_modules/cookie-signature/package.json","hashes":[{"alg":"SHA-1","content":"eb071423205fc35573e714baa755e3a9e900a979"},{"alg":"SHA-256","content":"ab66777a673ae096d6b5aa51b5edb46b84e6fcd85dc03358c35576e3df0464f5"}]},{"bom-ref":"39740b66e9fb0595","type":"file","name":"/juice-shop/node_modules/cookie/package.json","hashes":[{"alg":"SHA-1","content":"49ffb97b37b2a7b8b0967428ca088145d3483365"},{"alg":"SHA-256","content":"7fa781bd142e7f38b66bff64b4e3a8be9e53e340e7ddaf27caebd00322602208"}]},{"bom-ref":"8527e85024b84e3d","type":"file","name":"/juice-shop/node_modules/cookieconsent/package.json","hashes":[{"alg":"SHA-1","content":"ba04d229240bc8c46ccd04088b8baa8dec795500"},{"alg":"SHA-256","content":"9e3749607413186ef0b851086b376a19578e1195148c551683cac4fd47757fc6"}]},{"bom-ref":"a70a3faad8f17295","type":"file","name":"/juice-shop/node_modules/core-util-is/package.json","hashes":[{"alg":"SHA-1","content":"67e07f86f3ffc5d437b0c03d9bf2417493e64859"},{"alg":"SHA-256","content":"9effbb5ec239b4de8bae0499e760bc86b7fa731e310e7a2721d8ffb667194e44"}]},{"bom-ref":"6176a0a689118771","type":"file","name":"/juice-shop/node_modules/cors/package.json","hashes":[{"alg":"SHA-1","content":"29a6d78b59fd864df0f1ced954fcc06e2e31cf1e"},{"alg":"SHA-256","content":"b314218cdfc9e9442efd35c74c4176902c0bbd74700ba30d6055e70a76455174"}]},{"bom-ref":"b16455f311c4795b","type":"file","name":"/juice-shop/node_modules/crc/package.json","hashes":[{"alg":"SHA-1","content":"dcc2939933df570c8260f4fd4fbbd6b88c420626"},{"alg":"SHA-256","content":"3bdb1642fb5a6e1c822e5e3dccdce83c59bcd73e84934fdcd0c3c65ebda6718e"}]},{"bom-ref":"411bb91c2d91a746","type":"file","name":"/juice-shop/node_modules/crc32-stream/package.json","hashes":[{"alg":"SHA-1","content":"669fb5f9deac7203619c72ea7a0df0d4460417d9"},{"alg":"SHA-256","content":"1913530699dad57c6bf7d89127c0c521266133a615b3685d51deca1ae9a33cda"}]},{"bom-ref":"32bb90e22bc2599e","type":"file","name":"/juice-shop/node_modules/cross-spawn/package.json","hashes":[{"alg":"SHA-1","content":"9becaa8ecb51ad9b303dd62369423cb9f287163a"},{"alg":"SHA-256","content":"2e106cd9b4ae4e34ead35218371a0d4e172da72515a4f8f97d69a2e1fe3dee82"}]},{"bom-ref":"f747956ba0ac6de8","type":"file","name":"/juice-shop/node_modules/crypto-js/package.json","hashes":[{"alg":"SHA-1","content":"65c10fa4433d97c3ebe204470e8caaa105d6fcd2"},{"alg":"SHA-256","content":"b021f29bcaa1cef60884f4281e0011a5e80758e0f6460e9a6061f28e37282ca4"}]},{"bom-ref":"0a6e2d2e58a43f8f","type":"file","name":"/juice-shop/node_modules/dateformat/package.json","hashes":[{"alg":"SHA-1","content":"3d4b932fedff8c3566e9eff570421fae695c91e7"},{"alg":"SHA-256","content":"9d72ce65bcf960ea44a19840e86c0476ae56034cca2181ecd6bced70559c97ff"}]},{"bom-ref":"b7f9128914daf56c","type":"file","name":"/juice-shop/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"8ebf0f80660d982fc68f00f82855696157e74b10"},{"alg":"SHA-256","content":"6c3d2c892db282317913ce7c340dd2edccd326bcafd18b644b8738144967d6ee"}]},{"bom-ref":"79682bcb7fecb38a","type":"file","name":"/juice-shop/node_modules/decamelize/package.json","hashes":[{"alg":"SHA-1","content":"ccda85295237a30d5621b1d9a4569be24c92564f"},{"alg":"SHA-256","content":"fb07ecfb5937f8757b0721fdafa6febff75d3c159f6dc8ec0d6ad4e1d1be7d9c"}]},{"bom-ref":"7529873d750dd35e","type":"file","name":"/juice-shop/node_modules/decode-uri-component/package.json","hashes":[{"alg":"SHA-1","content":"6202fd7f4a33d4ef4d36b0f1a26ee5dc22f7851a"},{"alg":"SHA-256","content":"8f2e9784337b3b4fa69359f88f75a2847e0aa17776f062cb518d008d8d408bca"}]},{"bom-ref":"54445faae155465b","type":"file","name":"/juice-shop/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"a8a1643a6d1bfc2cd01968fece47576aac7f85f0"},{"alg":"SHA-256","content":"e4f071e185bd8373eced227d9fc256e7cb17c05aadf4a9ff25e6ebdbef489580"}]},{"bom-ref":"048e37fe50adfb70","type":"file","name":"/juice-shop/node_modules/decompress-tar/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5"},{"alg":"SHA-256","content":"d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896"}]},{"bom-ref":"ae202ceb666d310e","type":"file","name":"/juice-shop/node_modules/decompress-tar/package.json","hashes":[{"alg":"SHA-1","content":"2a60c06be62f9b9c9eff038925e902ce2e3c2a69"},{"alg":"SHA-256","content":"c218803dd64ee674ce941eda27ca12c5d949bc582de8cb30fc37f830c1184da0"}]},{"bom-ref":"072b90dcc4a10653","type":"file","name":"/juice-shop/node_modules/decompress-tarbz2/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"a6530cf198e519ea50ee8e0bf674c209f5280991"},{"alg":"SHA-256","content":"11468db6795e371a155e5f59e4d3db4bac561f04bed7851609739ca2971363a6"}]},{"bom-ref":"af0b03d530e94f15","type":"file","name":"/juice-shop/node_modules/decompress-tarbz2/package.json","hashes":[{"alg":"SHA-1","content":"8868c09e4485e8a5259107e1627b82d28c9c4088"},{"alg":"SHA-256","content":"529925f1b024ee1493f613b8b8f341eb57c3f4d652387fb9d60ec6a94c55e848"}]},{"bom-ref":"f25c1d37cf17861e","type":"file","name":"/juice-shop/node_modules/decompress-targz/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"4b6f00aa1e5eedee8b2e01f411ac1e595f5580f5"},{"alg":"SHA-256","content":"d40eb8973856f8dc2a280d9c6549041068e1dd91041661cf48fdf11dff2d6896"}]},{"bom-ref":"069886fa57eb73f3","type":"file","name":"/juice-shop/node_modules/decompress-targz/package.json","hashes":[{"alg":"SHA-1","content":"3e50782d9594c0eb2209145de66307aa14762462"},{"alg":"SHA-256","content":"563940fa7817c65d09bf0825521cd80be7fe3371f655f63806dd39d0a332feeb"}]},{"bom-ref":"0b4fe4fdec5f27fc","type":"file","name":"/juice-shop/node_modules/decompress-unzip/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"5fb963b346a2cd3ac5d664048eeaf13db03da127"},{"alg":"SHA-256","content":"77dfe1fe927c8f631f4ff5cd7040a9f3fb8149ee65160d0f936dff5844d21ee8"}]},{"bom-ref":"0ce6699a1cdf0c21","type":"file","name":"/juice-shop/node_modules/decompress-unzip/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"b7150c9c5b976f0f6c27c5a5e4c5466e40091c19"},{"alg":"SHA-256","content":"30c9eb7f6849e5e7eb35dfd625b2e474c7632fbe4377f2186763967cce5e61aa"}]},{"bom-ref":"c8a9b2c6bbdca623","type":"file","name":"/juice-shop/node_modules/decompress-unzip/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"9d9d1d73f03f4b32f19e6829392a51c9d15b7195"},{"alg":"SHA-256","content":"bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284"}]},{"bom-ref":"07b00b58428f2341","type":"file","name":"/juice-shop/node_modules/decompress-unzip/package.json","hashes":[{"alg":"SHA-1","content":"fd0b816b1f4ad813eff7743092370f6fdd251e91"},{"alg":"SHA-256","content":"bd8dcc48b9394f349abfe168301e8d0e33d9b48d9fca79108d6a6302c9349f72"}]},{"bom-ref":"49087c79ab88da3b","type":"file","name":"/juice-shop/node_modules/decompress/node_modules/make-dir/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71"},{"alg":"SHA-256","content":"7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772"}]},{"bom-ref":"f822d3d504fa685d","type":"file","name":"/juice-shop/node_modules/decompress/node_modules/make-dir/package.json","hashes":[{"alg":"SHA-1","content":"5dc583570034b28410731ea0164940ba872f2a53"},{"alg":"SHA-256","content":"d125b3068a54b746267706fa6c5e6087171fdf42f701cd7b64508c51dd1fec40"}]},{"bom-ref":"efeb62e1931ffc37","type":"file","name":"/juice-shop/node_modules/decompress/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"9d9d1d73f03f4b32f19e6829392a51c9d15b7195"},{"alg":"SHA-256","content":"bb4265f25a454b4daf716b81e525679d774fb23208b3f15284f23723be4e3284"}]},{"bom-ref":"d3110fcf78f67325","type":"file","name":"/juice-shop/node_modules/decompress/package.json","hashes":[{"alg":"SHA-1","content":"cca6473d46387c59d174ea40cae6ee46365a8fdb"},{"alg":"SHA-256","content":"d3d6e3c813ac057db9a5a7cd1ecbcb678df9238df896a7f791881d04efb7e96b"}]},{"bom-ref":"7d52d03bb9ac8f3e","type":"file","name":"/juice-shop/node_modules/deep-equal/package.json","hashes":[{"alg":"SHA-1","content":"917bab6d83cd346a03fad8ccb657ab7272de7314"},{"alg":"SHA-256","content":"21b5cf3db0f28c0b0125231ed308baf7d9324e96085165be0db27df55cc68279"}]},{"bom-ref":"fb081383575d4eae","type":"file","name":"/juice-shop/node_modules/deep-extend/package.json","hashes":[{"alg":"SHA-1","content":"873beeb015297e8e026fdd9d97450877dcbb36cf"},{"alg":"SHA-256","content":"21b307891704eb34e9be621d7563d13734f75f41d8f97825862b05ca5bc2d217"}]},{"bom-ref":"78ed13afd762ec30","type":"file","name":"/juice-shop/node_modules/define-data-property/package.json","hashes":[{"alg":"SHA-1","content":"c9384aa894159ee96e107cdd3002915849fc91fc"},{"alg":"SHA-256","content":"bde7f1465b344a24da2b10d2ee99f87edf8e0ecd177c28370b60ad9595de730e"}]},{"bom-ref":"7718b158db4e8e71","type":"file","name":"/juice-shop/node_modules/define-properties/package.json","hashes":[{"alg":"SHA-1","content":"7258fe1b09441a50b6399709b9f40811b7da135f"},{"alg":"SHA-256","content":"b61b15058833610f17197bfb60847926703e077b180de684ccc50866906f6fb1"}]},{"bom-ref":"ea0e8f35ebf3d5c3","type":"file","name":"/juice-shop/node_modules/delegates/package.json","hashes":[{"alg":"SHA-1","content":"f192d34b412f6fda6a541acee81de9e0d48648bb"},{"alg":"SHA-256","content":"7fe6ba799e1316869f2990cfe8e51bd29a40e1e5f327babdd38d23e3e23e8d87"}]},{"bom-ref":"6f7ec2f02477be9c","type":"file","name":"/juice-shop/node_modules/depd/package.json","hashes":[{"alg":"SHA-1","content":"3c10082c1464a6f589aa10cda88285e780ebf857"},{"alg":"SHA-256","content":"5a3659bcc2e47b25ebf9f23f38eb9452a58920bfe4b59410bfa6fe84639a3b99"}]},{"bom-ref":"a3daf2775b7c6810","type":"file","name":"/juice-shop/node_modules/destroy/package.json","hashes":[{"alg":"SHA-1","content":"e12115ed9a1e2c56eb35ecfc14ff83b8c02935d5"},{"alg":"SHA-256","content":"f865b50652dc062f43142e01f55db2760cc10d255bd05afd232e738999c58188"}]},{"bom-ref":"c85d04798e632cba","type":"file","name":"/juice-shop/node_modules/detect-file/package.json","hashes":[{"alg":"SHA-1","content":"4bb909e6a4e96fae92a08102ea75db073df4348a"},{"alg":"SHA-256","content":"5c9dafc723e89cbed5a46bd5661a8ce51ff3b0ea7ec1f1a446d91294bff47283"}]},{"bom-ref":"9690ee8d7ea8d79d","type":"file","name":"/juice-shop/node_modules/detect-libc/package.json","hashes":[{"alg":"SHA-1","content":"df38d1adc85f0f39030df82734c0d53a6a4ab728"},{"alg":"SHA-256","content":"bb418f4fa450f8a418f8fc46c33727edef55aefd54c43ec6a9421a65ca8d9827"}]},{"bom-ref":"4fc78ac2cde347c2","type":"file","name":"/juice-shop/node_modules/dfa/package.json","hashes":[{"alg":"SHA-1","content":"8380e4b8de016791903fae93500e6bed99730482"},{"alg":"SHA-256","content":"96c0ce3cc17b34aabd58fd442157766d9e244cba735e54ee4fe10d7841f0460c"}]},{"bom-ref":"16ce227388c1b4df","type":"file","name":"/juice-shop/node_modules/doctypes/package.json","hashes":[{"alg":"SHA-1","content":"871d1d4274f18991e95e1fb8152ee7f389e357c3"},{"alg":"SHA-256","content":"75c3011d12383ba4daaf2bd220c601da3c9b95205394ebd70b4a1c78814298bb"}]},{"bom-ref":"51fa7171beaa20c0","type":"file","name":"/juice-shop/node_modules/dottie/package.json","hashes":[{"alg":"SHA-1","content":"b45953cc74a96671397c527eea17d2c77f554954"},{"alg":"SHA-256","content":"b7ea4b539c814825c0bd87dafae06dfb855705957500b28c30b00769c4062ed1"}]},{"bom-ref":"e9df5eb2529c6786","type":"file","name":"/juice-shop/node_modules/double-ended-queue/package.json","hashes":[{"alg":"SHA-1","content":"30542f1f765ce4999dbac3bbe0b3ff1df8dcef06"},{"alg":"SHA-256","content":"006484a1d2b6898582f6b11c448bbde98d05fede3ed0b062250222329dc436a2"}]},{"bom-ref":"f63a788e7a9f1ee2","type":"file","name":"/juice-shop/node_modules/download/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"4a6b4729fde430cee32de953aa6fca071be059d1"},{"alg":"SHA-256","content":"8294d202a217083501a4d8331056aee92b4e08a793652199ba381ddc5827445c"}]},{"bom-ref":"a01e8c6a56b9d199","type":"file","name":"/juice-shop/node_modules/download/package.json","hashes":[{"alg":"SHA-1","content":"ae5526f3f8da448d11127e9eb7b12b4c0db0f5ae"},{"alg":"SHA-256","content":"c50eeac8286ef9c74324c8a3788c920d89af79ee02273482661d0e0e53c6ab98"}]},{"bom-ref":"f9edf84213137c57","type":"file","name":"/juice-shop/node_modules/dunder-proto/package.json","hashes":[{"alg":"SHA-1","content":"d4f4da85fa9e51b4843d29d7e541991cf377b8d5"},{"alg":"SHA-256","content":"24df71008e4225c858f389dd2728b76cf66b752256d42a38ed7930aacae7fe2b"}]},{"bom-ref":"e2879cc563d61729","type":"file","name":"/juice-shop/node_modules/duplexer2/package.json","hashes":[{"alg":"SHA-1","content":"03b1919d071f65ef5340b0afb32ebf000056bfcc"},{"alg":"SHA-256","content":"80a5177685b461feb7f741c08ab2268a63e108b03bae0e5056f6a6bebf8ce315"}]},{"bom-ref":"5e1a7ab27f3e2e89","type":"file","name":"/juice-shop/node_modules/duplexer3/package.json","hashes":[{"alg":"SHA-1","content":"b78f4dda4b12e85d2889a30486b82c559f5744bd"},{"alg":"SHA-256","content":"107bd6232c7aa9c50bc3d562b3052e69cadad3a691bdce012ddb244b6357e3de"}]},{"bom-ref":"5dda5376e4372ea4","type":"file","name":"/juice-shop/node_modules/eastasianwidth/package.json","hashes":[{"alg":"SHA-1","content":"c3bff6d91fcbc648b17edd5f8e37bac1f47485a4"},{"alg":"SHA-256","content":"51db62f97656d02d4bc9670393cae42930dbd1ed89f5837056851807e602867a"}]},{"bom-ref":"47e99e6723729d97","type":"file","name":"/juice-shop/node_modules/ee-first/package.json","hashes":[{"alg":"SHA-1","content":"7ffe61f87f94a558fabc177cad5c9b90b16481cf"},{"alg":"SHA-256","content":"a4eece6ff6b38bf7ac107323f381cc60500097a9cbdd473f5d5b45e68822cb89"}]},{"bom-ref":"9a799bf773a161bd","type":"file","name":"/juice-shop/node_modules/eivindfjeldstad-dot/package.json","hashes":[{"alg":"SHA-1","content":"af20b4726ad418b94f3f536ccc764cda1236840f"},{"alg":"SHA-256","content":"ace4488e54d7e874ef61df9734a1a6c87c3df723a9cd14ef88294001f4e64f0d"}]},{"bom-ref":"0b548ab01c91ac95","type":"file","name":"/juice-shop/node_modules/emoji-regex/package.json","hashes":[{"alg":"SHA-1","content":"c26fe90da5886724a2676b8e3d5890beeacaad20"},{"alg":"SHA-256","content":"7bec29b9ca68f2c4becc60e866c2f9342ecdc89fab39841a818ccd9eda15c148"}]},{"bom-ref":"fc6092400d6924e0","type":"file","name":"/juice-shop/node_modules/enabled/package.json","hashes":[{"alg":"SHA-1","content":"35340901cea631effd557c9f64aeb682dcb2c459"},{"alg":"SHA-256","content":"5bc65d6409ffeb2c9eada8c0706d2b6426697d748fa2f409342f3668f4ee23f7"}]},{"bom-ref":"ba653cdbf3773251","type":"file","name":"/juice-shop/node_modules/encodeurl/package.json","hashes":[{"alg":"SHA-1","content":"40228259bb4f106706490d0b0b73cd4f35d6db44"},{"alg":"SHA-256","content":"5df10798f4b086da95c24180d7519fa4f68e2057a48e2ff6b76b91d6ffed1e9b"}]},{"bom-ref":"1023d651021f2f88","type":"file","name":"/juice-shop/node_modules/encoding/node_modules/iconv-lite/package.json","hashes":[{"alg":"SHA-1","content":"a3d90badf75db503f5dd3ff3fb76d120d1424978"},{"alg":"SHA-256","content":"3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98"}]},{"bom-ref":"fc1f132395f84c7e","type":"file","name":"/juice-shop/node_modules/encoding/package.json","hashes":[{"alg":"SHA-1","content":"52b117f2bc3113970224b9dc97b7fc18f7df30ab"},{"alg":"SHA-256","content":"8a868d7c206bf2eb71c0721a957b7a255738678f72c290c880b46fec4ec54dbe"}]},{"bom-ref":"3c3a9fdac4df6f18","type":"file","name":"/juice-shop/node_modules/end-of-stream/package.json","hashes":[{"alg":"SHA-1","content":"7e21c9362d2b1158118b6673f45fa1c6695c847f"},{"alg":"SHA-256","content":"da504d0bef5a5974590b62f58df0003b448eccde6b5fbeb044506b7e43368eb5"}]},{"bom-ref":"036c1abd4b435fbd","type":"file","name":"/juice-shop/node_modules/engine.io-parser/package.json","hashes":[{"alg":"SHA-1","content":"4a12fbe97085b55ea1025807ce2d6e45ed3c29c5"},{"alg":"SHA-256","content":"3745d9cfcd726c33b1066fc4c0ebfdfc8590b762861e4ff7d1f50b37f338afa4"}]},{"bom-ref":"0cf5efb073ca4248","type":"file","name":"/juice-shop/node_modules/engine.io/node_modules/cookie/package.json","hashes":[{"alg":"SHA-1","content":"b7049b02b54f0da0a956bc0967ce39f5429442a5"},{"alg":"SHA-256","content":"07269baaaad9a16ef8a4666d69cdd387891658eaf31af3026abd8b9e3fefc9c9"}]},{"bom-ref":"3f48fcdb2f5904cf","type":"file","name":"/juice-shop/node_modules/engine.io/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"867baf5b5a330ab0443c88e654e8c43622c3d7a9"},{"alg":"SHA-256","content":"7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"}]},{"bom-ref":"a9777087f3273ec6","type":"file","name":"/juice-shop/node_modules/engine.io/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"27adf065d55ceed6","type":"file","name":"/juice-shop/node_modules/engine.io/node_modules/ws/package.json","hashes":[{"alg":"SHA-1","content":"55eba127d99266b82e347a07bc4e164aa9c134ab"},{"alg":"SHA-256","content":"0104bf7fa4b359d2a844c2ad0d37a0bf6fe14531e4c9c33055004dce85e8d1e7"}]},{"bom-ref":"cc1295a6a0603142","type":"file","name":"/juice-shop/node_modules/engine.io/package.json","hashes":[{"alg":"SHA-1","content":"2b4f930598e5129e2c27429b87b7554cb065e11d"},{"alg":"SHA-256","content":"b72c50246f14911e15b0f0145cce9a20b78bf8aabf4b79d4c178ef02f53f3a27"}]},{"bom-ref":"90faeb98f5ab7b94","type":"file","name":"/juice-shop/node_modules/env-paths/package.json","hashes":[{"alg":"SHA-1","content":"b5b570f41c1d3e8f251fd06d075cefea4a3449a9"},{"alg":"SHA-256","content":"b92833e5851ec53bd4cd8093f6099d0c6e6818c4374ec1d09aa25d4f9ba91ec4"}]},{"bom-ref":"1adc9fe36fc6e195","type":"file","name":"/juice-shop/node_modules/err-code/package.json","hashes":[{"alg":"SHA-1","content":"5c7bc63340bc312d1563bb2b369e333e1165ab04"},{"alg":"SHA-256","content":"ff5360c17c3e197fc4a4a4fa0d07640292556d585a49c8651fd198e926d47bcc"}]},{"bom-ref":"9b4ad0053ccf06ab","type":"file","name":"/juice-shop/node_modules/errorhandler/package.json","hashes":[{"alg":"SHA-1","content":"1da18d3d3998adefa01c8b3d1260843baee1eeb4"},{"alg":"SHA-256","content":"f328451e39568b21310723feef6a731480bc3e74b239601a8babe2b7dd411c5d"}]},{"bom-ref":"778dfc5c67cbe769","type":"file","name":"/juice-shop/node_modules/es-define-property/package.json","hashes":[{"alg":"SHA-1","content":"f1a35cb43fefef0d0e60920c4df5313ba630ee6d"},{"alg":"SHA-256","content":"3a2cb30dae30a96705dcd9aa2d5fb190cf8200f27badccfa5a81a4374e5708b4"}]},{"bom-ref":"e73fab47d6e721cb","type":"file","name":"/juice-shop/node_modules/es-errors/package.json","hashes":[{"alg":"SHA-1","content":"d13bcb37ab6ab7f0911ce728148cb1c8485a81d1"},{"alg":"SHA-256","content":"1a0a0bcccc76b915cb64073317312840cf6363e9144b96f406d0059774dd5278"}]},{"bom-ref":"0082cf09a2a56fa5","type":"file","name":"/juice-shop/node_modules/es-get-iterator/package.json","hashes":[{"alg":"SHA-1","content":"e5f87acaaa2bd7ba95797e07f31e74d503db6bfe"},{"alg":"SHA-256","content":"cce872f403e70751f0bc8dddb0f7d2e992eb624c9397f764fa7f2feae602ac3f"}]},{"bom-ref":"8cef15f58ce77014","type":"file","name":"/juice-shop/node_modules/es-object-atoms/package.json","hashes":[{"alg":"SHA-1","content":"623e510034cf39440e8692aa26c9473765981674"},{"alg":"SHA-256","content":"9975f032714dd642d08c9b50129096f5daf878dbede1ca3544cdcdbf45b48eb0"}]},{"bom-ref":"0d5c9ea82a07112b","type":"file","name":"/juice-shop/node_modules/escape-html/package.json","hashes":[{"alg":"SHA-1","content":"f9d3fd64a0196e77965489ce9b81fe4ce3a9ecb1"},{"alg":"SHA-256","content":"bd320a3e9d23249f5f7d3ce72f2fa426e28a6b2704bd2b281d0c92806a1f5223"}]},{"bom-ref":"424ba41d8f213b21","type":"file","name":"/juice-shop/node_modules/escape-string-regexp/package.json","hashes":[{"alg":"SHA-1","content":"f794290e774669d83cae4e20a497fbf680d20859"},{"alg":"SHA-256","content":"c804f228dd0d4d3b9019ac361339f20cbb1664d62d6853aaa7c2855fbd60fd12"}]},{"bom-ref":"d13b764708f5e6c5","type":"file","name":"/juice-shop/node_modules/esprima/package.json","hashes":[{"alg":"SHA-1","content":"6c87daaded1f0130495358bdd1393757df2e9233"},{"alg":"SHA-256","content":"860df2e62153db26b370badf352d95edbf18e1eb54bdc2a479429b97155205b2"}]},{"bom-ref":"b9d6462ed3aba2bb","type":"file","name":"/juice-shop/node_modules/etag/package.json","hashes":[{"alg":"SHA-1","content":"e2debd5c6530254abe164bbd44f1e48b7c7c0018"},{"alg":"SHA-256","content":"836b9a5dd1c6af638f4602e83e2568277f9ab1f457db0b95d949c2a4ddb0462a"}]},{"bom-ref":"cfd1454d01adeb3c","type":"file","name":"/juice-shop/node_modules/ethers/node_modules/@types/node/package.json","hashes":[{"alg":"SHA-1","content":"dde693dc49d0c144fe2402fb5031a5bfc32207d7"},{"alg":"SHA-256","content":"d57a323bf4705370a5e2f0ce927e2f265017d2479fd31e9b32e11334c1550308"}]},{"bom-ref":"5e6e88ec2af24cef","type":"file","name":"/juice-shop/node_modules/ethers/node_modules/undici-types/package.json","hashes":[{"alg":"SHA-1","content":"648c0c8889b843ccd3d07972c8cb535517966ad9"},{"alg":"SHA-256","content":"0635ace61c576d1297d05c344c4fab0a77e8c88ffa185c9f18b23d18f7387c40"}]},{"bom-ref":"7ec7ea57e489f84a","type":"file","name":"/juice-shop/node_modules/ethers/package.json","hashes":[{"alg":"SHA-1","content":"341e8593c90d88ab6b8b325a87a396c011dad895"},{"alg":"SHA-256","content":"86117317a7713eb371f63ff1fbf9366f22459e9a8621e83dc17c8c93e479185c"}]},{"bom-ref":"80e35e6cfc93b03a","type":"file","name":"/juice-shop/node_modules/event-target-shim/package.json","hashes":[{"alg":"SHA-1","content":"ce8a2ce9da7170ce539fb64b1f91287aed3c5910"},{"alg":"SHA-256","content":"980bdd7706c72d04a4df2e3ee2c8ffccf3bc72bd8e7cd13ca38be00cafc6e8db"}]},{"bom-ref":"98fd29a82f98556f","type":"file","name":"/juice-shop/node_modules/eventemitter3/package.json","hashes":[{"alg":"SHA-1","content":"9735c2bc0d60a2aaa6d810d4cf1c47774b914f9c"},{"alg":"SHA-256","content":"675f6e2380c3118ca2c7e1bf39a2720b0eda169a282adabb0f38d27049a8283b"}]},{"bom-ref":"385c47cb15022fce","type":"file","name":"/juice-shop/node_modules/events/package.json","hashes":[{"alg":"SHA-1","content":"8aae12f382a34bc1dd6aae59d3f27e4098148e35"},{"alg":"SHA-256","content":"878ad3687fef7efe3757c1872a3af998c95197129a7445d632486a9591ee542e"}]},{"bom-ref":"19869fbbd9b433aa","type":"file","name":"/juice-shop/node_modules/eventsource-parser/package.json","hashes":[{"alg":"SHA-1","content":"8891ee39c65ac3e3b1e2a006e07c0f6c36f35253"},{"alg":"SHA-256","content":"fbf7bb33e1aeee68a24ad31c756a8e07730e4d84b1648b0f6888d2cfdb1cbc56"}]},{"bom-ref":"691b2670058c604b","type":"file","name":"/juice-shop/node_modules/exit-x/package.json","hashes":[{"alg":"SHA-1","content":"918feaff171528f47dca38f22b4a8f87048483dd"},{"alg":"SHA-256","content":"e987b0c7eaafc6ba68476fc5be7d661a4cd162b1f8de0547b97ff81f045f8346"}]},{"bom-ref":"8cd7cc8bebfb36d2","type":"file","name":"/juice-shop/node_modules/exit/package.json","hashes":[{"alg":"SHA-1","content":"ff06cfc562bae46b67f745152b929ef2aa7c08c6"},{"alg":"SHA-256","content":"5e2cb677a865c02d0a626eea6a718b9dd528cfb45ea20914bb6c396a7291c5e6"}]},{"bom-ref":"729fa6678872d3c1","type":"file","name":"/juice-shop/node_modules/expand-template/package.json","hashes":[{"alg":"SHA-1","content":"9fc7d90a7f18b4996e21b82c4eaff325c6ba07b9"},{"alg":"SHA-256","content":"90f652967155275d9fab2887a845454ee797340b28cc0c1b00f1889aaa65f771"}]},{"bom-ref":"7b5f86b8049cce6f","type":"file","name":"/juice-shop/node_modules/expand-tilde/package.json","hashes":[{"alg":"SHA-1","content":"89622a13cd2bfce8992324f0dd2331d2e59d5eb3"},{"alg":"SHA-256","content":"b2d0ab00c2e5d4f6a4ecf0d6a43cb88ce72f44b1847f5c09088c2a485aac07db"}]},{"bom-ref":"ea193f3551351ae2","type":"file","name":"/juice-shop/node_modules/exponential-backoff/package.json","hashes":[{"alg":"SHA-1","content":"ad6dedac96b4754817f15c7f62c6b1d72fa249fe"},{"alg":"SHA-256","content":"c3076cc23aa8d9f5123900305b9c174af612bfef91211c658ab914611dd86fa8"}]},{"bom-ref":"81ca7d73fc853551","type":"file","name":"/juice-shop/node_modules/express-ipfilter/package.json","hashes":[{"alg":"SHA-1","content":"5fe2e65eb6f608ec98f5d7008da0268741977bdd"},{"alg":"SHA-256","content":"716fb94c7b2816f24531c4faa87fe99d10d4bc87fcd5240157bfe8d9dc078fac"}]},{"bom-ref":"eec3c81addafab49","type":"file","name":"/juice-shop/node_modules/express-jwt/node_modules/jsonwebtoken/package.json","hashes":[{"alg":"SHA-1","content":"a202ae6847862336ee80642647cd5b5f63c78c0f"},{"alg":"SHA-256","content":"b47e393c9f3a368a8c9721dac7f50f2bb8ec02e11347366f6c5e600ae65e2133"}]},{"bom-ref":"304aae79d3db74d5","type":"file","name":"/juice-shop/node_modules/express-jwt/node_modules/moment/package.json","hashes":[{"alg":"SHA-1","content":"1256eb9bb42d4f145e4bcd9e95064d3b4943f1f1"},{"alg":"SHA-256","content":"b0a3d5ad3ee57c7bfc0803b6a38315c0b47501621742383a49af1b686f36a761"}]},{"bom-ref":"12d24fb58b585931","type":"file","name":"/juice-shop/node_modules/express-jwt/package.json","hashes":[{"alg":"SHA-1","content":"1360dc73f86f18b98bbfa0055fbf1d752740c055"},{"alg":"SHA-256","content":"ee2b6c1812872e159adc637a884c404e7a08eb31a49c4b0e93c808ab85219207"}]},{"bom-ref":"7a012a6b68834163","type":"file","name":"/juice-shop/node_modules/express-rate-limit/package.json","hashes":[{"alg":"SHA-1","content":"1ebdeb0dec13e1ee5d489b19a778944b4c35dd30"},{"alg":"SHA-256","content":"859e9ad6910938c8175dd88c8a6ee30bdda86d1798f3ea48aec816164de2c9a0"}]},{"bom-ref":"802dc94bbe6aa6ab","type":"file","name":"/juice-shop/node_modules/express-robots-txt/package.json","hashes":[{"alg":"SHA-1","content":"ee778d9a5d45cf536d1da3fe87d817e3fb65f599"},{"alg":"SHA-256","content":"ff38ca4c23992763a6e3647a806eb44093e2c64a3965d6bd5b6c8a7a3bb7085d"}]},{"bom-ref":"c93bc21a8f7cc527","type":"file","name":"/juice-shop/node_modules/express-security.txt/package.json","hashes":[{"alg":"SHA-1","content":"1d1f8efa7065c501ac19ce18c59773746c57698b"},{"alg":"SHA-256","content":"0309502f5ccd0218c615bc67d87263be0027d3c19860c9096a4917d823001033"}]},{"bom-ref":"15b33a200090b7a6","type":"file","name":"/juice-shop/node_modules/express/package.json","hashes":[{"alg":"SHA-1","content":"f23a499f62bd04cfd60f30df0912884de5a9d085"},{"alg":"SHA-256","content":"c7db3b72582355c80cdcef1ad7b2c9a8f53557550724c6bef8502e9818c2ebe7"}]},{"bom-ref":"d2d0d7ca7aec295a","type":"file","name":"/juice-shop/node_modules/ext-list/package.json","hashes":[{"alg":"SHA-1","content":"ed4b7b5ad0481785ef315749f1bece88fbd43112"},{"alg":"SHA-256","content":"1aa02cbc277189344e32609c0f7e9303811a0ebbf1691607343468975257a2be"}]},{"bom-ref":"8aa65198b6850bf9","type":"file","name":"/juice-shop/node_modules/ext-name/package.json","hashes":[{"alg":"SHA-1","content":"9cc0d1f321318a0de7c63a80cb66222a60be6b16"},{"alg":"SHA-256","content":"b7dd56ec22b6e02488e6631f3e8d0812228161b6f02e04d5f7f25a9e58f4fa53"}]},{"bom-ref":"74dc4ffc94dacd4d","type":"file","name":"/juice-shop/node_modules/extend/package.json","hashes":[{"alg":"SHA-1","content":"b6cd42f3e1865fe04ed104d8798d40232f74702a"},{"alg":"SHA-256","content":"8d891b3f00bead114c4741d8a594e7aaa59114f53782ec9a9319a619709dc14f"}]},{"bom-ref":"f800d8e6e41bb6f1","type":"file","name":"/juice-shop/node_modules/fast.js/package.json","hashes":[{"alg":"SHA-1","content":"b488db397e98dd361707f8fa4d775f93c1254866"},{"alg":"SHA-256","content":"41ebff4b9f6a6598b47d69e2546ae3e5a439a72642ad3900669e39356d71477c"}]},{"bom-ref":"2f4b4303f0966fac","type":"file","name":"/juice-shop/node_modules/fd-slicer/package.json","hashes":[{"alg":"SHA-1","content":"d8074c62f751ce835105f40fa0a95bcaa4979206"},{"alg":"SHA-256","content":"c765386ed427fcadd9ffd7ae1c7748d7127685098fdb85cde3d98df7e931ed2d"}]},{"bom-ref":"09e88e124bff5d80","type":"file","name":"/juice-shop/node_modules/feature-policy/package.json","hashes":[{"alg":"SHA-1","content":"ad637c779e1c1a9b45134570ea43e473ae44d2d9"},{"alg":"SHA-256","content":"a02b7816f5077eee026def9eef9b96f8511fa6e2995bacd168e0ad2311785317"}]},{"bom-ref":"d5a708ea7ecd9df2","type":"file","name":"/juice-shop/node_modules/fecha/package.json","hashes":[{"alg":"SHA-1","content":"217ec9bfd1608fa49904b38e4bd8e09291bffc1d"},{"alg":"SHA-256","content":"80ecd4a2611642303d3fdd2dcf480a806737c6b7e9b2306c9bb314fdf16c81d3"}]},{"bom-ref":"909a6637974b6b1f","type":"file","name":"/juice-shop/node_modules/file-stream-rotator/package.json","hashes":[{"alg":"SHA-1","content":"006a62bb3da1401fb420e93f831f9901d455e6a5"},{"alg":"SHA-256","content":"743a71077be1d7bd2181334b5259f97cf396edcc5b61eb92fb9b26995aab80c7"}]},{"bom-ref":"fef91987c7863e5e","type":"file","name":"/juice-shop/node_modules/file-type/package.json","hashes":[{"alg":"SHA-1","content":"9bc985e64fa6cc889fd63347ce118082115fbe7a"},{"alg":"SHA-256","content":"812c4de8a1af4058d6a1f7e38b2687a545d7273a9103058e8cf1177b5c95803c"}]},{"bom-ref":"365678b61099dd94","type":"file","name":"/juice-shop/node_modules/file-uri-to-path/package.json","hashes":[{"alg":"SHA-1","content":"5dee8a540c467ffbf9025481180c77a06a9f46f2"},{"alg":"SHA-256","content":"71eb1e24bb9694f89c613fa0aa307f977dd43f41d11794c7b48fabf6c55f66b0"}]},{"bom-ref":"d4649f733bf7c84f","type":"file","name":"/juice-shop/node_modules/filename-reserved-regex/package.json","hashes":[{"alg":"SHA-1","content":"9662d5519c4ea053d30cca8407bfe0e82c51fb76"},{"alg":"SHA-256","content":"cdbab11cec5a1837bda72ad9b1e91fa10cf22e634b4c1d550440b9a85e3dbd08"}]},{"bom-ref":"e1bd9a312827a88a","type":"file","name":"/juice-shop/node_modules/filenamify/package.json","hashes":[{"alg":"SHA-1","content":"ac191eead429dc383ad2b6b379a0e8ff1837bf28"},{"alg":"SHA-256","content":"60ac75b25fe301fa718dec448dd812e5e64ff07aea1de630b934508aea8d9b98"}]},{"bom-ref":"0af85138e63fbde9","type":"file","name":"/juice-shop/node_modules/fill-range/package.json","hashes":[{"alg":"SHA-1","content":"1682e8ba503f3836b55fc5763adfd0605f0d1b6a"},{"alg":"SHA-256","content":"87f5c78f9b47d21f9ca62b60cff1d250a3b468eab320dd13c3f3ab2464a02735"}]},{"bom-ref":"d9e299ef75ad64af","type":"file","name":"/juice-shop/node_modules/finale-rest/package.json","hashes":[{"alg":"SHA-1","content":"f9a24d135e58874e49a609e85eb002f28fb716bb"},{"alg":"SHA-256","content":"ef8d065b7073f5b58dc0f19f24263f0930dcf592e67ec4a94cd57b237b30a229"}]},{"bom-ref":"a4082e7ee3fb3faf","type":"file","name":"/juice-shop/node_modules/finalhandler/package.json","hashes":[{"alg":"SHA-1","content":"0e0e56a5c06345a6a43b7a61390736c503407420"},{"alg":"SHA-256","content":"4907275accd15800e34bd953b35b64e391dbe182f75d870a5a30da72b4e9271b"}]},{"bom-ref":"fea9479006974fa5","type":"file","name":"/juice-shop/node_modules/findup-sync/package.json","hashes":[{"alg":"SHA-1","content":"f68cd5a7999712c9082df2201062980e9b28fa16"},{"alg":"SHA-256","content":"10a04ec68f05ab4a6cc47917431544ee7cfe7b760065913a3c65cc7b743b6857"}]},{"bom-ref":"ac07afffb787ba21","type":"file","name":"/juice-shop/node_modules/fined/package.json","hashes":[{"alg":"SHA-1","content":"a1f7ac68d3496f59d5428c268fd757fa1df105f4"},{"alg":"SHA-256","content":"8d8b10b51c047096ab925bb9bb538cee021a246f36c61d675d12afc4f7953d9c"}]},{"bom-ref":"0e473f1d35d23918","type":"file","name":"/juice-shop/node_modules/flagged-respawn/package.json","hashes":[{"alg":"SHA-1","content":"515caf1e8682c8a724c316e64553e908828231f5"},{"alg":"SHA-256","content":"6c04c192754301ec51a5506c3e6d6b89db47803a4f261abd49b4bd3dfcc7d6cc"}]},{"bom-ref":"0c6426edb695518d","type":"file","name":"/juice-shop/node_modules/fn.name/package.json","hashes":[{"alg":"SHA-1","content":"339606d3e1f800255c7e03b02a94197f568cab3d"},{"alg":"SHA-256","content":"20d7245ef0121af63e27998ea2c1a477a712809f4a621ca5246869c32ff76cd9"}]},{"bom-ref":"d1454690602019c4","type":"file","name":"/juice-shop/node_modules/fontkit/package.json","hashes":[{"alg":"SHA-1","content":"1f933307496553b0ba751d5878ae0f0a8e661b40"},{"alg":"SHA-256","content":"ffece6cf3f8adcb72394784ccb3772696241a93ba64fcfb5c5f7226b24be0662"}]},{"bom-ref":"c739f428f1114e7d","type":"file","name":"/juice-shop/node_modules/for-each/package.json","hashes":[{"alg":"SHA-1","content":"1eb80e2f5665bd24adc0caa46741c4d4c52f4c02"},{"alg":"SHA-256","content":"789a488ade1ea7535497f7c86fded54281c4e7ff861fe8e0e667772a00680711"}]},{"bom-ref":"3b91d9540aa2d3e0","type":"file","name":"/juice-shop/node_modules/for-in/package.json","hashes":[{"alg":"SHA-1","content":"e68ca23447b0f106e434b1ca3071685929a40b7f"},{"alg":"SHA-256","content":"f0d68cfe65109d06cf02bcc45e4b8bc18678d530f580eb62d112d919473e2539"}]},{"bom-ref":"6d7a943e30086f5a","type":"file","name":"/juice-shop/node_modules/for-own/package.json","hashes":[{"alg":"SHA-1","content":"9e3f16c5c1c13709aca01bc598b74d6ebb48d447"},{"alg":"SHA-256","content":"2a10071296eaf81bef9f031ef4bacbf7a9d38cc3d262486a17e266801c105921"}]},{"bom-ref":"6d949c341704477e","type":"file","name":"/juice-shop/node_modules/foreachasync/package.json","hashes":[{"alg":"SHA-1","content":"f26165388b351226f15a9af7698ff5f7b9741e0f"},{"alg":"SHA-256","content":"5ea65195de8e3e84b0d005f186188ef895d92164b5e09f284e8697e7300221ff"}]},{"bom-ref":"a6b7e67487bc432f","type":"file","name":"/juice-shop/node_modules/foreground-child/node_modules/signal-exit/package.json","hashes":[{"alg":"SHA-1","content":"7ed47a76d7f1a65c0920cbf3d9f09c4adb9cc961"},{"alg":"SHA-256","content":"cd1c6cfa95782e432dd2affaa88c3a6dda7f46c8088d91f3acc0fba79dce5075"}]},{"bom-ref":"bc4ebb51a15d35d5","type":"file","name":"/juice-shop/node_modules/foreground-child/package.json","hashes":[{"alg":"SHA-1","content":"ca2af14071df0e6084e5797f9fbcf179d51f9e5d"},{"alg":"SHA-256","content":"434959cc3a188aa891e21bc23f5684421425722faf2dec45b7cff2ca2934bd6a"}]},{"bom-ref":"1a5244b1360fc32c","type":"file","name":"/juice-shop/node_modules/forwarded/package.json","hashes":[{"alg":"SHA-1","content":"5d558cad52024d41373ae030c0d7ff67e8dfd7fe"},{"alg":"SHA-256","content":"550a78f64b6a76bc353d6a10152af5750613d0d910f8478943176c1a6196158a"}]},{"bom-ref":"364b8acfea441803","type":"file","name":"/juice-shop/node_modules/fresh/package.json","hashes":[{"alg":"SHA-1","content":"6d90f7658279184066c5ee790cfa3dde6921951b"},{"alg":"SHA-256","content":"65f8ebd91560a3a6143f06bd9066d337bcf5f0c53e4a5329b98894f24eefb8b1"}]},{"bom-ref":"1a084d048261e3d3","type":"file","name":"/juice-shop/node_modules/from2/package.json","hashes":[{"alg":"SHA-1","content":"9be6ddd4214e1de4ee7027c4ea14ff38571d62ed"},{"alg":"SHA-256","content":"df32d5ef7cad54b2d82a468b91e81e657fb132ce6698f5fe308947eba083a5e7"}]},{"bom-ref":"6f37c6ca7bd513f6","type":"file","name":"/juice-shop/node_modules/fs-constants/package.json","hashes":[{"alg":"SHA-1","content":"554513fbd310c245ec547539af3c2326f5d38bda"},{"alg":"SHA-256","content":"9cefec768b4f8c52591b840367d077a46a5a2b72ea2778dcf037afd96b234671"}]},{"bom-ref":"806e27a718292c4c","type":"file","name":"/juice-shop/node_modules/fs-extra/package.json","hashes":[{"alg":"SHA-1","content":"dd47b6994e49f103b9c06ef05a5ef7fc210135a6"},{"alg":"SHA-256","content":"528b7d9a7708b1694510f752f286e7ef70f669fb604411645909252b3f99cd96"}]},{"bom-ref":"8e32dbf239ee024f","type":"file","name":"/juice-shop/node_modules/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"2e472ead48322dd560133d10f39db20ee5e3fae1"},{"alg":"SHA-256","content":"e90117e65341117ce56ab6aaa8b59291210601f69c63996fbe446a9a30237fc6"}]},{"bom-ref":"b9c2664bc699ddcd","type":"file","name":"/juice-shop/node_modules/fs.realpath/package.json","hashes":[{"alg":"SHA-1","content":"2ec89eb99a2117211b3879fa1bf42a4aac964a32"},{"alg":"SHA-256","content":"2985019b1b3cf5894df9b831816f7b480833931da982489e3a98c346ce7da897"}]},{"bom-ref":"612d5b3fb47bc074","type":"file","name":"/juice-shop/node_modules/fstream/package.json","hashes":[{"alg":"SHA-1","content":"acaf9487d855ef39c8c80b58d5ccec1d78ad67a8"},{"alg":"SHA-256","content":"167ac6b41593c409b18eea3aeb4272a2e33168404ac605a39d025eeb1b7f0675"}]},{"bom-ref":"3dea1fde2755f5ba","type":"file","name":"/juice-shop/node_modules/function-bind/package.json","hashes":[{"alg":"SHA-1","content":"1fdcd92c6ad33cfab1c556504198e29a38759a7c"},{"alg":"SHA-256","content":"edb1c4faf4148e6e3d74ed8dbac1a1dc359a647ff4207aad4851396dc7a3559a"}]},{"bom-ref":"95920d9f51cc66ca","type":"file","name":"/juice-shop/node_modules/functions-have-names/package.json","hashes":[{"alg":"SHA-1","content":"e2328af43e01e155fde631bd72d8a7800289d67b"},{"alg":"SHA-256","content":"b821fe786f7afa6f8b2090ddbc053717528314ed39bdbff0e283a0b0103afee5"}]},{"bom-ref":"47ad3db1f2d63631","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"b37cfda3b81ab97ca6c2845f42a134be22e90722"},{"alg":"SHA-256","content":"23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"}]},{"bom-ref":"405cf1d8dcae361c","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/is-fullwidth-code-point/package.json","hashes":[{"alg":"SHA-1","content":"d73a908990051ad245c6de40672de507997f8cf1"},{"alg":"SHA-256","content":"8bab82161f70f70214df34fdf7c1cdfcef69d9aea8e9a56a575991a5ed7d905e"}]},{"bom-ref":"b395a6d548b30216","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"0a17570915e73311d0800c28660e70971f5bff57"},{"alg":"SHA-256","content":"d33f936e64b142b548af5923f28d0e3bf1bc8cac3dca174bc0d1f8d068e91868"}]},{"bom-ref":"38a2bbc398ac2df8","type":"file","name":"/juice-shop/node_modules/gauge/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"c9e0a8f6be8feff9265983acd92a0e76e12888c3"},{"alg":"SHA-256","content":"60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54"}]},{"bom-ref":"eab61f2c1ea80a50","type":"file","name":"/juice-shop/node_modules/gauge/package.json","hashes":[{"alg":"SHA-1","content":"35539d2558f25a9c424168ea7396c72433795656"},{"alg":"SHA-256","content":"df591d77a6915f63b1930765f13d437c7d075024a794ccc608de1b0d3544da86"}]},{"bom-ref":"c84e9baf9f145d62","type":"file","name":"/juice-shop/node_modules/geojson-utils/package.json","hashes":[{"alg":"SHA-1","content":"d9f6a7f819508087eeee64a0a125a76eaea897b6"},{"alg":"SHA-256","content":"4c3a2f48a5d486a8339f987ec4fb672be0c6e8d0baf382fbcf7d77dc4f635bc0"}]},{"bom-ref":"3302145c278fd4e5","type":"file","name":"/juice-shop/node_modules/get-caller-file/package.json","hashes":[{"alg":"SHA-1","content":"89c75b65b2c80b295b9544b2c99086a517380f86"},{"alg":"SHA-256","content":"680a080d2885c05bc51dde429c80784bfb248ca3ef3685438079c5015721e2ae"}]},{"bom-ref":"ee4602458e685a0b","type":"file","name":"/juice-shop/node_modules/get-intrinsic/package.json","hashes":[{"alg":"SHA-1","content":"43046e9d01abc17bd97dcfc2dd8fa25bf8f8619c"},{"alg":"SHA-256","content":"45b14763baacc59b0fd7b39e3ad983d5d2aaf7f5ed682f2fce9edb469826c999"}]},{"bom-ref":"3c137963ce136039","type":"file","name":"/juice-shop/node_modules/get-proto/package.json","hashes":[{"alg":"SHA-1","content":"6dbd8c5f598b42b9445a7958c5749122e09158d4"},{"alg":"SHA-256","content":"73839e012ac7134a632c9d9fc6bdb700ac9ab5553cce39eb789ba2b65663e734"}]},{"bom-ref":"8128a63349967479","type":"file","name":"/juice-shop/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"ecf5eff5c593b997a40265bad859940565f1cf22"},{"alg":"SHA-256","content":"34078f73f1cd1b680486d29881da4a4ab72aae9e8f39ef097e3bfd6c7ce2c88c"}]},{"bom-ref":"965c766200871a5e","type":"file","name":"/juice-shop/node_modules/getobject/package.json","hashes":[{"alg":"SHA-1","content":"36da365b15fcfbe8dc2db30ab127d2f153c85c72"},{"alg":"SHA-256","content":"5cceaa22701866be935d5fc0e14bbcfa13ebe30b756932fc918827a81c56b33b"}]},{"bom-ref":"04739b4b0b357ead","type":"file","name":"/juice-shop/node_modules/github-from-package/example/package.json","hashes":[{"alg":"SHA-1","content":"34adfc587fde9ec7027c12386651c2b8d592646a"},{"alg":"SHA-256","content":"1b0a33ff4aad344b3d09605b854a4b5bcf1b79bef1dc821fc32d206ba7cc0cf8"}]},{"bom-ref":"ac319ed6a29675c6","type":"file","name":"/juice-shop/node_modules/github-from-package/package.json","hashes":[{"alg":"SHA-1","content":"72eb87470bfd738cfbaa08fdf06ec28b0c7f3775"},{"alg":"SHA-256","content":"67742aa2b856e3523c2f89132e41cc5026c49ffe7df58bd3ea906caaa217bd79"}]},{"bom-ref":"011bd861b97df881","type":"file","name":"/juice-shop/node_modules/glob/node_modules/brace-expansion/package.json","hashes":[{"alg":"SHA-1","content":"ee29327a8b50605e858da5a9ca35c4dca1a3a21f"},{"alg":"SHA-256","content":"579ffcbe9f96809c7f69366c34835370909b13669d757d6d614b030609f3aa12"}]},{"bom-ref":"154e3d94ebd33f0e","type":"file","name":"/juice-shop/node_modules/glob/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"dc1725a3de0ef90bdb2be99bebe81e96405817df"},{"alg":"SHA-256","content":"07347ae64d38f4cc1be3ffcc83322ec40d4609f5f3e9dc027ae91a4617239ac2"}]},{"bom-ref":"0a2922c6b83c8024","type":"file","name":"/juice-shop/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"05e7b265b75fb6b98f140712737e92c97c487cc9"},{"alg":"SHA-256","content":"5455b1a29f8c3f3b6a41c2c053bf0684f14464bb5360f7b8c8702bf45b2da0bb"}]},{"bom-ref":"67a5bcf114dbd68a","type":"file","name":"/juice-shop/node_modules/global-modules/package.json","hashes":[{"alg":"SHA-1","content":"7eb8f441c47a7147a88af25e4b180c0b19c0756f"},{"alg":"SHA-256","content":"d91d8ab2abee8c24045e372400accd67b4212357d592ee99eb41567bd422047a"}]},{"bom-ref":"beebfbdc8d728318","type":"file","name":"/juice-shop/node_modules/global-prefix/node_modules/ini/package.json","hashes":[{"alg":"SHA-1","content":"14b52ea8911e4e9f89acb4d876e87755e54529e2"},{"alg":"SHA-256","content":"8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4"}]},{"bom-ref":"3b69a8d9b67c8a90","type":"file","name":"/juice-shop/node_modules/global-prefix/node_modules/which/package.json","hashes":[{"alg":"SHA-1","content":"6aa908dedff8d74053157a8a908db304252c8549"},{"alg":"SHA-256","content":"88269288cdfae9bec4232d6b4fdbb4f52ad5db216219d6d701b02a2fde14162a"}]},{"bom-ref":"2b7d6ab6bba81dea","type":"file","name":"/juice-shop/node_modules/global-prefix/package.json","hashes":[{"alg":"SHA-1","content":"b819052d9650e51974f6e39f57bf125175b9860d"},{"alg":"SHA-256","content":"a58e288808740745879d771ed20d34c889572a6822709b545d661fa9a5555db2"}]},{"bom-ref":"4567bbe4621f5b55","type":"file","name":"/juice-shop/node_modules/gopd/package.json","hashes":[{"alg":"SHA-1","content":"682b4b77bd041501546a485298d662b1a54de702"},{"alg":"SHA-256","content":"33ace32dc861f6da9d1fd9d0a44c66e8c6ff3b13358d070683c1c2978ff5f19f"}]},{"bom-ref":"5a8cd0b5d4a37d88","type":"file","name":"/juice-shop/node_modules/got/node_modules/get-stream/package.json","hashes":[{"alg":"SHA-1","content":"000b39656a452f8e4ddcedb94597a6970c3f456a"},{"alg":"SHA-256","content":"08d0f76239ff04bf822de18ef5bff87f16fe6427b3bf8567b4fe3bf2176a320b"}]},{"bom-ref":"f35000189fe47c81","type":"file","name":"/juice-shop/node_modules/got/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"83bfcdb9fe6dc82ba77d9ef596eb6e0bafac5a71"},{"alg":"SHA-256","content":"7d90a2e3e51176476ad26a1ab00523dccc83a9f84d276695beb8f56b7850b772"}]},{"bom-ref":"051816eb83e876aa","type":"file","name":"/juice-shop/node_modules/got/package.json","hashes":[{"alg":"SHA-1","content":"1f84f9ede8d91e4fdaede119e1cb6dfac7162b92"},{"alg":"SHA-256","content":"37caee779790d68f90ed8b63f3f9658da3c70ddc7cf6d282a87779196b7c42bc"}]},{"bom-ref":"82e671cbb682865c","type":"file","name":"/juice-shop/node_modules/graceful-fs/package.json","hashes":[{"alg":"SHA-1","content":"21a733b3f7e2ee153041de90fb03d5596934f346"},{"alg":"SHA-256","content":"5747d4ba6b17165c6ecac30ab3a331715f41c7ad546e1f1574dab1bdcb116181"}]},{"bom-ref":"58c2e7bf393b113e","type":"file","name":"/juice-shop/node_modules/grunt-cli/package.json","hashes":[{"alg":"SHA-1","content":"e599b431cc2ab5680478c2f36e8f4cb0ff2512d0"},{"alg":"SHA-256","content":"211eb236d706637b386a9bd72e5f8e2846b19e9696ade720549a278c2a7fb54e"}]},{"bom-ref":"616db35a71e933b1","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"b37cfda3b81ab97ca6c2845f42a134be22e90722"},{"alg":"SHA-256","content":"23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"}]},{"bom-ref":"31895b4937c7a1d8","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"27a33893272864564ee2ba8b810d0f2bf4e30065"},{"alg":"SHA-256","content":"787f6262b31a31ec91978ac4488de398a4e780a8ce1e3a6fbbe17e3bdd105672"}]},{"bom-ref":"98711e398606917a","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/chalk/package.json","hashes":[{"alg":"SHA-1","content":"a1764894981b73b8c03d267fc59b5c2a8f46a25d"},{"alg":"SHA-256","content":"afb4ae5465de455d491b9ec2caac993f6c52b2c2b00d9817ef33077f6054316a"}]},{"bom-ref":"fe0dcb0d757f8f66","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/pretty-bytes/package.json","hashes":[{"alg":"SHA-1","content":"d4fe454f58534e1ef4b26586cce7560d0a0c1593"},{"alg":"SHA-256","content":"fb57051a060153501ecc4f0f405f694e4b8e354ff5a5e4a0e33ee47bdeca884f"}]},{"bom-ref":"0d76fa8126e4f978","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"c9e0a8f6be8feff9265983acd92a0e76e12888c3"},{"alg":"SHA-256","content":"60dfc6bf58aea11944e7ddf08e516814a33fe805c38620939a5a1d7303c0bc54"}]},{"bom-ref":"b982645346723c48","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/node_modules/supports-color/package.json","hashes":[{"alg":"SHA-1","content":"e492fe816d79b77deea6b08e79f1dd725e31968b"},{"alg":"SHA-256","content":"9b672598114d476cd159f22a3048f92feb9e2a26e3c0a5f2b097b00db96f7360"}]},{"bom-ref":"b6bd1383ccc1bb5a","type":"file","name":"/juice-shop/node_modules/grunt-contrib-compress/package.json","hashes":[{"alg":"SHA-1","content":"74b3b66c0b882c2f6ad989971446ef680e558834"},{"alg":"SHA-256","content":"d75fe9bb9ea6398b82febadba5e93001a8be6a2f73d2ab77fd7783cf981ec19b"}]},{"bom-ref":"9ecb07c41e201332","type":"file","name":"/juice-shop/node_modules/grunt-known-options/package.json","hashes":[{"alg":"SHA-1","content":"2f23630667ac2a43221ce73913f2a100444c9d3b"},{"alg":"SHA-256","content":"68aae8e3a01b7a135031a78b5f4f866a3613ae1d2e733d343d007d420f960412"}]},{"bom-ref":"c8509b24a929db1e","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"3c9ef7bd0a1c3d805814c654c457cc315c48c116"},{"alg":"SHA-256","content":"d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"}]},{"bom-ref":"22faf274df69e97c","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/chalk/package.json","hashes":[{"alg":"SHA-1","content":"651223fdfe370f7eeea056c8bb29f6303cabb3c1"},{"alg":"SHA-256","content":"9cd907d34a45cb73b5c8a459d5602a36ccd456794665c529a3a5b0f02e196f26"}]},{"bom-ref":"9fcc7fb3c8f220e9","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"},{"alg":"SHA-256","content":"9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"}]},{"bom-ref":"9da232166813eae3","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"},{"alg":"SHA-256","content":"4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"}]},{"bom-ref":"063af00e52b5181e","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/has-flag/package.json","hashes":[{"alg":"SHA-1","content":"688a5d7d9b58962757fdb849c4876e2ed534e12b"},{"alg":"SHA-256","content":"3fef4b52efbeabeadfffd5994e90b1025eb24263286e34170675956637d368b1"}]},{"bom-ref":"613266f4bb282bf9","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/node_modules/supports-color/package.json","hashes":[{"alg":"SHA-1","content":"3c4abe10bd7383f277a3eac3ce43359fd92ad32e"},{"alg":"SHA-256","content":"d410a772f9f64b224482ec13815a4bbf1837c533e1be04b3687755c48b2efa1f"}]},{"bom-ref":"d2fe059c08d5ac27","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log-utils/package.json","hashes":[{"alg":"SHA-1","content":"fd7bf6aca87308509a684eec0d57af6a97d2e673"},{"alg":"SHA-256","content":"0f3c2848bd95bc42d1d0907a53bc4c58af98d2fda3c6a392ff5f9eb3d7054f63"}]},{"bom-ref":"804706c860b40751","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log/node_modules/colors/package.json","hashes":[{"alg":"SHA-1","content":"1cd1c78691f7985f2a1b21d18698fcadcedef856"},{"alg":"SHA-256","content":"59591b6842c5175579cdb52ffb10c2cbda4bf4129755daa3bdc5d36059a65c24"}]},{"bom-ref":"9a23cf5be5e6011e","type":"file","name":"/juice-shop/node_modules/grunt-legacy-log/package.json","hashes":[{"alg":"SHA-1","content":"4776e43427b086f1197f9fe45d810e2e31994f42"},{"alg":"SHA-256","content":"f2ba99338a46596bc93ffb9b0bcaaf852093559fb8adc8a46a65c9f0b8570ca9"}]},{"bom-ref":"66be0bb515221fd9","type":"file","name":"/juice-shop/node_modules/grunt-legacy-util/package.json","hashes":[{"alg":"SHA-1","content":"ac0991341b67c10d582e6aaae42cf1a7f18bd5ff"},{"alg":"SHA-256","content":"73760a532d0d8ecaaf31356ee00535ea99aab390577db4ea274146280cac6d28"}]},{"bom-ref":"06f8b12d8acc73c9","type":"file","name":"/juice-shop/node_modules/grunt-replace-json/package.json","hashes":[{"alg":"SHA-1","content":"e3809536e511d1e2d35f1b474ecf83f0525a5488"},{"alg":"SHA-256","content":"48b4ef2e97791b7f824cf0d382e16ca0b3ab6b8f1a8554a17d214edfad8159e6"}]},{"bom-ref":"5263ba663c126f86","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/eventemitter2/package.json","hashes":[{"alg":"SHA-1","content":"7e98b1c611c82c90901f8e7482d39e23a940976b"},{"alg":"SHA-256","content":"2d91894dee5ab72977f359cbce89ab9161675cd0db8cb56ad6a93fec9a33fa59"}]},{"bom-ref":"92c829e60a5fc7a9","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"331a7d4bcec851ac4e7c1cc6624117fcab2be3af"},{"alg":"SHA-256","content":"3c5a47bd1991588b045fbb54fb4def5d52d9bbf1a8abfca39d370eb2274f6733"}]},{"bom-ref":"033f7eb17ec14a33","type":"file","name":"/juice-shop/node_modules/grunt/node_modules/iconv-lite/package.json","hashes":[{"alg":"SHA-1","content":"a3d90badf75db503f5dd3ff3fb76d120d1424978"},{"alg":"SHA-256","content":"3a9582fd121f841c245d1fcf84ef0b9e41c94b785b8d7eb63f9f5aec9bad0b98"}]},{"bom-ref":"d73bb0f1bd46efd0","type":"file","name":"/juice-shop/node_modules/grunt/package.json","hashes":[{"alg":"SHA-1","content":"9d2e82cae65e6c8c24f4685c74db6dbe7760f6ea"},{"alg":"SHA-256","content":"1cce5bfa08cfa562e267c67bb623c9b8612f548a6cd5cc16af92a3476000e005"}]},{"bom-ref":"5672485a27cc7f53","type":"file","name":"/juice-shop/node_modules/handlebars/package.json","hashes":[{"alg":"SHA-1","content":"303d964b8e10574fcd0e88ba8920b96b0b917c6d"},{"alg":"SHA-256","content":"110a52011f3d7e7c411851e485747e203e4d061fc88b435c75a3b1def6a2d135"}]},{"bom-ref":"2faecbbcaec48dbd","type":"file","name":"/juice-shop/node_modules/has-ansi/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"b37cfda3b81ab97ca6c2845f42a134be22e90722"},{"alg":"SHA-256","content":"23061f1352b3fe3c948a7a340f94fae9f5e08e430949f12e449636ba727b784b"}]},{"bom-ref":"e33bad3362a90aec","type":"file","name":"/juice-shop/node_modules/has-ansi/package.json","hashes":[{"alg":"SHA-1","content":"6d2a70595a6482fc03d6615decd51e24073d5bc0"},{"alg":"SHA-256","content":"9ef1a1efe1471d262ecb5f55215109d051a1ef556e79fdd8fb31300f84d8ec5a"}]},{"bom-ref":"fe883e727551607b","type":"file","name":"/juice-shop/node_modules/has-bigints/package.json","hashes":[{"alg":"SHA-1","content":"ac647a2de47db6928f257a8a1e3b4274c198e083"},{"alg":"SHA-256","content":"b811e76ed3775f79abd7ea695c4407d800678a71703762f50bdde6f1f03098d4"}]},{"bom-ref":"4fc154939830351a","type":"file","name":"/juice-shop/node_modules/has-flag/package.json","hashes":[{"alg":"SHA-1","content":"0a61b7395724eb79396b1cef110a74565de5ea88"},{"alg":"SHA-256","content":"5f786f6d16a53e7171fda89adc83bbd9c07fc17fb9de7ea78431283972593984"}]},{"bom-ref":"b2af6a257d4ebf91","type":"file","name":"/juice-shop/node_modules/has-property-descriptors/package.json","hashes":[{"alg":"SHA-1","content":"a3e6c1869a4e2f16574906fea431ce7a4bc1a022"},{"alg":"SHA-256","content":"59a91e2cf32e4303d248708999a9ec3afd8e3649a87ba7abcf2177dc1984e3d5"}]},{"bom-ref":"876df4d341302d20","type":"file","name":"/juice-shop/node_modules/has-symbol-support-x/package.json","hashes":[{"alg":"SHA-1","content":"2b9c85c4a1a16c5ebb307019bfadddbebba06a72"},{"alg":"SHA-256","content":"55cc66bb9aa16da08a9e70e21d258108b9b510b2fe39310959c54711b78dcba0"}]},{"bom-ref":"6733bec50ac7712c","type":"file","name":"/juice-shop/node_modules/has-symbols/package.json","hashes":[{"alg":"SHA-1","content":"8e49a565463e9e23d9c32d8ccc18009321af19bf"},{"alg":"SHA-256","content":"5190268c0e3308d7446d1f7c036238f329f786938453e6017cb90980b3612e7a"}]},{"bom-ref":"236a24581b8ba05f","type":"file","name":"/juice-shop/node_modules/has-to-string-tag-x/package.json","hashes":[{"alg":"SHA-1","content":"efa6ac5d32b7cf37e677de7c59bec08dfa68aefb"},{"alg":"SHA-256","content":"cfe639d187fa85a2ae2f8c0b5490ed8d26cee136ec7a18dbec93442805bb9172"}]},{"bom-ref":"7325d82121f7b4b1","type":"file","name":"/juice-shop/node_modules/has-tostringtag/package.json","hashes":[{"alg":"SHA-1","content":"75aeb5fec79dabebcda93a54b809a899fac1e214"},{"alg":"SHA-256","content":"30ab773c52021a6b800ea48f251abeeb1f6e378300f819204dfbb38d6e43f3ad"}]},{"bom-ref":"7fbddd0f0149134e","type":"file","name":"/juice-shop/node_modules/has-unicode/package.json","hashes":[{"alg":"SHA-1","content":"f25b286b591e5aa36e855957980e27569961d706"},{"alg":"SHA-256","content":"f106bbff8f1aed94ef54031d8a4e5ebd0275b3fefc15361a96150d9029a9d510"}]},{"bom-ref":"97e162694a0b3d44","type":"file","name":"/juice-shop/node_modules/hashids/esm/package.json","hashes":[{"alg":"SHA-1","content":"dbd2cf3b837c1ed989df0bd7c68e7e3afc422110"},{"alg":"SHA-256","content":"dc5dc8f11f4b9b6d3fce9aff5d9ca80a33a8fae0f3dbc936ca46c34544b9e193"}]},{"bom-ref":"852c5f326ee70caf","type":"file","name":"/juice-shop/node_modules/hashids/package.json","hashes":[{"alg":"SHA-1","content":"f80c92184acd8d5f637070d27846932cbed990ae"},{"alg":"SHA-256","content":"a259d571296946d349a9b2f60dccd26e3a212b122799b26e422c5c89989e42c5"}]},{"bom-ref":"e2a5ed95000ca82a","type":"file","name":"/juice-shop/node_modules/hasown/package.json","hashes":[{"alg":"SHA-1","content":"5221fc7eb2ef1f25edc665579aac82a8445062b3"},{"alg":"SHA-256","content":"0e7437fae8ec34f1d908723882b99919c749d8c0953d9afa38d2674154bdd0e6"}]},{"bom-ref":"ac93b20e7e85d8a9","type":"file","name":"/juice-shop/node_modules/hbs/package.json","hashes":[{"alg":"SHA-1","content":"903f0298d1493eb315a6f02c7cf4a300721fc255"},{"alg":"SHA-256","content":"252ef4c8ef71cd4915e53b07e38937a9915969670e4df1347040cbb267c2fdd4"}]},{"bom-ref":"6c81bd7491869ed4","type":"file","name":"/juice-shop/node_modules/helmet/package.json","hashes":[{"alg":"SHA-1","content":"f45fd39929e3c9ca97a65bbcaf3d1567920807a7"},{"alg":"SHA-256","content":"a4f9450eb1a4a5cf7615b6e6869daf0e15cb93b543c5468ccdc17bfb4b01060f"}]},{"bom-ref":"a4ab1e2a0de399d4","type":"file","name":"/juice-shop/node_modules/hoister/package.json","hashes":[{"alg":"SHA-1","content":"cf8c5433ce82de1669c33ced53ca7921137caaf7"},{"alg":"SHA-256","content":"f933fea588f1f4793a42af6167cb2eda0e8870482e63e578117b1bbd9cca40ee"}]},{"bom-ref":"7770be27d5920308","type":"file","name":"/juice-shop/node_modules/homedir-polyfill/package.json","hashes":[{"alg":"SHA-1","content":"90510f253e4efff50c5b4abb632aabb3ece8a9ca"},{"alg":"SHA-256","content":"b841920660c6b6a524d764904a766cc59c401ebaa523b12a3fd429f7774d7159"}]},{"bom-ref":"a4463b3fe9ffe6c4","type":"file","name":"/juice-shop/node_modules/hooker/package.json","hashes":[{"alg":"SHA-1","content":"67494ba80a66767922c1d09ad788b0942f13e20f"},{"alg":"SHA-256","content":"6e06c9d7c91cf44224f8d3032172ac0b653728eee2e020ea6e0c6ab95d1f00de"}]},{"bom-ref":"25cad5e510e7222c","type":"file","name":"/juice-shop/node_modules/html-entities/package.json","hashes":[{"alg":"SHA-1","content":"bc9154a0b80955c1b19d667648d70cc2624d64e6"},{"alg":"SHA-256","content":"26f25169d8e5b02059de306c648403c215fc5e26251ad6be2717b5731bfb2ee8"}]},{"bom-ref":"de196616e834485c","type":"file","name":"/juice-shop/node_modules/http-cache-semantics/package.json","hashes":[{"alg":"SHA-1","content":"5d4b738e14b91ea4619d48058717be58524ebed7"},{"alg":"SHA-256","content":"5b7911fc41261e41b08d55a9586b8fca73b22d61496c39d46be353033d2867f3"}]},{"bom-ref":"9ae2b00e3d80026b","type":"file","name":"/juice-shop/node_modules/http-errors/package.json","hashes":[{"alg":"SHA-1","content":"23e3c3f5ca5a315e223ba47751bacc3550a10865"},{"alg":"SHA-256","content":"d540721372bf8bf77b5fad31f6567a916e24d0aeeb78c81ba92b69feea9f1eef"}]},{"bom-ref":"9caac213d01820a2","type":"file","name":"/juice-shop/node_modules/http-proxy-agent/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"},{"alg":"SHA-256","content":"ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"}]},{"bom-ref":"8c937cab7e53c98f","type":"file","name":"/juice-shop/node_modules/http-proxy-agent/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"3515cb99dcab89f3","type":"file","name":"/juice-shop/node_modules/http-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"f8b2b2bf2f3e2f8491496f9efe80b96442a803a9"},{"alg":"SHA-256","content":"38b61961aa0ba3028f2e120b3d883179281f6ba25fe22ff2214bf9f363161b65"}]},{"bom-ref":"7b7291fc088fd1ea","type":"file","name":"/juice-shop/node_modules/https-proxy-agent/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"},{"alg":"SHA-256","content":"ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"}]},{"bom-ref":"4f1e19542d709dc0","type":"file","name":"/juice-shop/node_modules/https-proxy-agent/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"3305d3fb7230afc1","type":"file","name":"/juice-shop/node_modules/https-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"17ea193ab8be5c579a2d10e9a13bff389858f7e8"},{"alg":"SHA-256","content":"b08c1977d38f14f4be7fb5be33aab545e3e5a6e2e12100733a6ad97dec995206"}]},{"bom-ref":"d65089f9e86f88a0","type":"file","name":"/juice-shop/node_modules/humanize-ms/package.json","hashes":[{"alg":"SHA-1","content":"e6e3f6368e65173263dd3f9fa806de8e74c54217"},{"alg":"SHA-256","content":"b5cf746b84d4d4afcda0f9fd59c2120fed5e7f7be1ec52293879a8c13f30eced"}]},{"bom-ref":"ed400f3d2cbfdeea","type":"file","name":"/juice-shop/node_modules/i18n/package.json","hashes":[{"alg":"SHA-1","content":"0893936ce514e10f9e39f4173ec28715250a6baf"},{"alg":"SHA-256","content":"ea677f104de62c409c47338fbda0b12a31c074de2aec35a134ab07191f0f49e9"}]},{"bom-ref":"f21bbbbc5a1676e2","type":"file","name":"/juice-shop/node_modules/iconv-lite/package.json","hashes":[{"alg":"SHA-1","content":"a1e76edb6428e44345ed3851ff7af5d850434cf5"},{"alg":"SHA-256","content":"6f7c96c32f7d6e0498be71b0ccedaf298bb00ab4dd40c1d63655ec53477db384"}]},{"bom-ref":"249792a85a27788a","type":"file","name":"/juice-shop/node_modules/ieee754/package.json","hashes":[{"alg":"SHA-1","content":"19b82f401d4e2ef5db8528a35b2e12d1a2630d65"},{"alg":"SHA-256","content":"a8004b9c8dffe2e1b01a058ecf968a5d50beabcabc43cc98c655184ba6afc050"}]},{"bom-ref":"0dedf75b9a519d2a","type":"file","name":"/juice-shop/node_modules/ignore-walk/package.json","hashes":[{"alg":"SHA-1","content":"90dc22d9d2ed240a66e727ea9b8931ebcb8ae1eb"},{"alg":"SHA-256","content":"e7ebec436cd93ccc3827d6a2b4d4e30da28d063604a4e4640cdfe9116b82a9b3"}]},{"bom-ref":"850715eb15cf59d7","type":"file","name":"/juice-shop/node_modules/iltorb/package.json","hashes":[{"alg":"SHA-1","content":"6567bb730f22b22008933aee31fa214b59532e2f"},{"alg":"SHA-256","content":"8770f6e48b68a8c6870ee796c921140bd48879772b1917bd9bc3b5b7f9f47e28"}]},{"bom-ref":"75aadabbd67ee2e6","type":"file","name":"/juice-shop/node_modules/imurmurhash/package.json","hashes":[{"alg":"SHA-1","content":"a28f2b413385af4188c4fc0ad1e0c38c2cd03cf4"},{"alg":"SHA-256","content":"aa3b07e7fa3d63aa96e401c3842b8cca1dd3247954baf92377094766e903c185"}]},{"bom-ref":"9813bd1cd61ebbc4","type":"file","name":"/juice-shop/node_modules/indent-string/package.json","hashes":[{"alg":"SHA-1","content":"8e67654392f062ebc5cd54e0f7d06427700e73b9"},{"alg":"SHA-256","content":"5b15d951490ea56f6309d9203e1c3cfd036ad1c67ca1c7f372cbfdfbf3faecb7"}]},{"bom-ref":"117aea536f4eb24c","type":"file","name":"/juice-shop/node_modules/infer-owner/package.json","hashes":[{"alg":"SHA-1","content":"520dabd4fd509ef15c618b6a8dac1f070f82a4dc"},{"alg":"SHA-256","content":"84793570c7d0565481a1a713f9430d01987103e2e7d6c3121b1e6054eec1f625"}]},{"bom-ref":"b7a2665cc80af54b","type":"file","name":"/juice-shop/node_modules/inflection/package.json","hashes":[{"alg":"SHA-1","content":"a346ba8ba91330083e37d70e74f0ac7300a07797"},{"alg":"SHA-256","content":"658ab85279b559d1126b7fb7ec389a22eefdbb186378c672ccb1524b51fc6986"}]},{"bom-ref":"b917461b48fd3cac","type":"file","name":"/juice-shop/node_modules/inflight/package.json","hashes":[{"alg":"SHA-1","content":"40e50820beed8bfee8ce186d5be617a8c213e7e1"},{"alg":"SHA-256","content":"5f2489e13f73e9ebad999134fae8a591f6d8b58e8341ec8e3b33397c4d1ef817"}]},{"bom-ref":"444252544c58c4a3","type":"file","name":"/juice-shop/node_modules/inherits/package.json","hashes":[{"alg":"SHA-1","content":"62b11dd736a0047fbd8d2dc0406d2118a549a359"},{"alg":"SHA-256","content":"be645800bc94fd8de29c8ae91690549b316cc437100108aeea7b2f347693cc80"}]},{"bom-ref":"32f129cf490acc1e","type":"file","name":"/juice-shop/node_modules/internal-slot/package.json","hashes":[{"alg":"SHA-1","content":"696536e795e6ff3c47d56b9e644e5e35d132a691"},{"alg":"SHA-256","content":"c75e491911f4ec299ffa5415dd20e914feea1b69ddccea2a58c82b6e4c7a714c"}]},{"bom-ref":"52cb46283cc3c2cc","type":"file","name":"/juice-shop/node_modules/interpret/package.json","hashes":[{"alg":"SHA-1","content":"40169e9ec112583cdb2c363d627b7a16ea7fe3d1"},{"alg":"SHA-256","content":"b768bb2ae4ceec49a06dadb163165eb2af172baf43288f94e2c2d53b187175f6"}]},{"bom-ref":"5ad4fbd6aa1432b1","type":"file","name":"/juice-shop/node_modules/into-stream/package.json","hashes":[{"alg":"SHA-1","content":"71a5a430e9790858c3a6c90e6d9d072353ce2e40"},{"alg":"SHA-256","content":"882d4f5836f96d6c6a801aac00c2b928588508ca1d43fbea337602afa6fd607f"}]},{"bom-ref":"7df95a6ff73fdfeb","type":"file","name":"/juice-shop/node_modules/invariant/package.json","hashes":[{"alg":"SHA-1","content":"59f8a398ae23614df8c1d975429934fdf9bc1949"},{"alg":"SHA-256","content":"ef0c08d9f91029e247bb570a04903f3a9bd646c1f2128d29e69ee171794cd2a3"}]},{"bom-ref":"640ff5d9cd33ffcf","type":"file","name":"/juice-shop/node_modules/ip-address/package.json","hashes":[{"alg":"SHA-1","content":"b8fc7d207cc0a71982e0f2e85879ac39110ee51e"},{"alg":"SHA-256","content":"efb3d32c0c7996237f78af8fd820e3d58e66fa76593fb329fab6b3ccb260afd6"}]},{"bom-ref":"0436578906d27e42","type":"file","name":"/juice-shop/node_modules/ip6/package.json","hashes":[{"alg":"SHA-1","content":"7165eada544861027677ddcdf213c4e5967a3d18"},{"alg":"SHA-256","content":"dfea7973e120653c2568cb8eb65e89d8ae8c25ab4995c4ff5e2cd5b7976f8a7d"}]},{"bom-ref":"2642635df213036e","type":"file","name":"/juice-shop/node_modules/ipaddr.js/package.json","hashes":[{"alg":"SHA-1","content":"532be044ce57a9f81fed35f3742767f587cfbc95"},{"alg":"SHA-256","content":"fc1071893728a0e78fa40ce0dbe04c5a1021179fdcb5b229f274e3556d6a87cd"}]},{"bom-ref":"297e84889b5744f5","type":"file","name":"/juice-shop/node_modules/is-absolute/package.json","hashes":[{"alg":"SHA-1","content":"4bb791bb15f2343372fbbce4a46304777cd7704d"},{"alg":"SHA-256","content":"fdd72b01eac6f6d37dae881d90cb127758f9c5053e85c8487d323aac1e45cac0"}]},{"bom-ref":"24919c70e961d9e3","type":"file","name":"/juice-shop/node_modules/is-arguments/package.json","hashes":[{"alg":"SHA-1","content":"8c0d7ca0e6fe66cd74d472528d04778eb7cc50d9"},{"alg":"SHA-256","content":"8962afc6bca1e62fc8d6413c1c82b0e060ff51fec9cb1d00d7c6b82337666e52"}]},{"bom-ref":"fe3093940a96e1b4","type":"file","name":"/juice-shop/node_modules/is-array-buffer/package.json","hashes":[{"alg":"SHA-1","content":"44fd3e5dfa707791be92aeeecc0fb3533b39bc71"},{"alg":"SHA-256","content":"38a3c4698e3f4f2235481483558a96e67be7e4e90ce5647950da73efd7ccfb1a"}]},{"bom-ref":"ba6161cb53e2e29b","type":"file","name":"/juice-shop/node_modules/is-bigint/package.json","hashes":[{"alg":"SHA-1","content":"68ec3664ed0d57b4cbbe598a49fadeef06b82fad"},{"alg":"SHA-256","content":"079916fe1d9e42dd3ed230521911d4ffa718f3bbd7efcc53d4bd8803b0cd11d9"}]},{"bom-ref":"454408b1c839f347","type":"file","name":"/juice-shop/node_modules/is-boolean-object/package.json","hashes":[{"alg":"SHA-1","content":"d8e80fa1a4ea5a6e58e4be826e5496a24df823e1"},{"alg":"SHA-256","content":"908dcc16536fcfa62185c80010d9e92891f41e1d279b337d830d99a8dae9aed5"}]},{"bom-ref":"841da918c26be2c5","type":"file","name":"/juice-shop/node_modules/is-callable/package.json","hashes":[{"alg":"SHA-1","content":"1f39ab1f57f84f43ff79dda15e9b93d7f138d73d"},{"alg":"SHA-256","content":"0d0981565f03ca488d263c94d038717ec4face8b129b8ff18e792dabae2af755"}]},{"bom-ref":"9c1c4717fe9e80f9","type":"file","name":"/juice-shop/node_modules/is-core-module/package.json","hashes":[{"alg":"SHA-1","content":"39faf2be321b4a2f72d8fa7b72f4858163647b59"},{"alg":"SHA-256","content":"49d7841f3d48b2a09473b294a720b857d4450b10f4858d509edacb443555312e"}]},{"bom-ref":"ee226a5355439bd7","type":"file","name":"/juice-shop/node_modules/is-date-object/package.json","hashes":[{"alg":"SHA-1","content":"0fdae008400e5f301759c2465a5776cef0d74193"},{"alg":"SHA-256","content":"224b3f8b6f9564aba91aefa417a925e00f3be92896af5bbeecf1e9e669e05ba5"}]},{"bom-ref":"0032317fd69fb2d5","type":"file","name":"/juice-shop/node_modules/is-expression/node_modules/acorn/package.json","hashes":[{"alg":"SHA-1","content":"f1ed049ec2757f4914862b3854b26363806c4859"},{"alg":"SHA-256","content":"dfcd42c47d09aa794214c28476d5b519c157e17d9490eb2c50faee3defd041bc"}]},{"bom-ref":"affbcc571713ebb9","type":"file","name":"/juice-shop/node_modules/is-expression/package.json","hashes":[{"alg":"SHA-1","content":"a58f5d6e36c8bede8f377c6ade9bea70208318be"},{"alg":"SHA-256","content":"a87a48e8070af76c07b15557619ffbb6975f093121f5636fe69fa2f7f7d3ee81"}]},{"bom-ref":"606c977dd71d4271","type":"file","name":"/juice-shop/node_modules/is-extglob/package.json","hashes":[{"alg":"SHA-1","content":"3f1247dc7f917eba16d9607c17eb9818d2bf43eb"},{"alg":"SHA-256","content":"8031afcd87f448d75ba8a5dd2cde9c68f982a94f406ebae8e5fb7cf6dfdeede2"}]},{"bom-ref":"8410f67339212229","type":"file","name":"/juice-shop/node_modules/is-fullwidth-code-point/package.json","hashes":[{"alg":"SHA-1","content":"49dbcba3eb3e3cba5b97bce28eb6194775d23c88"},{"alg":"SHA-256","content":"5b48496ca129073ed44a677b777ea3b91366c8bc228bc75fe858749a78ac1a32"}]},{"bom-ref":"8dfb23f0a6ad62ef","type":"file","name":"/juice-shop/node_modules/is-glob/package.json","hashes":[{"alg":"SHA-1","content":"57a53965f8f746a1f0f29696ad6e770a8beff7e5"},{"alg":"SHA-256","content":"1cce62b80db12fc033d85250b5881b1a288476229abda8e1abd983724befd56f"}]},{"bom-ref":"ae7e0d01ce9f8571","type":"file","name":"/juice-shop/node_modules/is-lambda/package.json","hashes":[{"alg":"SHA-1","content":"d7d1ac3b9e27615002074f87da8c39e91995ee88"},{"alg":"SHA-256","content":"55c72a97449e2b52a5b763bf6cfa7de3b9603fe2a57074066ddcbf522578c9b6"}]},{"bom-ref":"b5124131db2784b3","type":"file","name":"/juice-shop/node_modules/is-map/package.json","hashes":[{"alg":"SHA-1","content":"ed28234ea9e98bffdfbf923897ff644aa9e154d7"},{"alg":"SHA-256","content":"b2d7c205058919c957fed69cbf8cdcd589dfc82c0aadc4c2e298f9ee3afd296a"}]},{"bom-ref":"6b31909806a75e7c","type":"file","name":"/juice-shop/node_modules/is-natural-number/package.json","hashes":[{"alg":"SHA-1","content":"096ffbf63a49e913e7758b58ceb3b64305517ba9"},{"alg":"SHA-256","content":"9170a51c5342b4a707c55517d66f7459ee82efa50169f1d9a1d98b345fbf6acb"}]},{"bom-ref":"4c0460b06f9a24dc","type":"file","name":"/juice-shop/node_modules/is-number-like/package.json","hashes":[{"alg":"SHA-1","content":"fbfa13f628360f4178cca9025b4df52da7e81863"},{"alg":"SHA-256","content":"34ac5ec903e8f8eae2536d33611a0003ac66e8bae7dabb2706b42af74b54578c"}]},{"bom-ref":"28e5f4fe030ed007","type":"file","name":"/juice-shop/node_modules/is-number-object/package.json","hashes":[{"alg":"SHA-1","content":"64ce0f3ea95faf731a61339f0cdf8586ee2e7e15"},{"alg":"SHA-256","content":"0f647c3741eea832398ec6d2fab6dfc7d431e3a66e3def47ef01dae9ac79eb53"}]},{"bom-ref":"c97cee849a0e9adc","type":"file","name":"/juice-shop/node_modules/is-number/package.json","hashes":[{"alg":"SHA-1","content":"2bd4ba6c07c12d2b7af0035e57b46cbb7e133477"},{"alg":"SHA-256","content":"51c133f4e41df982aef69027249ff9d7262645029f437d079adc7c83328fb620"}]},{"bom-ref":"38445b9b0be5d964","type":"file","name":"/juice-shop/node_modules/is-object/package.json","hashes":[{"alg":"SHA-1","content":"84ae32267e3fa601a9457e3361fd63c48a864595"},{"alg":"SHA-256","content":"23bab3622439df0c6ade1d7671e6609eb55abe359b559da21c6ac1e8ba92754c"}]},{"bom-ref":"36563eec6496d1be","type":"file","name":"/juice-shop/node_modules/is-plain-obj/package.json","hashes":[{"alg":"SHA-1","content":"96165e985c551894f224d8ef606b1cf98689b7ac"},{"alg":"SHA-256","content":"3f2d9ecc4ad7921576d65361b4fce21c5cfee72a4fc18e38b6c2050738df67d1"}]},{"bom-ref":"5c974df87a554e00","type":"file","name":"/juice-shop/node_modules/is-plain-object/package.json","hashes":[{"alg":"SHA-1","content":"1793cde25acd0f4f2d9f820d34c8675543770b93"},{"alg":"SHA-256","content":"9d230b1f721ff1453f40e10824eb4048072ba04c3d63979c48d59c20fabdbb96"}]},{"bom-ref":"55145fd4decdfed4","type":"file","name":"/juice-shop/node_modules/is-promise/package.json","hashes":[{"alg":"SHA-1","content":"204b9c0844ad7952b8c714a076936074a9813263"},{"alg":"SHA-256","content":"ebb992f44a73d06d3af839970ae14fa2a5a70a5dad61b527c21a9d89a774a617"}]},{"bom-ref":"24151757a6c6a142","type":"file","name":"/juice-shop/node_modules/is-regex/package.json","hashes":[{"alg":"SHA-1","content":"5693e910887ef21be281e8860ca0c3a29e59e794"},{"alg":"SHA-256","content":"b99ff9cb5a079a1d6060bce2d31f06780d4296539a5b57106047a86561cd4db3"}]},{"bom-ref":"c5a4b747f7c76e54","type":"file","name":"/juice-shop/node_modules/is-relative/package.json","hashes":[{"alg":"SHA-1","content":"259ca538dacebc5458a1deef3600da0469f1f5de"},{"alg":"SHA-256","content":"b4059db81cb29586779cb6281b3ca0605774e1185e0b92432d6da2e8da3ad45c"}]},{"bom-ref":"dc64eb8ada5cf9bc","type":"file","name":"/juice-shop/node_modules/is-retry-allowed/package.json","hashes":[{"alg":"SHA-1","content":"b8190b0addd0dde7253ba68348942036fc545ee5"},{"alg":"SHA-256","content":"b9c34d3385c5f3050b73c5650977c0af8963165ecbba9f3c85d618c55b4f3486"}]},{"bom-ref":"8dcdc08fd11f9555","type":"file","name":"/juice-shop/node_modules/is-set/package.json","hashes":[{"alg":"SHA-1","content":"e0bfd95803a081436377c6057b747d27d1ce1fb9"},{"alg":"SHA-256","content":"1e23457a11d7836233f8a98ee97dd7a2cfdde4381e46a92b160ffeffe2c3d001"}]},{"bom-ref":"9f86705daac27dbe","type":"file","name":"/juice-shop/node_modules/is-shared-array-buffer/package.json","hashes":[{"alg":"SHA-1","content":"983f03d977afdaa38aca26493740f8eaca2f6d04"},{"alg":"SHA-256","content":"a8c03e6ca8d6879d13cd4bc2cfd1e14c634006532a295016f4abdee27f5877e8"}]},{"bom-ref":"2bafa696f83c5442","type":"file","name":"/juice-shop/node_modules/is-stream/package.json","hashes":[{"alg":"SHA-1","content":"f2f490f635a13ed709ee5c0605df8067905ddec1"},{"alg":"SHA-256","content":"8cab336575fb9e86b6f6473b57fe06b734e7443a2f25359b542b289e9cb2c010"}]},{"bom-ref":"d500e168ac50735b","type":"file","name":"/juice-shop/node_modules/is-string/package.json","hashes":[{"alg":"SHA-1","content":"1631d23f33757d6197f8ad6d696832b1a2759059"},{"alg":"SHA-256","content":"e34f86b9cc8a1811587ca3eb5efdb7f158f3646693b5e657e7188c52b54a696c"}]},{"bom-ref":"a6426cf7d5f7d7e8","type":"file","name":"/juice-shop/node_modules/is-symbol/package.json","hashes":[{"alg":"SHA-1","content":"25682cb00f7d9b3167931c5bb00906dad9973d42"},{"alg":"SHA-256","content":"ae8d1155c6252e4b7077944b25b03a2c175ae632e3ee78508f12cc1c94f8296a"}]},{"bom-ref":"eca69a82bf010990","type":"file","name":"/juice-shop/node_modules/is-typed-array/package.json","hashes":[{"alg":"SHA-1","content":"a069bc3c4312b2c2911625277a938f265f8b80c6"},{"alg":"SHA-256","content":"51dcf15ccc424ce76b36bef2ef64df7a53e75294cbddf08b4f7e639133145cc5"}]},{"bom-ref":"f5bb87022800809f","type":"file","name":"/juice-shop/node_modules/is-unc-path/package.json","hashes":[{"alg":"SHA-1","content":"56e3e8226782aa420417222268679e375aea5155"},{"alg":"SHA-256","content":"b2edd3e5cf18fc0076ac78ca155cf7d892cd6525b5cc8995cdd57d2d40051860"}]},{"bom-ref":"ccaa358632c3012c","type":"file","name":"/juice-shop/node_modules/is-weakmap/package.json","hashes":[{"alg":"SHA-1","content":"18426dc3cc1e36705e80b9508a7c45f0f7d1e8f8"},{"alg":"SHA-256","content":"483ce3a97e913446c2e43013b79ae03240d583d938a61c3c3c0e2f095f56b553"}]},{"bom-ref":"28424c9275fb51bb","type":"file","name":"/juice-shop/node_modules/is-weakset/package.json","hashes":[{"alg":"SHA-1","content":"70492aadf02d82ca5637e0ba90fa98040501ba27"},{"alg":"SHA-256","content":"689f191f14c6dd30bfc0325475a738cd9633cf632c8e4ec81714591817b4ad36"}]},{"bom-ref":"023251c68683075e","type":"file","name":"/juice-shop/node_modules/is-windows/package.json","hashes":[{"alg":"SHA-1","content":"f452f4328f713c711a0e207be3d8a0958222c892"},{"alg":"SHA-256","content":"78963f69e47d6fb7b090bddd4e4eba074627fa32d5c4841a1839be88cf1418e1"}]},{"bom-ref":"4caccd40a431016c","type":"file","name":"/juice-shop/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"73e13702b019b992300caa912bc2322a9093e21e"},{"alg":"SHA-256","content":"b0802c09bce6bf067d3e5f52390ea26972e11c88bb6ae38991316ac83ca14127"}]},{"bom-ref":"e9cc72a1f391dd78","type":"file","name":"/juice-shop/node_modules/isexe/package.json","hashes":[{"alg":"SHA-1","content":"3b3eab80c4ffd08eef6b3381b98de7be3649d06b"},{"alg":"SHA-256","content":"395c2af9abeeaafe7391974c1eacfb2a2bdeef187f21c3f5582c49e0368e59bf"}]},{"bom-ref":"51601545544ca18d","type":"file","name":"/juice-shop/node_modules/isobject/package.json","hashes":[{"alg":"SHA-1","content":"dd20c4d536aa7a67fb5ed1eb4e5122ecd57534a9"},{"alg":"SHA-256","content":"c66c0936c8ac63e97aca4e747fe0da8df7d6f093eeb47fb29d4d186c41272465"}]},{"bom-ref":"bd504ac489a4004e","type":"file","name":"/juice-shop/node_modules/isurl/package.json","hashes":[{"alg":"SHA-1","content":"cd24cb01b3ad1b0497249531912561ccd258c46a"},{"alg":"SHA-256","content":"9396a58aa6e42df65f7aecb92a08e6b5a84ecd6485ddfe9a3d481e7fd2cf1251"}]},{"bom-ref":"f1973146e421e80c","type":"file","name":"/juice-shop/node_modules/jackspeak/package.json","hashes":[{"alg":"SHA-1","content":"15e15f7f7565d0a355be813b2e68eb35e65102a5"},{"alg":"SHA-256","content":"3379e9c1be25729a6c7fc160e840108e15895c368e8060e42f68598f9f3065cd"}]},{"bom-ref":"e97dfb4c1a0fedfe","type":"file","name":"/juice-shop/node_modules/js-stringify/package.json","hashes":[{"alg":"SHA-1","content":"8828486a7978be6f38eb93353a990f4b00a7fc66"},{"alg":"SHA-256","content":"133b036b739bb71c44008eb9c2bee9fd3169327fff26d2b390c63ccd70f8c3fc"}]},{"bom-ref":"057a4a954b3ba206","type":"file","name":"/juice-shop/node_modules/js-tokens/package.json","hashes":[{"alg":"SHA-1","content":"6704feb8cbaf803288d9185a2fc86017e24ba55b"},{"alg":"SHA-256","content":"47345931827b3e26db9fe690abb81f856a0d040cbca8af1e69711a64cd58ce0d"}]},{"bom-ref":"ff51a9d522da2cd4","type":"file","name":"/juice-shop/node_modules/js-yaml/package.json","hashes":[{"alg":"SHA-1","content":"95731315a952b3ce6af42e97eea092eacd9ebcfc"},{"alg":"SHA-256","content":"4cdbd7e882f90a7f551726d9ae3ecd8363fd31b39a9d2970dcd0ea46e24c8ede"}]},{"bom-ref":"1bd4404754241d69","type":"file","name":"/juice-shop/node_modules/json-schema/package.json","hashes":[{"alg":"SHA-1","content":"513648712db28c1a0ea3abee63698dd426a84a7b"},{"alg":"SHA-256","content":"22fe1fdf2eb8925bb5ea40f4dbff8fbfcd695190362afeadb8ce1b7d79f6f3f0"}]},{"bom-ref":"49e24851e6ed82cb","type":"file","name":"/juice-shop/node_modules/json5/package.json","hashes":[{"alg":"SHA-1","content":"7a38f8d159bc79dac6ac618707de02fcd3063f2e"},{"alg":"SHA-256","content":"1927c4592e3811cf9b8c86e568df1c41a373b628b4b322f88872395ef87e2ba5"}]},{"bom-ref":"c8f007cda3e6e55d","type":"file","name":"/juice-shop/node_modules/jsonfile/package.json","hashes":[{"alg":"SHA-1","content":"be1e382c53344bb2a1cadd3798f7a58e0aa6a511"},{"alg":"SHA-256","content":"df710d3401289ba32728b5459ac334bf99b18259900ca22b2401f48d92892613"}]},{"bom-ref":"be6eb5ce463c84d5","type":"file","name":"/juice-shop/node_modules/jsonwebtoken/package.json","hashes":[{"alg":"SHA-1","content":"305242068c0654ec18802417c31771ea78dd1dd1"},{"alg":"SHA-256","content":"5f6505d0fae5a241cbdd3cf6fa841034db7d9870ae774c59c342fad8cfb82eaa"}]},{"bom-ref":"4f934cbbe2a8d9de","type":"file","name":"/juice-shop/node_modules/jstransformer/package.json","hashes":[{"alg":"SHA-1","content":"b289d2aee71af7c52388667c93a40409604d0c86"},{"alg":"SHA-256","content":"47dd1297b10e67e178c2a788856a518fd05a0e0b0919f1f9f12b777dd458c454"}]},{"bom-ref":"876fecfcdf83dda1","type":"file","name":"/juice-shop/node_modules/jwa/package.json","hashes":[{"alg":"SHA-1","content":"eab0e2efcf0c2ad608521805b5989c409723f9dc"},{"alg":"SHA-256","content":"c2e3758f078a67c136a198241daba4fd306a75c474e8358d375807f350a159a6"}]},{"bom-ref":"12d983f70def9868","type":"file","name":"/juice-shop/node_modules/jws/package.json","hashes":[{"alg":"SHA-1","content":"515e309b1f538c91d0be3ec2334bd3a138f920f1"},{"alg":"SHA-256","content":"897314a2d7de9b7096761af9694c4b6685dde9f82f39326510c5862e1f15c882"}]},{"bom-ref":"629b8ff50accbfe5","type":"file","name":"/juice-shop/node_modules/kind-of/package.json","hashes":[{"alg":"SHA-1","content":"5cee1955868ef17a2d4c51f75f412419cc89e915"},{"alg":"SHA-256","content":"0710f74718210573ae878c0a733775d2ad9e9d5a5053f0521cbf9347a39a01ec"}]},{"bom-ref":"df068e5b3c52e260","type":"file","name":"/juice-shop/node_modules/kuler/package.json","hashes":[{"alg":"SHA-1","content":"c64c52e6c65728378f338e75e3278ebe469916af"},{"alg":"SHA-256","content":"7c22c6fe3ddd0ba047218d864008b002eab3fce6b499351e7a4c63e2cf703ae7"}]},{"bom-ref":"b81b17a376ae4213","type":"file","name":"/juice-shop/node_modules/lazystream/package.json","hashes":[{"alg":"SHA-1","content":"799982547b24774bfefb32bfc82e2c98d77329f3"},{"alg":"SHA-256","content":"cf0860e26be0d5c9098d1bd0ce5c5faf1e02d6c6b050a14bbb40c2fc1c087fec"}]},{"bom-ref":"1eabe7c193372979","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"ac9fad510ffaa52eccff29729383a2f0ed602bec"},{"alg":"SHA-256","content":"8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080"}]},{"bom-ref":"258e57a61f93916f","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/detect-libc/package.json","hashes":[{"alg":"SHA-1","content":"5c540dad2b3981037a3e2ea4d66da80986ab8a37"},{"alg":"SHA-256","content":"ee88e5b954fdf3a8480b1d01ef767d68d8ca2c6da269f58c5cf1c5550e9aa2a7"}]},{"bom-ref":"bb00f883ac43e4ff","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c"},{"alg":"SHA-256","content":"ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c"}]},{"bom-ref":"346eddf46b62ec21","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/napi-build-utils/package.json","hashes":[{"alg":"SHA-1","content":"35b672da35e299376d0ffc4f22fd57088150a835"},{"alg":"SHA-256","content":"001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411"}]},{"bom-ref":"d44b9f96f989e342","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/node-abi/package.json","hashes":[{"alg":"SHA-1","content":"73514830b941035ead3ae1de9cb5b8a3dd395f10"},{"alg":"SHA-256","content":"0bf67c397d8f6a9136d44eda86f417c0c81893e99697cbdf8733cb2982d7884b"}]},{"bom-ref":"46a2eeb76da6c366","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/prebuild-install/package.json","hashes":[{"alg":"SHA-1","content":"53b43dd098da8d4b0606d47cc71bbce0f9326251"},{"alg":"SHA-256","content":"d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039"}]},{"bom-ref":"b97fabad0815cf49","type":"file","name":"/juice-shop/node_modules/libxmljs2/node_modules/simple-get/package.json","hashes":[{"alg":"SHA-1","content":"9db18a8163ab1fbb6e7c8bfd56c7483239d63c63"},{"alg":"SHA-256","content":"8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6"}]},{"bom-ref":"48edb940bf6ef53d","type":"file","name":"/juice-shop/node_modules/libxmljs2/package.json","hashes":[{"alg":"SHA-1","content":"f1f8578eadc922aad04a6d7c7b0c34d52859ba76"},{"alg":"SHA-256","content":"9f6e576adad1199ac47aaf3c8b2ecd28c4acbb9bd70c01d2772f319757e7102e"}]},{"bom-ref":"2054844de677bc67","type":"file","name":"/juice-shop/node_modules/liftup/node_modules/findup-sync/package.json","hashes":[{"alg":"SHA-1","content":"990b9b7b1e0c10a10b929022ea7d2c7123a69dc2"},{"alg":"SHA-256","content":"d2a8fd0bcd4b5a28fd7132b036e909998b63f5c98614efc25997705f85481381"}]},{"bom-ref":"ef89633fbeb84d72","type":"file","name":"/juice-shop/node_modules/liftup/package.json","hashes":[{"alg":"SHA-1","content":"647850b8fba294d8450e62ae576687219a9d92e8"},{"alg":"SHA-256","content":"6e8687bb4f371e6a5a0316bc221394442e4fe55cf0c19f901b917e7765c6eeb5"}]},{"bom-ref":"e1a5c81be7370d9f","type":"file","name":"/juice-shop/node_modules/linebreak/node_modules/base64-js/package.json","hashes":[{"alg":"SHA-1","content":"c5e890ef1a0688476da2fac589b8d70ee8b9e64d"},{"alg":"SHA-256","content":"c02b020c7ee58e1dd08812e7fe2808881433a4aaa4331b0a440961e8ce853e3e"}]},{"bom-ref":"cc32c14b4eb29b9c","type":"file","name":"/juice-shop/node_modules/linebreak/package.json","hashes":[{"alg":"SHA-1","content":"7f0f13cabdaa4467eddc525051411330fb1b9536"},{"alg":"SHA-256","content":"53f67b29d3d0c3bc43501bf17d658aa611a668128eeba39ae9eabeb1cdb505d0"}]},{"bom-ref":"07e20f898b9b1e12","type":"file","name":"/juice-shop/node_modules/listenercount/package.json","hashes":[{"alg":"SHA-1","content":"39b628e6e8b9f8e088189bc3be32981b305de75d"},{"alg":"SHA-256","content":"5a86ab80928808eeb15b05c191e506282760ac13059a9f0e80f4cc215e463e99"}]},{"bom-ref":"37b938e0f95632dd","type":"file","name":"/juice-shop/node_modules/lodash.isfinite/package.json","hashes":[{"alg":"SHA-1","content":"c663108fc530fc52e8ce946399b099dad2f6114d"},{"alg":"SHA-256","content":"2abd2380279a93b32995b706fdb633fc9ac4f53166a770b1d146c17612444a84"}]},{"bom-ref":"92919f7d830d90d9","type":"file","name":"/juice-shop/node_modules/lodash.set/package.json","hashes":[{"alg":"SHA-1","content":"1ee3b14200998ff446e2f7c90f6422cb02185980"},{"alg":"SHA-256","content":"bb7cee8203b5e5ce6d1d38222d558f7862fb5df28ae57d27faae5bd2bc0b2f53"}]},{"bom-ref":"965a1441fcfe0bd9","type":"file","name":"/juice-shop/node_modules/lodash/package.json","hashes":[{"alg":"SHA-1","content":"eb811e51463439c808b7f983705ceff589b52735"},{"alg":"SHA-256","content":"5ef0a453b679125b155af19e1477f93b577ea826a57e1545f77608d326966e6a"}]},{"bom-ref":"143a0c2754b8605c","type":"file","name":"/juice-shop/node_modules/logform/node_modules/@colors/colors/package.json","hashes":[{"alg":"SHA-1","content":"bc0cd68d3d25a31abb16de7e2b5ff5e20d974403"},{"alg":"SHA-256","content":"af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1"}]},{"bom-ref":"266a3a7cb021ab1a","type":"file","name":"/juice-shop/node_modules/logform/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"6d68cbfaad5e0831","type":"file","name":"/juice-shop/node_modules/logform/package.json","hashes":[{"alg":"SHA-1","content":"ee3e0f5dfcca636f59f35b524c6cfee6f3839835"},{"alg":"SHA-256","content":"7fe3c68c465efc9460ce9abfbf95d5cacefc76fe159c7b171bf8923aa27e2660"}]},{"bom-ref":"fdfc349d3cc4f8a0","type":"file","name":"/juice-shop/node_modules/loose-envify/package.json","hashes":[{"alg":"SHA-1","content":"2162096bfa92a2ab1ab7bcde6fe70e590adb7eaf"},{"alg":"SHA-256","content":"8c2e27dae366396ced36fe0f7c6d35d71a1440fd8e82df5f2005a5297888a0d4"}]},{"bom-ref":"68959b4e3c8aeeed","type":"file","name":"/juice-shop/node_modules/lowercase-keys/package.json","hashes":[{"alg":"SHA-1","content":"094e1a4133dcde74b82f3517eecd3acbba0ce722"},{"alg":"SHA-256","content":"b93a86a7d0bcaf9f4fbc2ff2732cecb237a70d541a5a8a3cd8c8b6b2829311dc"}]},{"bom-ref":"dc081c7a01a4c9e7","type":"file","name":"/juice-shop/node_modules/lru-cache/package.json","hashes":[{"alg":"SHA-1","content":"eba45f816c43b1e505440b7a7f8392e38ba11306"},{"alg":"SHA-256","content":"a7e05794a5dc81dfc79a0f186c5219f442f2f735b08a3e9b91aba59833badc2d"}]},{"bom-ref":"ab0374a31ceda411","type":"file","name":"/juice-shop/node_modules/make-dir/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"0f8d4d61f0398556","type":"file","name":"/juice-shop/node_modules/make-dir/package.json","hashes":[{"alg":"SHA-1","content":"efaeb3af11445ed86a3b422c6779425597aedf92"},{"alg":"SHA-256","content":"d97dcd396bb3397b3e6651032ed52fd937dcfc6da85bd792792f3ecfb8206326"}]},{"bom-ref":"bb75757de8793ed0","type":"file","name":"/juice-shop/node_modules/make-fetch-happen/node_modules/http-cache-semantics/package.json","hashes":[{"alg":"SHA-1","content":"563b0d8af1a9641083e8f6cefbf4259fa845e7ca"},{"alg":"SHA-256","content":"bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b"}]},{"bom-ref":"3973333e372a72e7","type":"file","name":"/juice-shop/node_modules/make-fetch-happen/node_modules/negotiator/package.json","hashes":[{"alg":"SHA-1","content":"046524b23a7aefb2b0cfd3ebbd0fd84c0f7df3f6"},{"alg":"SHA-256","content":"a33b5a293825b22957629dafe778ea4164e577499418cd907d937b874f27675a"}]},{"bom-ref":"badab0d835e95669","type":"file","name":"/juice-shop/node_modules/make-fetch-happen/package.json","hashes":[{"alg":"SHA-1","content":"4e321611ef7ad4a60c9b8db56a8e49c35f4624f5"},{"alg":"SHA-256","content":"279b653b3c792aefb9cef4f0822747a5d81c1fd135bc92bc1251112ddc695b84"}]},{"bom-ref":"754e691289db6fd5","type":"file","name":"/juice-shop/node_modules/make-iterator/package.json","hashes":[{"alg":"SHA-1","content":"4d4a1468c0616ef8d46d346b089bcb5d03ffe180"},{"alg":"SHA-256","content":"40aa14a22aba7bb3f924fcf0fd9228bc957318fcfeadf357533ee3d86782acec"}]},{"bom-ref":"77aeccd6bb9e0232","type":"file","name":"/juice-shop/node_modules/make-plural/package.json","hashes":[{"alg":"SHA-1","content":"d39bcf894b551faefa974cf0f466849a7c416c2c"},{"alg":"SHA-256","content":"dea92be18b2be286d23fee583b178685ecd7e18c49d2535d0ba625a02722553b"}]},{"bom-ref":"070947502445a27d","type":"file","name":"/juice-shop/node_modules/map-cache/package.json","hashes":[{"alg":"SHA-1","content":"59f4b9e44939cd98fa3853cd0437d509aed52b92"},{"alg":"SHA-256","content":"6f7a40df8df45e11963987035e12955b2e4a5fba23c8768fe1952d034680492d"}]},{"bom-ref":"9075108ecc5162d3","type":"file","name":"/juice-shop/node_modules/marsdb/package.json","hashes":[{"alg":"SHA-1","content":"05593b5112e981dce1e0cc9fab47651e53dda0b8"},{"alg":"SHA-256","content":"3f66481f2e5de498a9b36561856a2e689ba4ed420d7f552887783b3a44e3d2f9"}]},{"bom-ref":"515059037484af34","type":"file","name":"/juice-shop/node_modules/material-dynamic-colors/package.json","hashes":[{"alg":"SHA-1","content":"bb1f9ba797dca28daa3e95d60730f710789b00a8"},{"alg":"SHA-256","content":"e45734427454c7c96b0f05f296a6a7a173475ae5c0cd9d3853df665be4432bc8"}]},{"bom-ref":"b62dbd78558c16a0","type":"file","name":"/juice-shop/node_modules/material-icons/package.json","hashes":[{"alg":"SHA-1","content":"b8622a72c9641421ce278db5b992acaa7a652028"},{"alg":"SHA-256","content":"622056b17608fe8a3a74c56215737e7835b0415795944a9ad00c0b4e1db942e2"}]},{"bom-ref":"536114092d8fda29","type":"file","name":"/juice-shop/node_modules/math-interval-parser/package.json","hashes":[{"alg":"SHA-1","content":"1e2f73e92f8caa8815589e89dcba720f53f0b218"},{"alg":"SHA-256","content":"5db4e0e76fdf0f85f164380a4d113ae51c34752d0d4f57a9e360ac88d199a33b"}]},{"bom-ref":"bb6af2dd3db6a914","type":"file","name":"/juice-shop/node_modules/math-intrinsics/package.json","hashes":[{"alg":"SHA-1","content":"017b2996c50a49f073f75e2cb92b61b9d4258bce"},{"alg":"SHA-256","content":"39d74aa5a354153130706286dd60a2d8409ce0c8f66546eff2edcac0afff17e1"}]},{"bom-ref":"62e64f50eaaed483","type":"file","name":"/juice-shop/node_modules/media-typer/package.json","hashes":[{"alg":"SHA-1","content":"866c9ea28a167b6800da67cdbe18cc9f0ec5cbab"},{"alg":"SHA-256","content":"8ccf875e488e700b79ec48386e2f47c51c5f26297ec74e5e4e5d92dc5d70ef30"}]},{"bom-ref":"8b10754e77b7ff31","type":"file","name":"/juice-shop/node_modules/median/package.json","hashes":[{"alg":"SHA-1","content":"9cbbd09b97f16663e8695325d1ce0c44ae624cf5"},{"alg":"SHA-256","content":"48ae606a70183af9efa60fba296cfe1fdc103c06d3d5073e1b6c88312492bbe7"}]},{"bom-ref":"4d4352a3cf64ce9b","type":"file","name":"/juice-shop/node_modules/merge-descriptors/package.json","hashes":[{"alg":"SHA-1","content":"d393c91c5d7c5291956c48571625b13cddd28990"},{"alg":"SHA-256","content":"6321e7d658510186de8976bd577ef59a1dcc4f1371d238ce2e676e484d1ebbed"}]},{"bom-ref":"60eca93805e06ec5","type":"file","name":"/juice-shop/node_modules/messageformat-formatters/package.json","hashes":[{"alg":"SHA-1","content":"97ee08ab442ed44e08cfc000ed6f5a9f57795c1a"},{"alg":"SHA-256","content":"a29374a4688c850e080f311c796e3875a2c860c21389f59e82e5a17791c8aac2"}]},{"bom-ref":"9755813393d4a326","type":"file","name":"/juice-shop/node_modules/messageformat-parser/package.json","hashes":[{"alg":"SHA-1","content":"d65d6a13fa614fdd498350e8839e76bbd3259ff3"},{"alg":"SHA-256","content":"7d4f82a9c3781764f348c4bae11f4466f0ef8de8557fcb955a9246f14e2fffc0"}]},{"bom-ref":"ec186466700d3c7a","type":"file","name":"/juice-shop/node_modules/messageformat/node_modules/make-plural/package.json","hashes":[{"alg":"SHA-1","content":"4c9ce9e1ead0092177f7ce3e2dc6f5c6ebf04c33"},{"alg":"SHA-256","content":"2ff54f256f10f5f7d6d5542b83a1b659897f6b8620521eb8df01dbe83cc57b49"}]},{"bom-ref":"adf762cd8d519ece","type":"file","name":"/juice-shop/node_modules/messageformat/package.json","hashes":[{"alg":"SHA-1","content":"8d0f9e8b22ad0e4931d7109d2b8075fa34d07b0d"},{"alg":"SHA-256","content":"9a3b8590efa611ef114b154994715e4f9c1226f16592922e48ab86245dd8c6b5"}]},{"bom-ref":"b72d6d946aafc0a0","type":"file","name":"/juice-shop/node_modules/methods/package.json","hashes":[{"alg":"SHA-1","content":"93fab7b874afa4232986a2cab9a7e900b5eaee5a"},{"alg":"SHA-256","content":"1aea21641646c87a589208a9363141cd2acd503db45c635f8217613c45837c09"}]},{"bom-ref":"c5a3256893df6770","type":"file","name":"/juice-shop/node_modules/micromatch/package.json","hashes":[{"alg":"SHA-1","content":"0ae8e81288771f32a5d752c97255f75cb2f48524"},{"alg":"SHA-256","content":"94dbc881c0329813f2481f35fcfa725a2285d45926d33e9b9b8b80b28487752b"}]},{"bom-ref":"3115c8d3973bdb84","type":"file","name":"/juice-shop/node_modules/mime-db/package.json","hashes":[{"alg":"SHA-1","content":"192a69685a32f1ccc5df8a54ea0f117c48bd87f1"},{"alg":"SHA-256","content":"d03e37b915a050af548d543f4e45ff5de06ec767c19e745f18c431d9dc26b5bf"}]},{"bom-ref":"0d3037e04bd45474","type":"file","name":"/juice-shop/node_modules/mime-types/package.json","hashes":[{"alg":"SHA-1","content":"ee2c9eae301358bf7d646b5b7ede6c28fed4bf96"},{"alg":"SHA-256","content":"5053cc10259c3913ab6b6c8f13170a619c0d1836c1d9081238329a559fafeb3a"}]},{"bom-ref":"a830d57a7dfec152","type":"file","name":"/juice-shop/node_modules/mime/package.json","hashes":[{"alg":"SHA-1","content":"0779ea22afe593a2ec0223d16e9ccb5d0e01e45f"},{"alg":"SHA-256","content":"f6a871d6ab40d2f2945d626a4d75da2fce78a35737c0870a0a4da9bee43f9d4e"}]},{"bom-ref":"a51932c7b9535c85","type":"file","name":"/juice-shop/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"082938445f1ca0117cf3c38752fb121b427d382b"},{"alg":"SHA-256","content":"a3c32b6656683020a9458474c9536dcbf37b873668b87635c19ff10b58f362ae"}]},{"bom-ref":"11dd36e7632b41b0","type":"file","name":"/juice-shop/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"c9bac2254c52c209d494d1589dc2f5e6b7e8e5d9"},{"alg":"SHA-256","content":"eefa1c89527d52bbb2e8b053fe8ecf3e3ced399bdba82cf27e0e92edfd833938"}]},{"bom-ref":"78c564d222aae42b","type":"file","name":"/juice-shop/node_modules/minimist/package.json","hashes":[{"alg":"SHA-1","content":"2bec91d11358048bff848e353df12837beb6ad94"},{"alg":"SHA-256","content":"252881f6a068a3e70386706d88a694b5e8e9e053b6d9f309fd9a329e651bbf81"}]},{"bom-ref":"22d89dde6453d917","type":"file","name":"/juice-shop/node_modules/minipass-collect/package.json","hashes":[{"alg":"SHA-1","content":"7ca3a77ca7b795148ecee5d9ebbe96e968dddb15"},{"alg":"SHA-256","content":"042ab826c5440a7d01a1cafae44c54840618319e2e64ed40df006c542b0768f8"}]},{"bom-ref":"b26831fae1851b79","type":"file","name":"/juice-shop/node_modules/minipass-fetch/package.json","hashes":[{"alg":"SHA-1","content":"20a8b7cdd0d9df659a448aef3a4589ca2a95d39e"},{"alg":"SHA-256","content":"75e1d21fe4253c6a01b012e347900cf44c13f0ff541a5e000ff930faa504d84b"}]},{"bom-ref":"0fe7918f1f9521cc","type":"file","name":"/juice-shop/node_modules/minipass-flush/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"6629da6ebb8033e9","type":"file","name":"/juice-shop/node_modules/minipass-flush/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"7838c61b87ee201a","type":"file","name":"/juice-shop/node_modules/minipass-flush/package.json","hashes":[{"alg":"SHA-1","content":"30f27741b9d1e471f8c4546c5fbe6fc3c3754821"},{"alg":"SHA-256","content":"00eb6d6a76a29658c56bfc079f9e5ec008ae6ba136b83467777948280077185c"}]},{"bom-ref":"802f6e79e7f11c9e","type":"file","name":"/juice-shop/node_modules/minipass-pipeline/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"45ce4633a654ff25","type":"file","name":"/juice-shop/node_modules/minipass-pipeline/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"055a5db129d56f1f","type":"file","name":"/juice-shop/node_modules/minipass-pipeline/package.json","hashes":[{"alg":"SHA-1","content":"e30c58465801deaceb4b81898e531c75679563b1"},{"alg":"SHA-256","content":"c20f059ca6012af5a3d255948c7ab1fccc06ad1d0019c669b08ba251cd4b281d"}]},{"bom-ref":"24e62306decb4a7e","type":"file","name":"/juice-shop/node_modules/minipass-sized/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"abf5360c5e99d76b","type":"file","name":"/juice-shop/node_modules/minipass-sized/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"7286e5d09b6218eb","type":"file","name":"/juice-shop/node_modules/minipass-sized/package.json","hashes":[{"alg":"SHA-1","content":"615e0e93dfdbc65b217029380591abc9e9b64136"},{"alg":"SHA-256","content":"55b337582c4192528f19eea2ababf77b18fe2ada15f346b25a2c1d276fec182b"}]},{"bom-ref":"9b7a79bfd7c6bb2f","type":"file","name":"/juice-shop/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"61235e7e9cfd09deb1ed8a00c522c6bbbcdef750"},{"alg":"SHA-256","content":"b8ab116187d5e9375d494f17437eb862cbee4b329c21f15412c6a5170ec2f55c"}]},{"bom-ref":"e8141e074dd677dd","type":"file","name":"/juice-shop/node_modules/minizlib/package.json","hashes":[{"alg":"SHA-1","content":"ecda8f42a2256be6ae9bba8a268ae3964683fe09"},{"alg":"SHA-256","content":"3e3b206f94f3bd444f18fed847d8caeacb84925c628ae3d87805bc1dd6c4c470"}]},{"bom-ref":"372a444cc857f337","type":"file","name":"/juice-shop/node_modules/mkdirp-classic/package.json","hashes":[{"alg":"SHA-1","content":"1038c88acb879de67ec347d0c4e1639e6ddc6f17"},{"alg":"SHA-256","content":"dd81e4703dc7005247e7c2dc056c67c936923a40b4dc9b266cf8acf3442ba89c"}]},{"bom-ref":"de05f3d3635e911c","type":"file","name":"/juice-shop/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"44ed68c9d570bf46fb09d444537a6520b60f77cd"},{"alg":"SHA-256","content":"8856bdf1f9b0f5d6b79fc8af4c5d23ca25a41c8cbce465d4b2f5a2852eab1859"}]},{"bom-ref":"8aa716065ea8d4b8","type":"file","name":"/juice-shop/node_modules/moment-timezone/package.json","hashes":[{"alg":"SHA-1","content":"f63ec700f7f848f155b904f161a24db413a96aed"},{"alg":"SHA-256","content":"4b5a6218fe37ea04bbe19f463fc2477e141bfb8ee18506bd99e871a0d25c3dad"}]},{"bom-ref":"a6b74001939eacfa","type":"file","name":"/juice-shop/node_modules/moment/package.json","hashes":[{"alg":"SHA-1","content":"d32c71de37d4b9dffede0ee39dedd2eca5b4bb12"},{"alg":"SHA-256","content":"5e2f0870f4d1bbef11e8bf90babd72a4399b86b19da81de796a58457a37b8e13"}]},{"bom-ref":"be7cb4a0e24a603f","type":"file","name":"/juice-shop/node_modules/morgan/node_modules/on-finished/package.json","hashes":[{"alg":"SHA-1","content":"c29040f7d6143d368f7373aa6cced5817b070c87"},{"alg":"SHA-256","content":"c67ecda258b136ba8f9bc2b6600979bde85308c2a27ea0941465d9cb12239cf3"}]},{"bom-ref":"10b8b59bc8f30da1","type":"file","name":"/juice-shop/node_modules/morgan/package.json","hashes":[{"alg":"SHA-1","content":"12b5f22ea2a5cfefd023b561d82364d939346484"},{"alg":"SHA-256","content":"4b0296a5e97c48109500944481c91bc6548a3fa2d8cffe3eadb2efad148859e2"}]},{"bom-ref":"f560b25d36019871","type":"file","name":"/juice-shop/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"4d354da7ece1c7d5689b8104f3b6f3dcbac7790e"},{"alg":"SHA-256","content":"30fbfaa3840b2f63978ad4bcd7ed8dc24d277b818e4755fe93eda8cb1bc8b74c"}]},{"bom-ref":"456b704d126e925b","type":"file","name":"/juice-shop/node_modules/multer/package.json","hashes":[{"alg":"SHA-1","content":"9d5f9e911709c067c01dc860c8f6e35a7429a6ab"},{"alg":"SHA-256","content":"49eef045324ab4b414b473dd93dd471f68dbc68eaa7003e88e85b6f70c5b4873"}]},{"bom-ref":"979a7f8b605ddbd9","type":"file","name":"/juice-shop/node_modules/mustache/package.json","hashes":[{"alg":"SHA-1","content":"7388b74f1debb1f95b9fd3f1d61102a98c28909f"},{"alg":"SHA-256","content":"6cd082a032f4c79c9f57d1bbd0ebbf9626d05e25f3347b20d3745708b57ecfae"}]},{"bom-ref":"e7ee15040dd47f70","type":"file","name":"/juice-shop/node_modules/nan/package.json","hashes":[{"alg":"SHA-1","content":"0e0bd529c8f4d49238fb7e91741829cf7b0d2686"},{"alg":"SHA-256","content":"9be1db68926741824af69344a811048ea7f236090ee7b39fd639aec9e0a1f2c7"}]},{"bom-ref":"c4cf25f6f5fab773","type":"file","name":"/juice-shop/node_modules/nan/tools/package.json","hashes":[{"alg":"SHA-1","content":"c8b6de0212f33be85f01aea1581791bd14aa2a73"},{"alg":"SHA-256","content":"26c59824a231aa81659c1d72c0a359e271889881218212ececcd4b393dfe13aa"}]},{"bom-ref":"aa40cb796beeb436","type":"file","name":"/juice-shop/node_modules/napi-build-utils/package.json","hashes":[{"alg":"SHA-1","content":"b502791eceb8f2957092667ec0ad17b7dba27817"},{"alg":"SHA-256","content":"a49e21f07e39fa8b5ab477b981260594519dca2e0107e820826c040054a63a1a"}]},{"bom-ref":"dc41a0c6c2c2ce13","type":"file","name":"/juice-shop/node_modules/needle/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"3d5aebece9ee472dd80cdbe1235c8ce746c76c25"},{"alg":"SHA-256","content":"bc3ebfd4898960d942e65f60696f2af26917d6ddf016dd159c52beb9241d3983"}]},{"bom-ref":"515c31a35264a1ab","type":"file","name":"/juice-shop/node_modules/needle/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"260e4302ad1cb13d","type":"file","name":"/juice-shop/node_modules/needle/package.json","hashes":[{"alg":"SHA-1","content":"9bf939335cef204af46611dc82702b42200fdc34"},{"alg":"SHA-256","content":"5fa6ed0d41bd2d31a28d87fe3529024f19da63f499bc046fe292d0ce82446357"}]},{"bom-ref":"80d126206a698350","type":"file","name":"/juice-shop/node_modules/negotiator/package.json","hashes":[{"alg":"SHA-1","content":"94342123a37046fc1dd4ed813dd2103479225426"},{"alg":"SHA-256","content":"d7c1fb78e3186b6385077e0b7b365adca324274963e41e1d68f78b4f82105e4f"}]},{"bom-ref":"93b875636af14ef0","type":"file","name":"/juice-shop/node_modules/neo-async/package.json","hashes":[{"alg":"SHA-1","content":"420739d2572278d648b89b2206cfbf89e89832ef"},{"alg":"SHA-256","content":"bdf14e4aab20dbe30f54ecb40d41ff75339327f9a1cf8638931ea16256ceaa6f"}]},{"bom-ref":"2445b200cf994c8e","type":"file","name":"/juice-shop/node_modules/neoip/package.json","hashes":[{"alg":"SHA-1","content":"942efccc7392733b4afd569706e617d916358f32"},{"alg":"SHA-256","content":"858dd14b36a3a87d7db24a605fa140e2d2fff44391857539d7c05d09c9f1d218"}]},{"bom-ref":"27e94e3d5b4f7860","type":"file","name":"/juice-shop/node_modules/node-abi/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"367f72cc3ff35769","type":"file","name":"/juice-shop/node_modules/node-abi/package.json","hashes":[{"alg":"SHA-1","content":"df5a7d5e4921222cd4686a78783540cea2c316c3"},{"alg":"SHA-256","content":"b5db851f28f5d20f1d0aed33ccc40aceab12fb3472108cd1fe4f6118be11084b"}]},{"bom-ref":"1bff6c6e9aff0b8d","type":"file","name":"/juice-shop/node_modules/node-addon-api/package.json","hashes":[{"alg":"SHA-1","content":"7823e132377d718289188b35c5c8c362e8d89953"},{"alg":"SHA-256","content":"e4947cf10e432c42459e60a00947ccd1ad2501e16cf1a530b3d39f0c2de5c83f"}]},{"bom-ref":"1df4c28150dedea1","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/abbrev/package.json","hashes":[{"alg":"SHA-1","content":"58ff9d74c88270726b05e383ba4d2641a18438f3"},{"alg":"SHA-256","content":"1903498f98eab52f962076359b74e436bb24cf484fd1a75af97a2509712029ae"}]},{"bom-ref":"6873b277179a7369","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/isexe/package.json","hashes":[{"alg":"SHA-1","content":"36605d910c925406fc90023dbfdece89c4b97c5a"},{"alg":"SHA-256","content":"668c167be26edf600ee1c4fab262d7afa5afa66f3fd389b3c4c942bab249f0c4"}]},{"bom-ref":"b8548863e650a0c0","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"317e51d1f350fa28d851280d460bebcd9154acca"},{"alg":"SHA-256","content":"a892ac4d9de9c19c5649cd38963ff353ce637455f83667a6b3a691bee62a7912"}]},{"bom-ref":"b5889f571fcc710f","type":"file","name":"/juice-shop/node_modules/node-gyp/node_modules/which/package.json","hashes":[{"alg":"SHA-1","content":"519f542417e96085fb8a1ad8d7a0f913155b5e56"},{"alg":"SHA-256","content":"9f06638e5fcb977409c2181382492dd0d62885999e5739a8f285960d5a78906d"}]},{"bom-ref":"051cf960f44d4e2b","type":"file","name":"/juice-shop/node_modules/node-gyp/package.json","hashes":[{"alg":"SHA-1","content":"5d92c5b3b8cda01495cd181fb02e407a93e3bdac"},{"alg":"SHA-256","content":"11896cdb5e5657602a5e6163c5a8fa145011b7feb27ce5d5222b1c82df84314a"}]},{"bom-ref":"b74b98635eba0b9f","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/lib/util/nw-pre-gyp/package.json","hashes":[{"alg":"SHA-1","content":"3a785cd04b35cc9a5fb36ad1a97561e7d3c3cf53"},{"alg":"SHA-256","content":"49144a24c7d686ca276850e6ffdd97147148c10acf3fe94317c96aa07de6a6ed"}]},{"bom-ref":"756b2029f7ca959d","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"c3024b92485c885b974e1f46cb2c32de716c6f06"},{"alg":"SHA-256","content":"7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a"}]},{"bom-ref":"8b892ca79ae3b4a7","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"5e6807bb3e5a5035a1cf03f1a855b3e6492f4ae1"},{"alg":"SHA-256","content":"3539da425561866028c253efb502461eba9a61f60e7aed6236df87f8f5fa8217"}]},{"bom-ref":"e6402df9d6f97dab","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"e55449021f01663c8f607ceb7dbbf50d166624f1"},{"alg":"SHA-256","content":"f62740d4879900b0e5c1ab64580e4dae15e1345b162d148a260d39834c8f41ba"}]},{"bom-ref":"1522a215ba000788","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/minizlib/package.json","hashes":[{"alg":"SHA-1","content":"bcb1bbab5e11777e5eabdd3ddcf01fbf2529853c"},{"alg":"SHA-256","content":"2a50eac171f8d9eead35f637c6c4bb965875fe5c876b5c888ba5fde46f4daf9d"}]},{"bom-ref":"bb714d36f79724eb","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"332100289a0b019f231d6066376efdfb85345547"},{"alg":"SHA-256","content":"d85eee455ed9a79caa4a91d52e89857e576d30eefc3c826f0bf4dfbe067d0679"}]},{"bom-ref":"85d8633f10f0145b","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"21cae1218ba3b5465b4fe24b2834306c0091cec7"},{"alg":"SHA-256","content":"5040deda6072a93c40e36c5188f24159498f6f84fe586bc47dea4a2de7a8fcdb"}]},{"bom-ref":"0c861256e2c6fdd5","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/tar/package.json","hashes":[{"alg":"SHA-1","content":"cb08ea3f1813046f69fe762a54ee739e63596d79"},{"alg":"SHA-256","content":"a042350bb5cc1c9677d434b751b6a44fead64bcea99393a1251620db9c0e17a1"}]},{"bom-ref":"e21f3262d5f067c9","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"96cc9bf2282dd9cd2c0bb49c2bca096782b2da5e"},{"alg":"SHA-256","content":"27699a6415a43f128c0e8ddcd5bf6e265f6cf3a581a9d959c11b977244fadc34"}]},{"bom-ref":"63012fef1e9ef277","type":"file","name":"/juice-shop/node_modules/node-pre-gyp/package.json","hashes":[{"alg":"SHA-1","content":"508afa4b14190f24381eebc0cbdd37fd03d370e8"},{"alg":"SHA-256","content":"f3e84b56fe45a07986847204250cb1fc382071adf2aa9e96bcea2ebc61355cd4"}]},{"bom-ref":"2da341e054a1bb6b","type":"file","name":"/juice-shop/node_modules/noop-logger/package.json","hashes":[{"alg":"SHA-1","content":"0e21795f953d07a6714df586fde5026d83794a17"},{"alg":"SHA-256","content":"0af1b47cb5cb1cefca495ac1bbaa6a7e0372f2865103a5dacb64b99dfd990d17"}]},{"bom-ref":"6ad91d59921a5b3b","type":"file","name":"/juice-shop/node_modules/nopt/package.json","hashes":[{"alg":"SHA-1","content":"bb6de23bed529e3e5ea2583b0f1702ebb9d02805"},{"alg":"SHA-256","content":"9c2a5fec768304c3b6e67baaeec8cf4d4cd28a416c3f16da1de7db698ab772f7"}]},{"bom-ref":"eb4b48fa86bcf127","type":"file","name":"/juice-shop/node_modules/normalize-path/package.json","hashes":[{"alg":"SHA-1","content":"4d6a654a05a46de332cfc70023e3ff0b39673fba"},{"alg":"SHA-256","content":"cd2d883ed14f4525cc3a87441b616327d38d1f8d096d12eef35f4c60dac9d796"}]},{"bom-ref":"2207881fde14a648","type":"file","name":"/juice-shop/node_modules/normalize-url/package.json","hashes":[{"alg":"SHA-1","content":"671dad55b1d83fb8c0838614bf00a76f7592961b"},{"alg":"SHA-256","content":"69befc6d902d0a1b361bbfb5ab863704b67ab5d9df1dbd9869a9152f6ad4c5d8"}]},{"bom-ref":"8b2c76159cfc6cee","type":"file","name":"/juice-shop/node_modules/notevil/node_modules/esprima/package.json","hashes":[{"alg":"SHA-1","content":"683cbde057cd3d8ff0105ecd318496ae8f6b19d2"},{"alg":"SHA-256","content":"9c8ec869b019be7bbc6e877aced29252cb4e229801e0dcd81ec36baf06c10722"}]},{"bom-ref":"01dc710b583366fb","type":"file","name":"/juice-shop/node_modules/notevil/package.json","hashes":[{"alg":"SHA-1","content":"120bad0d2afc319a5da02e45d3a921b134636026"},{"alg":"SHA-256","content":"f9c36acd702b764beee8fdf8f3abec74b12bc1cb9b6b241ac9b88f8875e7c102"}]},{"bom-ref":"a484ea48b0eb418c","type":"file","name":"/juice-shop/node_modules/npm-bundled/package.json","hashes":[{"alg":"SHA-1","content":"aee4023f29d5d73bbb7dedaa7187b2711b0a34e4"},{"alg":"SHA-256","content":"2f824d252e975f9a48384b691e02add8d85390aae1ee9e839cc3387d34b946c5"}]},{"bom-ref":"bdb5cbbba9945619","type":"file","name":"/juice-shop/node_modules/npm-normalize-package-bin/package.json","hashes":[{"alg":"SHA-1","content":"11198c06f8e234719166cd7209046b80fc516ebe"},{"alg":"SHA-256","content":"67b169fe285b204b15486098d0811e526fdf0bfa1d06cfb67f51bcd59e056bd1"}]},{"bom-ref":"4a905e2b03f68e47","type":"file","name":"/juice-shop/node_modules/npm-packlist/package.json","hashes":[{"alg":"SHA-1","content":"133a1af585371208c4017d29f13f33cd08dea5f9"},{"alg":"SHA-256","content":"55a0ee2e0cad20e525b8acf612ac1645f3fafa72721fde27e1a3b1e4a4aae7a0"}]},{"bom-ref":"7991f8236a5265b2","type":"file","name":"/juice-shop/node_modules/npmlog/package.json","hashes":[{"alg":"SHA-1","content":"d655b0502579af043c389d145afe76ed496e3b0e"},{"alg":"SHA-256","content":"f88d2fef96cb03bfb402e22425b3b4214968f03d3c812e9c850fcdc5d7b9fd19"}]},{"bom-ref":"1b464b86e8960c40","type":"file","name":"/juice-shop/node_modules/number-is-nan/package.json","hashes":[{"alg":"SHA-1","content":"b550ea20e6c7ed59ae2d8c0a384245bffab3f18e"},{"alg":"SHA-256","content":"242447f707a34988f6307983f56ab5efc4bee47dda47f931ad9d53ed9937c78d"}]},{"bom-ref":"0b37367e791109d7","type":"file","name":"/juice-shop/node_modules/object-assign/package.json","hashes":[{"alg":"SHA-1","content":"13257489764dfb0dfce9cf643096047658a826d7"},{"alg":"SHA-256","content":"5990bbffa235fc675debd925d50f6c3f48a2b4526d8c9f7555cadec9029d0d7f"}]},{"bom-ref":"5b002e4308e6b08f","type":"file","name":"/juice-shop/node_modules/object-inspect/package.json","hashes":[{"alg":"SHA-1","content":"f59a216249b68601d6e44515c4f9188a2110cc50"},{"alg":"SHA-256","content":"21c5c63f653705f44a60f5fe93752b231caf6ff07b01805740bd89b71b2d6d8a"}]},{"bom-ref":"bdef4a6943952ff1","type":"file","name":"/juice-shop/node_modules/object-is/package.json","hashes":[{"alg":"SHA-1","content":"b37d4100f63846d229417569f747a582e0729f15"},{"alg":"SHA-256","content":"642cdbac75e401aa7ccb5c3a1ae12765dbf03ee9e844c6e2215114f8b0ad7f2f"}]},{"bom-ref":"9145131b28b27f5a","type":"file","name":"/juice-shop/node_modules/object-keys/package.json","hashes":[{"alg":"SHA-1","content":"e40c3de9648f3ccff16f512b6316c7f1981b5834"},{"alg":"SHA-256","content":"60128330481888bf0e83a713699bee6668c5948821ef06106d8c9613b6081b45"}]},{"bom-ref":"55fa70341293c5b1","type":"file","name":"/juice-shop/node_modules/object.assign/package.json","hashes":[{"alg":"SHA-1","content":"450174ba31f98098017fbf306567e4273a95c328"},{"alg":"SHA-256","content":"982c86a45d0edc61215628380656301e17e5a7f83c9e3072b38dff6778b0e1aa"}]},{"bom-ref":"671e49fd632e294e","type":"file","name":"/juice-shop/node_modules/object.defaults/package.json","hashes":[{"alg":"SHA-1","content":"e2e67e299fc4fc4f3a49c7d763bb40d9f8f952b3"},{"alg":"SHA-256","content":"49c2b0cbb2f4939b127392fe318b41d1304bca237e963bb264b09acd38c3a7e4"}]},{"bom-ref":"7d4b6f9ccee21cf2","type":"file","name":"/juice-shop/node_modules/object.map/package.json","hashes":[{"alg":"SHA-1","content":"fc036829452a5b195d1139453fdd07550b7c95fa"},{"alg":"SHA-256","content":"a57d602ccb0e7d55a2b304aba41457457b46225682fe862c02374acb3c5c0c2f"}]},{"bom-ref":"cd9f0b70daf97369","type":"file","name":"/juice-shop/node_modules/object.pick/package.json","hashes":[{"alg":"SHA-1","content":"7a553ddd8f24c96892437678a12c8a2cdd804312"},{"alg":"SHA-256","content":"e48178e83342140e91433af2e90ae5d41b7d70058ef92e1afea3acb9149f991f"}]},{"bom-ref":"791ffa620f3db753","type":"file","name":"/juice-shop/node_modules/on-finished/package.json","hashes":[{"alg":"SHA-1","content":"777e9cd400b42dee1199eacfb325876caeaff3cc"},{"alg":"SHA-256","content":"c812eca4b0dee2317cb446124cb27ae8e5b993c8fdd0144886b629ef6ef53fc1"}]},{"bom-ref":"2c60943fc0a8deb9","type":"file","name":"/juice-shop/node_modules/on-headers/package.json","hashes":[{"alg":"SHA-1","content":"924744de2790eee065f7c1437c9d4757cab78730"},{"alg":"SHA-256","content":"86ef65dd0d349960bfc6a01292c1d40f49b064fffca48bd209a0e693c534a246"}]},{"bom-ref":"fe8733ca624b6b59","type":"file","name":"/juice-shop/node_modules/once/package.json","hashes":[{"alg":"SHA-1","content":"b2456f0417ad4f7dec058401908740c4da1ee7ba"},{"alg":"SHA-256","content":"33840d74c14c94bfb75c76374765b635531b1eacb88d7f1f2f380c94d0ea1328"}]},{"bom-ref":"73f2ae60f0382eac","type":"file","name":"/juice-shop/node_modules/one-time/package.json","hashes":[{"alg":"SHA-1","content":"a7cf310a3413d75cf4374823b2300cfe2dec3b24"},{"alg":"SHA-256","content":"95f439060816dac444a0bd628e9849fd0894afe8e9eb4110bd737daadad46175"}]},{"bom-ref":"56afec5e74bcc964","type":"file","name":"/juice-shop/node_modules/opentype.js/package.json","hashes":[{"alg":"SHA-1","content":"2017ce966b04df622563e99bb7966c3b36998e57"},{"alg":"SHA-256","content":"1cf7903eeaba55cdb56ba47ce893a3b104ccecd2e954061b5c5616529a9db69e"}]},{"bom-ref":"ac464401ad8e7fdb","type":"file","name":"/juice-shop/node_modules/os-homedir/package.json","hashes":[{"alg":"SHA-1","content":"36fa0ba7b479b41f98dde0822cc2a026bd5d7e14"},{"alg":"SHA-256","content":"465f469dc1dc630aa9347b28153da8b71d94b8fe87669bd1d49bc5b0eeeb364b"}]},{"bom-ref":"73fc94c33cbcfb37","type":"file","name":"/juice-shop/node_modules/os-tmpdir/package.json","hashes":[{"alg":"SHA-1","content":"48367dfdddfa0b59ba77d7c490da5ed3124275b0"},{"alg":"SHA-256","content":"708404ce657fbad57a4804f3ccfcda877e038b981fb9675aebcc57de91e95694"}]},{"bom-ref":"2b4ff44448b7b12b","type":"file","name":"/juice-shop/node_modules/osenv/package.json","hashes":[{"alg":"SHA-1","content":"76ff6531fce9614d1e45fa45269bc021992e75f0"},{"alg":"SHA-256","content":"184e6e41648f04dcb0d7141210a54bc2213c2e856aad7fd8f93a0bab7eb519c2"}]},{"bom-ref":"e493969b10689cfc","type":"file","name":"/juice-shop/node_modules/otplib/package.json","hashes":[{"alg":"SHA-1","content":"97ac8cffd99ccf116638eae4aca9a120135c5394"},{"alg":"SHA-256","content":"84dd2e60dfd43a4b03d1e185b06954a97d41f5a90354ac556b8ee2cb0937a448"}]},{"bom-ref":"44d3e97195f5c0d8","type":"file","name":"/juice-shop/node_modules/p-cancelable/package.json","hashes":[{"alg":"SHA-1","content":"1916b879c05ff7c43c6506dabd376267b118ad23"},{"alg":"SHA-256","content":"a65bb176766f5b9eb222552c19d553637ab89a572a7d1a37aea1c38348e353c0"}]},{"bom-ref":"8ff53bb09aee275c","type":"file","name":"/juice-shop/node_modules/p-event/package.json","hashes":[{"alg":"SHA-1","content":"9828dde97e4d989a4e855f4338d18543162103f8"},{"alg":"SHA-256","content":"35131b3ecb0dfec3dec4ffae014374deca7ed3c1fea16165f9bfc5fa55f4ad64"}]},{"bom-ref":"d2613b8019b8cacd","type":"file","name":"/juice-shop/node_modules/p-finally/package.json","hashes":[{"alg":"SHA-1","content":"29a603e1e24363c6a469d6922dd71dea18d4a32d"},{"alg":"SHA-256","content":"a96137ab1fb624d4e5fe2b6413417565e72323e709268eab8a790ea51eeda6dc"}]},{"bom-ref":"db738852ac207adb","type":"file","name":"/juice-shop/node_modules/p-is-promise/package.json","hashes":[{"alg":"SHA-1","content":"5ec1f21e446cce1704f5bebd6c76308c624b3088"},{"alg":"SHA-256","content":"f320222ce152d59bbaa210d7b9f6c0b46c1be5f8b941aaa79388cfb84d63867a"}]},{"bom-ref":"8a3af3cd9d888574","type":"file","name":"/juice-shop/node_modules/p-map/package.json","hashes":[{"alg":"SHA-1","content":"5f275de37ed635969b147d1adac21fd6d36ced42"},{"alg":"SHA-256","content":"6f0aeb7043d0737e5bcaf8c2bf83b4a8ded247922aca592d684e37499d028ae7"}]},{"bom-ref":"60d0947bf502c15a","type":"file","name":"/juice-shop/node_modules/p-timeout/package.json","hashes":[{"alg":"SHA-1","content":"100425335fbce935be2397458b04276a845443ae"},{"alg":"SHA-256","content":"e95b82abb3ca8493c57213efdc80556eaf4be8409ca12dae831428c080c2c289"}]},{"bom-ref":"ab0ee41dcb9290f9","type":"file","name":"/juice-shop/node_modules/p-try/package.json","hashes":[{"alg":"SHA-1","content":"37f6698fd2ca69e00a1b747e374f1eb3d99954b0"},{"alg":"SHA-256","content":"ff793c821f36985cde9f9d9ff6297e6c1304f8e597aa2d48dc53eda83c11e54c"}]},{"bom-ref":"06eead6c669cebd4","type":"file","name":"/juice-shop/node_modules/package-json-from-dist/package.json","hashes":[{"alg":"SHA-1","content":"d93947bd52021bb5f785613249e0e198a3b48025"},{"alg":"SHA-256","content":"38fdaf168bc63a6422a7dbe7e41a7b52b02326edef8b14019e0333ef60b37b47"}]},{"bom-ref":"991512ae67b3ca41","type":"file","name":"/juice-shop/node_modules/pako/package.json","hashes":[{"alg":"SHA-1","content":"83f786af36407a022c0f83198df1429214210a1a"},{"alg":"SHA-256","content":"0014f350a6834ed6a2d1211e0a2e3aa471cb426edf63379c785f9647ea2b4e01"}]},{"bom-ref":"e5593c2650f74764","type":"file","name":"/juice-shop/node_modules/parse-filepath/package.json","hashes":[{"alg":"SHA-1","content":"a22d4709dc4be9310d39c64ec4f03233201f3d7d"},{"alg":"SHA-256","content":"1a299df30f2845bc3e8529b1833806d7e85914d9ce19b6ebe57d5a553399adba"}]},{"bom-ref":"5eaf2019c29960cd","type":"file","name":"/juice-shop/node_modules/parse-passwd/package.json","hashes":[{"alg":"SHA-1","content":"25fb0f091c688a3376145c783fd823aa6fd93b82"},{"alg":"SHA-256","content":"0ddfc8e12d83546f17c0a269d47eaad6f74aab078ab1da742097823fba730eee"}]},{"bom-ref":"2fa66ec620f6f480","type":"file","name":"/juice-shop/node_modules/parseurl/package.json","hashes":[{"alg":"SHA-1","content":"646dc756ff16c464fcb63e17b2cd5ee4ad4f8b66"},{"alg":"SHA-256","content":"98c7b953c844cac7c0be2d5abc6559c6fd3a6075fd159b04c0f1bf46145bfed2"}]},{"bom-ref":"b6c0073f2ef0e4a7","type":"file","name":"/juice-shop/node_modules/path-exists/package.json","hashes":[{"alg":"SHA-1","content":"dc362acdf83f36298d8ea6c823ac1d0b3b2096ea"},{"alg":"SHA-256","content":"5e258d1a0d185ae469fec34de2af18913421b94181ef61238efcfe0b00d1b2c3"}]},{"bom-ref":"03114fbabb32e275","type":"file","name":"/juice-shop/node_modules/path-is-absolute/package.json","hashes":[{"alg":"SHA-1","content":"51b80416ea8aff0f6f04b15ee2e114250ba1a14c"},{"alg":"SHA-256","content":"be5b83877f6998b840b9365d7ab77e885f0d583337826c22daccaeb6e303fd4c"}]},{"bom-ref":"38a243aa2633acf8","type":"file","name":"/juice-shop/node_modules/path-key/package.json","hashes":[{"alg":"SHA-1","content":"f330c46f59dbdd92dddf8a2cfc2c1569b469bdd2"},{"alg":"SHA-256","content":"25594dab72681c910d9cc919263a4daf27d77a75e0d2c26a4d958d6d6b798f86"}]},{"bom-ref":"93e3de8a69756331","type":"file","name":"/juice-shop/node_modules/path-parse/package.json","hashes":[{"alg":"SHA-1","content":"6ea9437323546aaaeb28afa33d0c9c7ed03e93a5"},{"alg":"SHA-256","content":"9c680ecfd322afe056b4ccbfdb6c7043342276903f017c0a29b77c3926790d13"}]},{"bom-ref":"6556a9414a9834e2","type":"file","name":"/juice-shop/node_modules/path-root-regex/package.json","hashes":[{"alg":"SHA-1","content":"715724f361b739f0c9721f038f1bd8b2bcbe5d60"},{"alg":"SHA-256","content":"dc054d43f815636a3dbb6d82a610289afd57b61c18b6e18f7c1f800f15f74ff4"}]},{"bom-ref":"56083616850bd487","type":"file","name":"/juice-shop/node_modules/path-root/package.json","hashes":[{"alg":"SHA-1","content":"0c48e82e37942bc5a594e8ddddf7f83ce3e0633a"},{"alg":"SHA-256","content":"03a07ba10675a90d6eda6eccb2f138aa6c0980db2e30ff7b3f9a1a20f140022b"}]},{"bom-ref":"8a9cfc95170c02ec","type":"file","name":"/juice-shop/node_modules/path-scurry/package.json","hashes":[{"alg":"SHA-1","content":"57ceeacc9d50abbd7e370e6a697520cc0784baa6"},{"alg":"SHA-256","content":"eda5ff683c26f88a134198fa2700b371abc9092c61a81474226bdfc6f9348c14"}]},{"bom-ref":"23e069ace56663b6","type":"file","name":"/juice-shop/node_modules/path-to-regexp/package.json","hashes":[{"alg":"SHA-1","content":"eebea274a1c39b3d45c86875caae218d3d5938a4"},{"alg":"SHA-256","content":"643e7a3db344a1513c1c7797d2aff9c50fc52cab665233e11768cfbca9f8c0f9"}]},{"bom-ref":"bf4cd52ed6a3b9a5","type":"file","name":"/juice-shop/node_modules/pdfkit/package.json","hashes":[{"alg":"SHA-1","content":"dc640b6b8ac5a82bd10be32a77fb21287dd4e25e"},{"alg":"SHA-256","content":"c839357686687a89e09118af96877e008463f9ec73743bd942393a1e1c8d2c2b"}]},{"bom-ref":"f20bd43005a5457e","type":"file","name":"/juice-shop/node_modules/peek-readable/package.json","hashes":[{"alg":"SHA-1","content":"046bccda296eb83ebe6419bcca8d83b6bc38cc0b"},{"alg":"SHA-256","content":"7be739e6dd2c01c1246559662feba2794332d16e28ef9927fdcb5f8ecd47f510"}]},{"bom-ref":"07b2724397b2cef9","type":"file","name":"/juice-shop/node_modules/pend/package.json","hashes":[{"alg":"SHA-1","content":"bcc6ba00d4e6de6354b46bc7687d946fe6a1446d"},{"alg":"SHA-256","content":"1e4f01d39cc13c261f7ab81d0509d36bd98d8eceaf9ed75f2ab274286f3c3920"}]},{"bom-ref":"566439afd5e9f6e4","type":"file","name":"/juice-shop/node_modules/pg-connection-string/package.json","hashes":[{"alg":"SHA-1","content":"4cf473bef682dfcf5787c61a2badc7100094d940"},{"alg":"SHA-256","content":"b4bb600d392debbef01b428d3331e7fe2dfd0eef5eb142b49d9d77121e8aeaca"}]},{"bom-ref":"46fe7fb936623d3d","type":"file","name":"/juice-shop/node_modules/picocolors/package.json","hashes":[{"alg":"SHA-1","content":"6a7013e29f9b6720f52bc0502ee2968d6749d7a8"},{"alg":"SHA-256","content":"ef2ac226c4811d312e12c64214c453878653e834482125ae475f27cea60de737"}]},{"bom-ref":"5d67212cbce195fa","type":"file","name":"/juice-shop/node_modules/picomatch/package.json","hashes":[{"alg":"SHA-1","content":"736efee8b038ba25e328de826282cd73ee01c455"},{"alg":"SHA-256","content":"63264d817e856a4bff57d4304f2b38d2964a4f6df520eb169e7bcdb619f13e9a"}]},{"bom-ref":"6398415188b084f8","type":"file","name":"/juice-shop/node_modules/pify/package.json","hashes":[{"alg":"SHA-1","content":"920b385a20c890185d57e5ea1dcc86e3ff4d51a7"},{"alg":"SHA-256","content":"6f3beed79477c32ec1533609a75bef5cc3998e96657277519b3d66bfcc6d046d"}]},{"bom-ref":"23f92dd62d239db0","type":"file","name":"/juice-shop/node_modules/pinkie-promise/package.json","hashes":[{"alg":"SHA-1","content":"737766e86a40fa8b428ab9528b41bcc88430757b"},{"alg":"SHA-256","content":"0be4b7f157d8f59a1e9f3358c8ffc374e0350467ecebea59f795a49639115eb0"}]},{"bom-ref":"061ee233fa4a8436","type":"file","name":"/juice-shop/node_modules/pinkie/package.json","hashes":[{"alg":"SHA-1","content":"b110de0e6bdd8dca481c37b9defbcbced1e414a8"},{"alg":"SHA-256","content":"afcd1666f0ca44b0ffe0587fbd1db52799334626cb121ef4eaa1780a9951dfb7"}]},{"bom-ref":"85aaca1ad38caefe","type":"file","name":"/juice-shop/node_modules/png-js/package.json","hashes":[{"alg":"SHA-1","content":"f6a2f416535c834f378921adae42405d92bf9911"},{"alg":"SHA-256","content":"afd3a9e519b30e7197605822ce772f1702014c74577bf536176419e0e7492667"}]},{"bom-ref":"24c31fc17c59ead1","type":"file","name":"/juice-shop/node_modules/portscanner/node_modules/async/package.json","hashes":[{"alg":"SHA-1","content":"5da55b9a896c8eed5f30013777ffbc8181bdfa67"},{"alg":"SHA-256","content":"180dfef0fd278a5225cdd10d1f352041129c337a961fb32ee53437fa85de76c1"}]},{"bom-ref":"65dffbbb2501286c","type":"file","name":"/juice-shop/node_modules/possible-typed-array-names/package.json","hashes":[{"alg":"SHA-1","content":"23814e5ed3fdcea6f3c2e3299c1b9af685ba7c50"},{"alg":"SHA-256","content":"0ff73753495cfff4556a5f8b7847ba1c06530341986e642a8637c6db74d87894"}]},{"bom-ref":"15328ceabdcb53bb","type":"file","name":"/juice-shop/node_modules/prebuild-install/package.json","hashes":[{"alg":"SHA-1","content":"e94e270dc48d57def16e7e6e55f92a2a87e90f4b"},{"alg":"SHA-256","content":"3a1c35a4b0d10d5f721dea267fdbf9981c37d13ffdd0fbd97044c5f1fcbcb026"}]},{"bom-ref":"7b925806eb704bdf","type":"file","name":"/juice-shop/node_modules/prepend-http/package.json","hashes":[{"alg":"SHA-1","content":"a8b03b82dbd901db3e7c35f46d9ff9ed842fb6ac"},{"alg":"SHA-256","content":"310e7bb7d9e8be40ffd7a01972f41b43b14865db69290a157e748198544d9b0b"}]},{"bom-ref":"976c58d8953da924","type":"file","name":"/juice-shop/node_modules/proc-log/package.json","hashes":[{"alg":"SHA-1","content":"ef77e00bb180e2d474ef8ec427d3ddb2dffe8b60"},{"alg":"SHA-256","content":"636f411adcca5bcfec9c68ee39ce18f3ee00d27934dbbcde3c6635929faceb85"}]},{"bom-ref":"5da7aa18dfb4524e","type":"file","name":"/juice-shop/node_modules/process-nextick-args/package.json","hashes":[{"alg":"SHA-1","content":"75936b9172e05098607a006de74399060a53a79c"},{"alg":"SHA-256","content":"6d6d93d057f39bc3173d53e694b61833fd0ce89c1d669156169136d31a968131"}]},{"bom-ref":"9257d210dc888a8b","type":"file","name":"/juice-shop/node_modules/process/package.json","hashes":[{"alg":"SHA-1","content":"266a0cf0da901a3bdd4ab76d0ba9032640455ca3"},{"alg":"SHA-256","content":"8501b4909630e60c9e9f68c4ca8ccb1964688500e61c60408a26d5480a9dd3d4"}]},{"bom-ref":"1456dbcd6767f592","type":"file","name":"/juice-shop/node_modules/prom-client/package.json","hashes":[{"alg":"SHA-1","content":"b93965acb54ef1e6422840164a2bb2d6898edfe1"},{"alg":"SHA-256","content":"1e7e9aac3c44d9396a057924677e507f67ef293435d5c9e2beb7c4d3358b8d24"}]},{"bom-ref":"34b55e7d6eb0ca6c","type":"file","name":"/juice-shop/node_modules/promise-inflight/package.json","hashes":[{"alg":"SHA-1","content":"46be8c622d5a7a8c74a905df7eafb893fdb8a965"},{"alg":"SHA-256","content":"386697ebbf39442f0570d59c851e00ca22330a0a5ce3f389b621f6a0d6d7517a"}]},{"bom-ref":"b779ef1156750ff9","type":"file","name":"/juice-shop/node_modules/promise-retry/package.json","hashes":[{"alg":"SHA-1","content":"fc649cbedea73287db37a431e5761e9c0b4abca9"},{"alg":"SHA-256","content":"71c2995725304ffa82e03be2c21e83f3b7c0c557846df88aaed0f2b9fa75d911"}]},{"bom-ref":"cdc9ce07fbb4358c","type":"file","name":"/juice-shop/node_modules/promise/package.json","hashes":[{"alg":"SHA-1","content":"521b2aa15341f7fa10ae150c4aff97fdbdc755d7"},{"alg":"SHA-256","content":"86c20e9c15f4d9f1fdbde8abe56ffc37ae69deffbf3ffd1ecb88712cd0da79a5"}]},{"bom-ref":"181ba5a81d19c6fd","type":"file","name":"/juice-shop/node_modules/proxy-addr/package.json","hashes":[{"alg":"SHA-1","content":"a04c60d6b2441d6e2a6ebddcab75aa6efc2d1d9c"},{"alg":"SHA-256","content":"e490a79f8058cbb7c0e9fd3b9977013102b5cbd8d232259b93bb2ebf85834a51"}]},{"bom-ref":"78e1bc9656dcf4ae","type":"file","name":"/juice-shop/node_modules/pug-attrs/package.json","hashes":[{"alg":"SHA-1","content":"b6adb0c7677506fb099c945daa2fade50883dc13"},{"alg":"SHA-256","content":"d064880b628e0ddc37c08af0da95486766c2eb313163c887a21996d5c96dce86"}]},{"bom-ref":"7ce204cb9603be15","type":"file","name":"/juice-shop/node_modules/pug-code-gen/package.json","hashes":[{"alg":"SHA-1","content":"3e5b05f507b7a424591ac9c81f6f9f17bda582c5"},{"alg":"SHA-256","content":"d3ae59d22cb7ae708da8b0391ab0d4f96efd8355f194cb732b230c4e998d964c"}]},{"bom-ref":"aa729be69afbaeee","type":"file","name":"/juice-shop/node_modules/pug-error/package.json","hashes":[{"alg":"SHA-1","content":"6b67957081e9f303679cd5f7c4519b101e917879"},{"alg":"SHA-256","content":"6927ab8cdb89570d57b34d5953786ae2b56b89560301d452bc95c7519aa62212"}]},{"bom-ref":"1c0e59c318639263","type":"file","name":"/juice-shop/node_modules/pug-filters/package.json","hashes":[{"alg":"SHA-1","content":"7a57db8c52388e0e345d522793b8842cd8d28ddc"},{"alg":"SHA-256","content":"88d2560b67ad36dafaaf59bfba4d42aa8aad7e96f181f37e067227b267924037"}]},{"bom-ref":"76975097d2793298","type":"file","name":"/juice-shop/node_modules/pug-lexer/package.json","hashes":[{"alg":"SHA-1","content":"6c1c883900e11b3b22227f99d97cc525d19989b0"},{"alg":"SHA-256","content":"c49fbdee905f6f11a937a56b458e041e26bc418c3c29bd8d87603bd165a23944"}]},{"bom-ref":"2036901cf6796365","type":"file","name":"/juice-shop/node_modules/pug-linker/package.json","hashes":[{"alg":"SHA-1","content":"1696fada4ca8ba8097ef2cfa28d4337ba7607d4f"},{"alg":"SHA-256","content":"e284fe50d7618ddf9a8a32a6fce649ffc1cd5bec45e01ecf282878599d41db4d"}]},{"bom-ref":"988b38c8aeb7f1d5","type":"file","name":"/juice-shop/node_modules/pug-load/package.json","hashes":[{"alg":"SHA-1","content":"e13cea3113c17bdd86ca3eb40af38c2e1295706f"},{"alg":"SHA-256","content":"04f9984f732962d8da625959b64c0d8ef4f7e1e5710a08109dd86e730a35dce6"}]},{"bom-ref":"7d3d2faf252227d3","type":"file","name":"/juice-shop/node_modules/pug-parser/package.json","hashes":[{"alg":"SHA-1","content":"d111b223e7ec673a31910cda43a2ef7d4b2da1b9"},{"alg":"SHA-256","content":"b43513e8ce41a63f8cfc55e4dc9ab984f30660038837c734a1af60e0f3395bad"}]},{"bom-ref":"812196d333b35224","type":"file","name":"/juice-shop/node_modules/pug-runtime/package.json","hashes":[{"alg":"SHA-1","content":"8318bca8d15260b136ef57deff7a05b199dff789"},{"alg":"SHA-256","content":"7ec7b608c7bad13a87cf6def1504d52e9bbb9aa342a79377513c58b9a85407a2"}]},{"bom-ref":"b187d661b1bfa8ff","type":"file","name":"/juice-shop/node_modules/pug-strip-comments/package.json","hashes":[{"alg":"SHA-1","content":"d7037a265da4f9e91a6310af25e40ed858a33ebb"},{"alg":"SHA-256","content":"e499b0bb59d0755058031cd3a614c9ad196757ec3b36a761673f881592bb8d8f"}]},{"bom-ref":"85b818c9ccf7f826","type":"file","name":"/juice-shop/node_modules/pug-walk/package.json","hashes":[{"alg":"SHA-1","content":"8d626183f9c9d359642139d252f7654feae0d189"},{"alg":"SHA-256","content":"3073874b1942b8fa10554e527a2dd8a25ba98b4bf7352f4c1c26a5c272bc47e2"}]},{"bom-ref":"ee517e100149168b","type":"file","name":"/juice-shop/node_modules/pug/package.json","hashes":[{"alg":"SHA-1","content":"febcb2192aa59ee6981372e25850ea6e619e54c3"},{"alg":"SHA-256","content":"f31b3672f89b96f2caac2eab7f72867f188904022c76bbab7f9fac462e14171f"}]},{"bom-ref":"1a3dc74d4f25b9cb","type":"file","name":"/juice-shop/node_modules/pump/package.json","hashes":[{"alg":"SHA-1","content":"ba8b05dd465d8b6329881e2deb3c835149284fea"},{"alg":"SHA-256","content":"d369a9c97d4aaca4a637af77b6ead9169146809ff3c27268e62151b613cae016"}]},{"bom-ref":"816e28d56d1ca9e3","type":"file","name":"/juice-shop/node_modules/qs/package.json","hashes":[{"alg":"SHA-1","content":"28ff514a8a7863ca7923010f797ca3edaa52be34"},{"alg":"SHA-256","content":"c2facc4c7f2752d13d3d222bc44ce4370aeeb901a9e9ad5f41d9bca489d1c7ef"}]},{"bom-ref":"76d4bb39a44a2421","type":"file","name":"/juice-shop/node_modules/query-string/package.json","hashes":[{"alg":"SHA-1","content":"e8cc4ec989ecb29722e4e4e683c1ec41e3181fa3"},{"alg":"SHA-256","content":"eb68a1c5d0725473fd4a6b2fe86a3858cdf56ab74971461c1e16000faff7cb9b"}]},{"bom-ref":"95db10130a94a0ab","type":"file","name":"/juice-shop/node_modules/range-parser/package.json","hashes":[{"alg":"SHA-1","content":"e82a50d4be1c57ded40bf39a5232bf5c6dabb46d"},{"alg":"SHA-256","content":"d0b5f54eaa59001dc86720a9be1fdf653bad83707d70842332fb3e8847f65a89"}]},{"bom-ref":"f0cbf3d47bbb8d5f","type":"file","name":"/juice-shop/node_modules/range_check/package.json","hashes":[{"alg":"SHA-1","content":"dab1ef784249ced9cec139f8ab8116ef52b3c492"},{"alg":"SHA-256","content":"2c24bfbea87b799d13ddf1abf348cd5343b811cfdc37a0e350a9456ce53405b7"}]},{"bom-ref":"b37a5b86f834bc5c","type":"file","name":"/juice-shop/node_modules/raw-body/package.json","hashes":[{"alg":"SHA-1","content":"3b4460aa6d8a136f0e419acb5d5e7c82ade86989"},{"alg":"SHA-256","content":"3847f01a7ffd81ca56879b158b8301f96244113f152ed117bff3f3abf5f88a5f"}]},{"bom-ref":"99a86bbf03981cd3","type":"file","name":"/juice-shop/node_modules/rc/node_modules/ini/package.json","hashes":[{"alg":"SHA-1","content":"14b52ea8911e4e9f89acb4d876e87755e54529e2"},{"alg":"SHA-256","content":"8cfafc3521292bd7434d2f40762984f36eb12f03bde92b42a9df2ea17552f4a4"}]},{"bom-ref":"76cd6ac1237dfc74","type":"file","name":"/juice-shop/node_modules/rc/node_modules/strip-json-comments/package.json","hashes":[{"alg":"SHA-1","content":"d33064d55afd32cee36afe2ef20a37d1e80c2967"},{"alg":"SHA-256","content":"52fba89a1d2724dfeafa21ec58f8c4a8a210103cc6b65b4468ab3fb973ad1753"}]},{"bom-ref":"2a54dc0b7acf947c","type":"file","name":"/juice-shop/node_modules/rc/package.json","hashes":[{"alg":"SHA-1","content":"19966e2b4994a704ea472a1ba1eb8e1d14f446d8"},{"alg":"SHA-256","content":"96f035349a8e6034d380348ec3d454ed8ea3a602c7a5700eb36ff48310bdbe9f"}]},{"bom-ref":"b3229d3dd5689279","type":"file","name":"/juice-shop/node_modules/readable-stream/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"e4a5d79d5ea9366beb66cf993d11b88603e6333e"},{"alg":"SHA-256","content":"93165ce56e458216c18240cd961a522af5b18e51da06f55d88ac552234455d95"}]},{"bom-ref":"d569e3dd244f684d","type":"file","name":"/juice-shop/node_modules/readable-stream/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"},{"alg":"SHA-256","content":"3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"}]},{"bom-ref":"7d39893e264111de","type":"file","name":"/juice-shop/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"33a4118b015167682f053d85f7bb21b9ff9d161f"},{"alg":"SHA-256","content":"67bde829e31cba3f50c77d14a30fa0f2295223b7ffa07f3b84606a5a79bb97f8"}]},{"bom-ref":"33c3565a5b5a9a87","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/buffer/package.json","hashes":[{"alg":"SHA-1","content":"3156a9cd35dc750bebc2eaaf42a5933c8ee6b892"},{"alg":"SHA-256","content":"5b105ac0abbf5985cbe62ad28a34032d85c7ef623e0eb01f39441b0feb419004"}]},{"bom-ref":"01c364c2296f6c58","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"a2e7e379ccac07b02eddfa67746a0e521f5a4878"},{"alg":"SHA-256","content":"246e18f32bc77525436b73f8ac600560f246f9bc05a36dedc07f448ae19239ac"}]},{"bom-ref":"3a80f3fd74c07520","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/node_modules/string_decoder/package.json","hashes":[{"alg":"SHA-1","content":"3e519b003fbce961f41cc48fa4237c6debda1266"},{"alg":"SHA-256","content":"31984c85cd4f3df0aa75075acdec98c25961496897d1f46d04ed4a701f129c54"}]},{"bom-ref":"c6b25b02b01a9240","type":"file","name":"/juice-shop/node_modules/readable-web-to-node-stream/package.json","hashes":[{"alg":"SHA-1","content":"b48d8b20ab930e5208848273443f9bf3bb368df4"},{"alg":"SHA-256","content":"3ee3a77f8bf8c288745aec229244cb79b63b9959a9b7c8ee18e326286976bc6e"}]},{"bom-ref":"11efac82dbda23c9","type":"file","name":"/juice-shop/node_modules/rechoir/package.json","hashes":[{"alg":"SHA-1","content":"074780fd0c9b73b6950e8d1575af5ff4b663414a"},{"alg":"SHA-256","content":"e63b051cbcd61e17c3ab84c9bd7315929c5425d7fbb91007a04245abf867a4b2"}]},{"bom-ref":"347a48bac44872a8","type":"file","name":"/juice-shop/node_modules/regexp.prototype.flags/package.json","hashes":[{"alg":"SHA-1","content":"f0b903f5607a2b6b97708e20a940efbf3d896589"},{"alg":"SHA-256","content":"03b311526afa87b388a05af86fb9ad86331888d2b5ef260e635c9023a9a14a1e"}]},{"bom-ref":"4fe1c43c8cb9cbd1","type":"file","name":"/juice-shop/node_modules/remove-trailing-separator/package.json","hashes":[{"alg":"SHA-1","content":"ca8ba920e17ef8348a3064c5705d3f90dac8b26f"},{"alg":"SHA-256","content":"5d1595f6fe1dc0db45fd3a05a64f0e5719b8af55ebd769f0bcba0ff6e7f8d7a8"}]},{"bom-ref":"00c67e72894f3c8e","type":"file","name":"/juice-shop/node_modules/replace/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"3c9ef7bd0a1c3d805814c654c457cc315c48c116"},{"alg":"SHA-256","content":"d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"}]},{"bom-ref":"6d68c880e70a33ab","type":"file","name":"/juice-shop/node_modules/replace/node_modules/cliui/package.json","hashes":[{"alg":"SHA-1","content":"3a61c252373aa1eeb6b761d39d33baac564ac4ab"},{"alg":"SHA-256","content":"aefd282b90d2d0a055f3b40bbd2010531ba7cbf902e76a314fe09fe777491814"}]},{"bom-ref":"a287440b741c67fd","type":"file","name":"/juice-shop/node_modules/replace/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"},{"alg":"SHA-256","content":"9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"}]},{"bom-ref":"c4650eb092d493fd","type":"file","name":"/juice-shop/node_modules/replace/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"},{"alg":"SHA-256","content":"4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"}]},{"bom-ref":"25a428342cf896b8","type":"file","name":"/juice-shop/node_modules/replace/node_modules/find-up/package.json","hashes":[{"alg":"SHA-1","content":"5ca7872ad39eee7733cc76e3842bc670c99f8829"},{"alg":"SHA-256","content":"19b9626d190ae97ecbc47843ff5781c462b6acfca35a2652dccded7d046dce53"}]},{"bom-ref":"7b7c8ccf4bb8f94b","type":"file","name":"/juice-shop/node_modules/replace/node_modules/locate-path/package.json","hashes":[{"alg":"SHA-1","content":"5f601eecc68d9b9eaf032912bf0326dafd3dc485"},{"alg":"SHA-256","content":"6fb0681c3501741d68594c69a0baae9f558f2d426c136946f2c7780a8c5e27bd"}]},{"bom-ref":"132227093a14de47","type":"file","name":"/juice-shop/node_modules/replace/node_modules/minimatch/package.json","hashes":[{"alg":"SHA-1","content":"280930d830662d7377fd7dcdaa659e3d536b71c2"},{"alg":"SHA-256","content":"3b73bedeed5d09d561ddac7e212eb37e3eb37f0daba8738e59607ce1caaf93ed"}]},{"bom-ref":"1207b4084dcd1e82","type":"file","name":"/juice-shop/node_modules/replace/node_modules/p-limit/package.json","hashes":[{"alg":"SHA-1","content":"fce4cfb0ed8e8882a02082db5cec1437a90e2fdf"},{"alg":"SHA-256","content":"d4529e88d06488042103f25322b0b60d90dfc5de0ed61c3b7c7d27f2ac3fe1bb"}]},{"bom-ref":"0691554cd5c4c483","type":"file","name":"/juice-shop/node_modules/replace/node_modules/p-locate/package.json","hashes":[{"alg":"SHA-1","content":"2a78ada043c0e10bff3b34fbbe5d1adb181b7c56"},{"alg":"SHA-256","content":"26d44c5d05942d6b315ecde2f3dcf78972cfb3b4c81c932ac2573d3eea5f5e94"}]},{"bom-ref":"d047f7a48f32eda3","type":"file","name":"/juice-shop/node_modules/replace/node_modules/wrap-ansi/package.json","hashes":[{"alg":"SHA-1","content":"1fbb028113b65f2616bec5fc66afee5f329607ad"},{"alg":"SHA-256","content":"ee3d1495da354ea19d3900e3f28a4e93cc202966623fee4ad6fe54346b385075"}]},{"bom-ref":"678b0939c2f79d2e","type":"file","name":"/juice-shop/node_modules/replace/node_modules/yargs-parser/package.json","hashes":[{"alg":"SHA-1","content":"728222492ccbc98db8f25613d6997f7524b9130e"},{"alg":"SHA-256","content":"2de71e9a1ff3e5bce791f5e3de66e1ad86f4f143d8c3ce4fbaad7a615e5c5e70"}]},{"bom-ref":"4632d22e051de0be","type":"file","name":"/juice-shop/node_modules/replace/node_modules/yargs/package.json","hashes":[{"alg":"SHA-1","content":"58caaec51e509a371e3df929a919a3157fdbfc7b"},{"alg":"SHA-256","content":"be417ad995e4f608d6f5243ad90b28f3f2604c73abb30d72382ae13358a74949"}]},{"bom-ref":"926fca47d3a31214","type":"file","name":"/juice-shop/node_modules/replace/package.json","hashes":[{"alg":"SHA-1","content":"e3cc0e70d0bcee319ee831c0682c59b61ad3fb03"},{"alg":"SHA-256","content":"5c88ee721365a797b5846c260e968912c5de3b1966d843e8f8f0aadeea3421b6"}]},{"bom-ref":"b8df0125415c43ae","type":"file","name":"/juice-shop/node_modules/require-directory/package.json","hashes":[{"alg":"SHA-1","content":"a2e7fa658504a11868812ca0f9f8b08433bc2e3a"},{"alg":"SHA-256","content":"5690bdddd6eb4abd795fa5319df7552279508df9d562d571e3132ddff3045a71"}]},{"bom-ref":"6721a2da499d76c2","type":"file","name":"/juice-shop/node_modules/require-main-filename/package.json","hashes":[{"alg":"SHA-1","content":"670907eeff6a76b76996f639a5e71a8cea7ed603"},{"alg":"SHA-256","content":"cc3853357a59a82c9a0e5cebbe52221eccc4a52bced4557300b69bbec17fa41b"}]},{"bom-ref":"dc9f8a802b671f39","type":"file","name":"/juice-shop/node_modules/resolve-dir/package.json","hashes":[{"alg":"SHA-1","content":"b6147edfc55437b27388119c5ff8ce89eb4208fc"},{"alg":"SHA-256","content":"c124e4c2746edf4bd9322cb823ce1b4e0168ed393bfe2e6eecd8d12a47498d05"}]},{"bom-ref":"56ad2f24d7bb294c","type":"file","name":"/juice-shop/node_modules/resolve/package.json","hashes":[{"alg":"SHA-1","content":"36a106c595add60c403fd7a6178948de47422f9e"},{"alg":"SHA-256","content":"e4f9221a50e017b41b7c5c286f257108b2496327d10ccaf2a460592849e756dc"}]},{"bom-ref":"bcaf8a132d12667f","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/baz/package.json","hashes":[{"alg":"SHA-1","content":"0e5f7a5ddaf05e7d5a39fc67bbc4993de92e9012"},{"alg":"SHA-256","content":"cd33f816f635bcf9cdbe5a13d877bc8901a1a90819b1d73c16b35b6cdbebecaf"}]},{"bom-ref":"1cf2d77432fe40df","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/browser_field/package.json","hashes":[{"alg":"SHA-1","content":"e5a9d36b5a39fc1f1c257ca949df43dd40a265ff"},{"alg":"SHA-256","content":"2857c211f81109bda6a96584f2e7a1ac5610baa0f67bbc77f7e766c4152281f4"}]},{"bom-ref":"3c2838440a22e114","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/false_main/package.json","hashes":[{"alg":"SHA-1","content":"9598eab563115c03c659ee404d91f9a6431df39d"},{"alg":"SHA-256","content":"064d9e3c87123a24e31276d1bcfce16b81bb2156d42c07f427b8ddcbf675f790"}]},{"bom-ref":"1ccf510f48c76807","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/invalid_main/package.json","hashes":[{"alg":"SHA-1","content":"dad7dffe799806c49f1cccc039e3d6cbb38d1a26"},{"alg":"SHA-256","content":"ed30bf3c22be924be67b278ed079ba425dd0ae37110d7027bf9369f771abcb36"}]},{"bom-ref":"cc0b96dd500a3548","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/multirepo/package.json","hashes":[{"alg":"SHA-1","content":"b58a1b0588a1102572e64a4d2047ce8731de1a76"},{"alg":"SHA-256","content":"ec13311cdf8e7ba462d94656a0f2f90c55b290dc1ad6f7e82da2d3b140c27f20"}]},{"bom-ref":"3781a9b07b797932","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-a/package.json","hashes":[{"alg":"SHA-1","content":"3926c908fd9627cc3e3094edf3a7fc547d4871a6"},{"alg":"SHA-256","content":"ab5dbb7f635d5474648e5ac92df08020b60d0d91a68a740e46186587e05d3da3"}]},{"bom-ref":"1727f199271ee9e3","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/multirepo/packages/package-b/package.json","hashes":[{"alg":"SHA-1","content":"9e0fcac261c4f4c0e6cbd05fd95ed904a9fe4b5b"},{"alg":"SHA-256","content":"f41fd8ba3d2df58d7d1658be4c77d11d07285fab1e94a6c8151b3548c6f0a8aa"}]},{"bom-ref":"4cc415386ae2326f","type":"file","name":"/juice-shop/node_modules/resolve/test/resolver/nested_symlinks/mylib/package.json","hashes":[{"alg":"SHA-1","content":"0803d5d30c2a6fec04f09b9969969a91743b28cf"},{"alg":"SHA-256","content":"41ea23c25ff8e7080ab08d38a9f5de9ab986280902f7268de45bc0a5b7e9e028"}]},{"bom-ref":"2b9df803d6f2785c","type":"file","name":"/juice-shop/node_modules/responselike/package.json","hashes":[{"alg":"SHA-1","content":"51b587b317d6db031acef526f84e2cf043442bcc"},{"alg":"SHA-256","content":"df25ad367800a698875604c21edf7f76e2ed563f7069d8659eeb8db46ab10117"}]},{"bom-ref":"954ab4ed5539271f","type":"file","name":"/juice-shop/node_modules/restructure/package.json","hashes":[{"alg":"SHA-1","content":"f1fb9c1b78a8fee6469b904983154c54b0430586"},{"alg":"SHA-256","content":"ff45dfa0be24887b940014f1abe1d876079b5aff4d09b7db18061f5bac257faf"}]},{"bom-ref":"480977e3ece2f1dc","type":"file","name":"/juice-shop/node_modules/retry-as-promised/package.json","hashes":[{"alg":"SHA-1","content":"08c60998fb0b0ee0a723a490df8d67c8d8df7ebd"},{"alg":"SHA-256","content":"b411ec1e5930b4d30c6cce8d39d119136504607a09d4e27a7ce4a61632a512ea"}]},{"bom-ref":"5539b576001f4eb6","type":"file","name":"/juice-shop/node_modules/retry/package.json","hashes":[{"alg":"SHA-1","content":"10dd0941e4e65c436c4f7111efdb1679c966c478"},{"alg":"SHA-256","content":"c0733eb226e2a6572c7c9c2bc8b4a0efabe233971b0dee1e6d62c6898257e1da"}]},{"bom-ref":"dd90a63728df783e","type":"file","name":"/juice-shop/node_modules/rimraf/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"69730e560c782d94","type":"file","name":"/juice-shop/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"d1241a4f102aa0d377e63ee84d58b278677c3435"},{"alg":"SHA-256","content":"3fb2eed4a1f87b6d9c0b28cb502967bff6c3bfd3484e505b91b157d88200d071"}]},{"bom-ref":"b189d0dcf6720a02","type":"file","name":"/juice-shop/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"6ce1dddfb8739c577ae2ad84f1aba01427791f57"},{"alg":"SHA-256","content":"e4018fdbfe625433371f48274fee26f520bbe865e0d8c85bf3aa07424134b90c"}]},{"bom-ref":"6f14182cfef456ca","type":"file","name":"/juice-shop/node_modules/safe-regex-test/package.json","hashes":[{"alg":"SHA-1","content":"cb66d98715b7a0639f1f793aa1865634860a57af"},{"alg":"SHA-256","content":"b9efdb318b7f4094e6d2605ba9fbef93570abe1119488a491a4e8f3216781030"}]},{"bom-ref":"70f9b2ac853e1543","type":"file","name":"/juice-shop/node_modules/safe-stable-stringify/package.json","hashes":[{"alg":"SHA-1","content":"7fbe83d8818942f4a13c95d9dc4a265a0a178f4d"},{"alg":"SHA-256","content":"797e552ecb0f8ffe8ffb714e6c4888b28a8ca39eb9c0040836b2b6f640037798"}]},{"bom-ref":"fd30fb1e07a0c73d","type":"file","name":"/juice-shop/node_modules/safer-buffer/package.json","hashes":[{"alg":"SHA-1","content":"5ed0fab8e5cac53e4d072acbd82fca9be08f5e67"},{"alg":"SHA-256","content":"4247a3a63c45a6a7ced1557fe4dd9d2a163af4915d594b95e5867b69a53edb52"}]},{"bom-ref":"4a9a90ad3fa1b425","type":"file","name":"/juice-shop/node_modules/sanitize-filename/package.json","hashes":[{"alg":"SHA-1","content":"583442f76c2f329bb602374055a9f565f952a002"},{"alg":"SHA-256","content":"0d84b93a20ba2ec3a997b9e0df651fb490c21fc53b44edaf5182b285b74a664f"}]},{"bom-ref":"2b896c1c94c26653","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/domelementtype/package.json","hashes":[{"alg":"SHA-1","content":"92f89ed727789dfec8061a78aeb4b61afe286883"},{"alg":"SHA-256","content":"f50e652e1cd48ada00210fa948baf45543853fe1a5e59497bc20744d454a2d5b"}]},{"bom-ref":"c2b690e9196d1a11","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/domhandler/package.json","hashes":[{"alg":"SHA-1","content":"7deee12976bd63abcda058ea45238790cf5e82e0"},{"alg":"SHA-256","content":"042d85faac37437c9a63f3a73b1bd11b9b2d6f222ec06318c3b3f2c1b791ab03"}]},{"bom-ref":"66e919e78936f5a5","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/domutils/package.json","hashes":[{"alg":"SHA-1","content":"d78c2049a85f4b100f23bd9f9547ea79af37246e"},{"alg":"SHA-256","content":"47aec9a46c6ea593aa2fdda8e9f8d9169eb1b9e60a1606bd3c28c6baa061bd9b"}]},{"bom-ref":"09c0b56457c5a86e","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/he/package.json","hashes":[{"alg":"SHA-1","content":"e8229c2260816ecf6ebc6a5f4ada1162383d98e9"},{"alg":"SHA-256","content":"f014bb22a82665e6c6bfa092fdf8ae1253b4720880d708bf5b164bbf4485f56b"}]},{"bom-ref":"63eabb1b4ea2a013","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/htmlparser2/package.json","hashes":[{"alg":"SHA-1","content":"9b04372e328879041da8678a7ccf3c06a28941f0"},{"alg":"SHA-256","content":"9531c552f8bae4773c1cd60c82aa6eddfb455efda55b2a20bb651fc010da58fb"}]},{"bom-ref":"8efe613cd48808fe","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/isarray/package.json","hashes":[{"alg":"SHA-1","content":"ab8acbe8ed0a77bb0ffdb1416758fb659f61d598"},{"alg":"SHA-256","content":"083f974e63787f3d95611642c78c036bc2c5e0fbed443804500b9328ea69f74d"}]},{"bom-ref":"5a4040d52e4206ed","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/lodash/package.json","hashes":[{"alg":"SHA-1","content":"727f3ff6469bd987fcea8093d885fd40ed5f0357"},{"alg":"SHA-256","content":"eb5d62e173ed8dd45dc5417c5d9b1981def2e335f44b402507fcf206310d81da"}]},{"bom-ref":"2acb2203f67243b3","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"a92e127209f2f143bdc03e00e3c32ac87b6dd13f"},{"alg":"SHA-256","content":"7a06e45bb5ec514ac88be84d3f679ee1b87228a41b805bfcff0b8452be35d802"}]},{"bom-ref":"74b88c914fef0125","type":"file","name":"/juice-shop/node_modules/sanitize-html/node_modules/string_decoder/package.json","hashes":[{"alg":"SHA-1","content":"8bb5fc68a015d61057dff1f32826f6c2aadec61c"},{"alg":"SHA-256","content":"c2ddaf59d49fc50cb922aef5723935c9c0827e40a33a65b18197a447d966bc15"}]},{"bom-ref":"fb74b38eb55a949d","type":"file","name":"/juice-shop/node_modules/sanitize-html/package.json","hashes":[{"alg":"SHA-1","content":"5bead99213de5940b0e8f01d3e1cebf7b52eeeb4"},{"alg":"SHA-256","content":"91c64186e2ab5995c2bdd85edae12ef60a511bd27594e8c224aaaa7be4302ffc"}]},{"bom-ref":"66a9817e3639ade1","type":"file","name":"/juice-shop/node_modules/sax/package.json","hashes":[{"alg":"SHA-1","content":"893420e31a29f39b1d5e5402a62402e2bfe4e4b8"},{"alg":"SHA-256","content":"fbba682a346c26e3ba992594262e91104018477c6e6a58221d64b23339f66dc4"}]},{"bom-ref":"231bbe2cf48c1e6a","type":"file","name":"/juice-shop/node_modules/seek-bzip/node_modules/commander/package.json","hashes":[{"alg":"SHA-1","content":"74103756a0fe401ed4d8137e04607758a77897eb"},{"alg":"SHA-256","content":"3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d"}]},{"bom-ref":"6ac8faa20b564c33","type":"file","name":"/juice-shop/node_modules/seek-bzip/package.json","hashes":[{"alg":"SHA-1","content":"b9ebdcb7652f4785584d74376c1a378e786ba012"},{"alg":"SHA-256","content":"c2456ab31a98e61c5fbaea0e50fc6ac816e1c1b9ae0798353cb70237a578ec42"}]},{"bom-ref":"dee6d41ddfe76105","type":"file","name":"/juice-shop/node_modules/semver/package.json","hashes":[{"alg":"SHA-1","content":"d364bb66b4d1d9d5830fd72fa0809bddb8ec83c6"},{"alg":"SHA-256","content":"55c0bf1b742691521220be5da502e87a0d963027b5c889c52eb6bb9ae7cbf6c6"}]},{"bom-ref":"f0bb4dbd655f5770","type":"file","name":"/juice-shop/node_modules/send/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"329d5c20a36647b8","type":"file","name":"/juice-shop/node_modules/send/package.json","hashes":[{"alg":"SHA-1","content":"be9e23af3a0b910ad55ba8d3fea03ee05acbacad"},{"alg":"SHA-256","content":"2d511afc0dc9965be1f1a5b4b7966cad2e02b95be6e5ff962baabebc12739385"}]},{"bom-ref":"f9218c6e89bddd97","type":"file","name":"/juice-shop/node_modules/sequelize-pool/package.json","hashes":[{"alg":"SHA-1","content":"f4d051b193b22198e35b664d8137ce0faa320eb0"},{"alg":"SHA-256","content":"32a3cf4651e735e074ea036282c1fd04ec4e70ea1cc59ee1ade8e1507cc672f7"}]},{"bom-ref":"32061c2907f49f30","type":"file","name":"/juice-shop/node_modules/sequelize/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"},{"alg":"SHA-256","content":"ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"}]},{"bom-ref":"96d96dcffaa0d69c","type":"file","name":"/juice-shop/node_modules/sequelize/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"fe06f4aeed2a591d","type":"file","name":"/juice-shop/node_modules/sequelize/package.json","hashes":[{"alg":"SHA-1","content":"c2f39c7f8df35a56c610f8d70ba3359f1e7f3584"},{"alg":"SHA-256","content":"7549212df1c0b263cdee3b2026961ee206b75661555c56e03f97e078a74e3bdf"}]},{"bom-ref":"a5d3ac6dadd9647c","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/depd/package.json","hashes":[{"alg":"SHA-1","content":"f7628780acc25dc2bf90d09203940e23977b7ada"},{"alg":"SHA-256","content":"9df7afa632a7aa4e245c4583d06704b7f196cff999aca6d0a2492fa4d78f8e73"}]},{"bom-ref":"f45c08a765cce80e","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/http-errors/package.json","hashes":[{"alg":"SHA-1","content":"6d57719351d640c46fa95ee1e5e3748a52d1b2b7"},{"alg":"SHA-256","content":"1dd477225e1ea42b2b77ead847803fad252fd8d38744a0d37fafd71c21294fde"}]},{"bom-ref":"821426c1c6105e0b","type":"file","name":"/juice-shop/node_modules/serve-index/node_modules/statuses/package.json","hashes":[{"alg":"SHA-1","content":"3eb797e37a18f16f3f41fed3cb41c8e425df5933"},{"alg":"SHA-256","content":"39cf653c972f99725bae6adab44da5df52185fa1fc3bdaf671a8f62d0e182631"}]},{"bom-ref":"f59b4d99559e2930","type":"file","name":"/juice-shop/node_modules/serve-index/package.json","hashes":[{"alg":"SHA-1","content":"d0fda17773bfa73fd6e108562c471c95b6b3a16c"},{"alg":"SHA-256","content":"177ffd2dde5c523c1b2f008f8892b7f932fdf0882d407b48522fcd8cbfb95c0b"}]},{"bom-ref":"77721909fb3b4000","type":"file","name":"/juice-shop/node_modules/serve-static/package.json","hashes":[{"alg":"SHA-1","content":"26cc135af6d3450084492330fd0234a31e33c28d"},{"alg":"SHA-256","content":"068fbb0738f4eb2f8ea6ad2f9757ef060d0b79e7990bb9c3dc5ead72a0e3b1f8"}]},{"bom-ref":"5b537858eecef2c8","type":"file","name":"/juice-shop/node_modules/set-blocking/package.json","hashes":[{"alg":"SHA-1","content":"1fd9e7bbe562d20ee078877ba14aaef71a6dea6a"},{"alg":"SHA-256","content":"e0c598215c66f2c35edbc3cb2a3433d45f9d4b726524c095c93e7376d87a3bce"}]},{"bom-ref":"920a234861da600e","type":"file","name":"/juice-shop/node_modules/set-function-length/package.json","hashes":[{"alg":"SHA-1","content":"bd0bcfc74bf8e9fe8d1edb2b3a893d096a6067f7"},{"alg":"SHA-256","content":"2c81bab7f7a60d625164bd840d863548e3f9d4d1aa976b9d2966e5e1e36132a7"}]},{"bom-ref":"a4aef3309d8b063c","type":"file","name":"/juice-shop/node_modules/set-function-name/package.json","hashes":[{"alg":"SHA-1","content":"c9127dbfc1f2b960c9173553f74338ad3f2a4bb5"},{"alg":"SHA-256","content":"fc56137cbf0646e79e68881215cd5937db9830f3293e880e757b31832303e1fa"}]},{"bom-ref":"0a65299b7a72acc6","type":"file","name":"/juice-shop/node_modules/setimmediate/package.json","hashes":[{"alg":"SHA-1","content":"9cb87b9a133431be9bc111ed4b2aadbc10c0eb0e"},{"alg":"SHA-256","content":"56c7968c8062ad56e94b8ddb477e514098e0fa34b060aa86b67232fdb12e184d"}]},{"bom-ref":"0815c4d4e9d93207","type":"file","name":"/juice-shop/node_modules/setprototypeof/package.json","hashes":[{"alg":"SHA-1","content":"cbf2d7ae54256a7ab84245eb6d72c56f6a015453"},{"alg":"SHA-256","content":"5b39ddf23d2c12a751cb4af2ce12dd5c87314350be7526fff69b4a3ff2a2d538"}]},{"bom-ref":"f6b1d5316ad667df","type":"file","name":"/juice-shop/node_modules/shebang-command/package.json","hashes":[{"alg":"SHA-1","content":"2e2395a2e489846382e5cefdf011dcd7cacb82a5"},{"alg":"SHA-256","content":"44de390ae5ed6c5f9758b8b9c90b93fa53977d5361731600429f1de08f4b3f30"}]},{"bom-ref":"ded0d574d822fcff","type":"file","name":"/juice-shop/node_modules/shebang-regex/package.json","hashes":[{"alg":"SHA-1","content":"4c10640951d12ad418aa40c29b550fdfe3d2567a"},{"alg":"SHA-256","content":"b8018c6b8cc9900dfd1ac18a54956ba34c453fdc2da5e5fe555ee8f04133a1c5"}]},{"bom-ref":"5889f74c6cdb3423","type":"file","name":"/juice-shop/node_modules/side-channel-list/package.json","hashes":[{"alg":"SHA-1","content":"5ac3ca0b70af7d5b7c3aba36e212d2e73038cd80"},{"alg":"SHA-256","content":"90f0c08c6c17f4a3fa3dd61873223957b89da4201f01dc0c8b95b0b9e6a2a59a"}]},{"bom-ref":"9f4df1d7c39a3624","type":"file","name":"/juice-shop/node_modules/side-channel-map/package.json","hashes":[{"alg":"SHA-1","content":"ab10f444db9aa7420125e321884ca7d765854b2f"},{"alg":"SHA-256","content":"914a8bd732b82523d95bb697eec3e6d95badc5eb13b196fb0772e59354a3ab25"}]},{"bom-ref":"823e8e994ec3a12d","type":"file","name":"/juice-shop/node_modules/side-channel-weakmap/package.json","hashes":[{"alg":"SHA-1","content":"cdb337908d19d32a79dc189c7bce63981babc35e"},{"alg":"SHA-256","content":"8c11f0a1c6cfa549588d991a5cb1b04d62953277ed29f47463d415d5946388a8"}]},{"bom-ref":"686adacd190684c3","type":"file","name":"/juice-shop/node_modules/side-channel/package.json","hashes":[{"alg":"SHA-1","content":"ca10dba255c81fa003499be7fca61829ec3c331e"},{"alg":"SHA-256","content":"b33b18efda612f3149f2e5102b305cb77bc5067eae372fb1c83f74c263b5b18e"}]},{"bom-ref":"6f855ea33f2920fa","type":"file","name":"/juice-shop/node_modules/signal-exit/package.json","hashes":[{"alg":"SHA-1","content":"69859ffcd06c12c103de10319bd03a2b5cbcb903"},{"alg":"SHA-256","content":"cec1bba4c97e0cf653c13c8c79f745aac2232131ee718c93c4236c1b9577a201"}]},{"bom-ref":"978bc53752fedaaa","type":"file","name":"/juice-shop/node_modules/simple-concat/package.json","hashes":[{"alg":"SHA-1","content":"f422558f27a7e5f252acbd8bdbc175e5c334733d"},{"alg":"SHA-256","content":"d6ae2e35a0c64b4469f1e531a3244efd50be7c115ef42d1422e54d14d9359e99"}]},{"bom-ref":"9c82f68ac08dce77","type":"file","name":"/juice-shop/node_modules/simple-get/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"c5a4c61cfb916b9f37bab7a1dfa468aa67621ed6"},{"alg":"SHA-256","content":"0c292d1260be4289147620bcdac5c9d87a54391253acd9c16b0bebbda2e207c9"}]},{"bom-ref":"e25e6eaccafcac5e","type":"file","name":"/juice-shop/node_modules/simple-get/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"b6472ce506e8d5c379f868d79eb81e7a1b7f9989"},{"alg":"SHA-256","content":"50a55612f7430b826449e8404ab3137e28df64e75728c4c374c5a46e6e37a894"}]},{"bom-ref":"b94e945e54a9fd07","type":"file","name":"/juice-shop/node_modules/simple-get/package.json","hashes":[{"alg":"SHA-1","content":"a230100956cda434dd566886e048f791b4e2f373"},{"alg":"SHA-256","content":"edb86ca0d77c45e8c16c1b7ff777dfb58f762f635888bb2ebdc25fc48e0069f3"}]},{"bom-ref":"2758001ad706054f","type":"file","name":"/juice-shop/node_modules/smart-buffer/package.json","hashes":[{"alg":"SHA-1","content":"a9db89be9421029bd73baf8199042a08253a0b59"},{"alg":"SHA-256","content":"188644cdf467d6a768ad25ed3ee8eb845dc5cb29aadc4c88ca7c5cb5f631d66a"}]},{"bom-ref":"7cfb98bf45260e18","type":"file","name":"/juice-shop/node_modules/socket.io-adapter/package.json","hashes":[{"alg":"SHA-1","content":"fb5c3162ffd9b1be27d08bdaa36ef6cf2e97aded"},{"alg":"SHA-256","content":"86922aabfaa9b82872def69312c92b61594068dc43dfc49b9e144a0496940cea"}]},{"bom-ref":"dd7f0993f18a412c","type":"file","name":"/juice-shop/node_modules/socket.io-parser/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"867baf5b5a330ab0443c88e654e8c43622c3d7a9"},{"alg":"SHA-256","content":"7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"}]},{"bom-ref":"4030fb9d0d24e574","type":"file","name":"/juice-shop/node_modules/socket.io-parser/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"0076f00f34fb397e","type":"file","name":"/juice-shop/node_modules/socket.io-parser/package.json","hashes":[{"alg":"SHA-1","content":"8407ea865970282b35bed55b7833de5bd41e840b"},{"alg":"SHA-256","content":"67463e2389df34f3fb19eda8e5bc3cc8caebb760a0530c5530a1e1ff9354600a"}]},{"bom-ref":"f001c5e9558f75ff","type":"file","name":"/juice-shop/node_modules/socket.io/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"867baf5b5a330ab0443c88e654e8c43622c3d7a9"},{"alg":"SHA-256","content":"7a60ed9b6b14aa67f2ffe975715aaa6a78303844a5b43d33bfd619812088fe4d"}]},{"bom-ref":"38402745a1cdbcdc","type":"file","name":"/juice-shop/node_modules/socket.io/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"fb1d0e8ce2969253","type":"file","name":"/juice-shop/node_modules/socket.io/package.json","hashes":[{"alg":"SHA-1","content":"6f22afab9c088cf3ce3bf2d7b4a804024b45844a"},{"alg":"SHA-256","content":"1672136700d2101477b56598fac2ffc3f75927b73e29970efa8d6b092e602f0e"}]},{"bom-ref":"315091360349fc63","type":"file","name":"/juice-shop/node_modules/socks-proxy-agent/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"},{"alg":"SHA-256","content":"ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"}]},{"bom-ref":"4c83037594a975ce","type":"file","name":"/juice-shop/node_modules/socks-proxy-agent/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"986c3d6e92a35352","type":"file","name":"/juice-shop/node_modules/socks-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"a52f0cff949fd82f9e42d4214d2917964d7a9bdb"},{"alg":"SHA-256","content":"5667d50ea8b62c802757a3a2737a6515edbae3129bb3ef0980ca5d15c91ed99f"}]},{"bom-ref":"dc9e254460d7e925","type":"file","name":"/juice-shop/node_modules/socks/package.json","hashes":[{"alg":"SHA-1","content":"523f507922724c638bd3c8b47a400471996db5ae"},{"alg":"SHA-256","content":"eaddd44b758b8d53f4a9c11807748a7372319ef6b4ee680ac5e48ca64aece161"}]},{"bom-ref":"14b262c639f13c5a","type":"file","name":"/juice-shop/node_modules/sort-keys-length/node_modules/sort-keys/package.json","hashes":[{"alg":"SHA-1","content":"92992db85cebb6cc7fe8499883fab75317dede8d"},{"alg":"SHA-256","content":"a72e52a4583971e362e857316f0ac3455d8e337edfe9d517bb4b3df59c623019"}]},{"bom-ref":"1fa1cbb3b623af5d","type":"file","name":"/juice-shop/node_modules/sort-keys-length/package.json","hashes":[{"alg":"SHA-1","content":"a9e67fe75f99168558e087c823e00d16e2e5fd9e"},{"alg":"SHA-256","content":"397d31b7680c4de5ef238fa187ab90c465d9001725425f1b5afcbc21da3117a0"}]},{"bom-ref":"eb8dc18755cb77ce","type":"file","name":"/juice-shop/node_modules/sort-keys/package.json","hashes":[{"alg":"SHA-1","content":"f83b46c2c5ffaafb231798460fcb5ed2f0f5abbd"},{"alg":"SHA-256","content":"62554970e1506c5f08d966be5f20601b4f48ac0f4558b7b22302b8da77f9b8e5"}]},{"bom-ref":"32aeea7362a9f962","type":"file","name":"/juice-shop/node_modules/source-map/package.json","hashes":[{"alg":"SHA-1","content":"14a0ce5da3f60b78d15612f9b2d3ef0e9bd38345"},{"alg":"SHA-256","content":"3fdebd9f5c0107bcf7b73e0d17e0147042bcfb74884106e4428afbf17171ef06"}]},{"bom-ref":"de5726631b5114bd","type":"file","name":"/juice-shop/node_modules/sprintf-js/package.json","hashes":[{"alg":"SHA-1","content":"e99c21e49fb559d1b16f5662d44028a4e96b19a0"},{"alg":"SHA-256","content":"c97349295cae4e40a6f16a26096330997257c00be67bd8fd0ac3391719e4ee5f"}]},{"bom-ref":"3f966750467ab724","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/@npmcli/fs/package.json","hashes":[{"alg":"SHA-1","content":"c20a133f8af3542513591f91ff497e787041046a"},{"alg":"SHA-256","content":"5b88548f042642dbf78f279484943e4814fc5bf7232d617304907442eef5acf0"}]},{"bom-ref":"a272df752b38764f","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/agent-base/package.json","hashes":[{"alg":"SHA-1","content":"609a1aaa756f9bd0d85449d4c9e1040c170e9115"},{"alg":"SHA-256","content":"05daa619e51686fd21d15f987f943f6692c56b9f489f555cbaf42a4263d5c5e8"}]},{"bom-ref":"90a3707c76c5b1dc","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/are-we-there-yet/package.json","hashes":[{"alg":"SHA-1","content":"d792cfe57d00f2091f3d8d2625450abc412db2f6"},{"alg":"SHA-256","content":"e8b9bcbdd0c1936b2f42a8973ebe253772972e73cfaef6087b187346a47ba5d3"}]},{"bom-ref":"e1f05a29bc11d203","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/cacache/package.json","hashes":[{"alg":"SHA-1","content":"b950dc47e5dcf04ff6ee11af65ab345b787fa32d"},{"alg":"SHA-256","content":"382853487006ff7da906b0e7bea08c4f3a7b4491da6a17b7c7c82dcf6db9df10"}]},{"bom-ref":"45373b1e4d2a5749","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"a23947ade20a2757d5abf7f9fec197c2674c0a20"},{"alg":"SHA-256","content":"96ba7fc1dcfad50de6c406fb3fcfe57850ebea4d8ecedbc0b45b9c59fc629d69"}]},{"bom-ref":"a6fb8fb11eb1eed1","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/debug/package.json","hashes":[{"alg":"SHA-1","content":"f1c3de400f61581ce6d6d43f9ec4c456cb8017f7"},{"alg":"SHA-256","content":"ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af"}]},{"bom-ref":"9173122cbb01dff6","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/decompress-response/package.json","hashes":[{"alg":"SHA-1","content":"ac9fad510ffaa52eccff29729383a2f0ed602bec"},{"alg":"SHA-256","content":"8fb6b0b19d09cc1c5b2caad128ae39b2fd693a35bb3d440c4e1143bfb9d10080"}]},{"bom-ref":"3000491ff6d16fcc","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/detect-libc/package.json","hashes":[{"alg":"SHA-1","content":"5c540dad2b3981037a3e2ea4d66da80986ab8a37"},{"alg":"SHA-256","content":"ee88e5b954fdf3a8480b1d01ef767d68d8ca2c6da269f58c5cf1c5550e9aa2a7"}]},{"bom-ref":"57af52a551aee482","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/fs-minipass/package.json","hashes":[{"alg":"SHA-1","content":"55871ab123b38e2af83fdab7b189a4a61ba46465"},{"alg":"SHA-256","content":"02b36a2a2e729813a196c97486bb12955345e201d6ccda5fb2b322f62fa381ab"}]},{"bom-ref":"68fc1beb9295ee95","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/gauge/package.json","hashes":[{"alg":"SHA-1","content":"4fcf177b51dd6ac24efce2242b42e97148785e7d"},{"alg":"SHA-256","content":"9035270ed26179ae66ebb75f50a46b3c919ed6b0536350ce5130b72077b59de5"}]},{"bom-ref":"69332680a328449b","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/glob/package.json","hashes":[{"alg":"SHA-1","content":"ec0700462dfce89024e67c0437eabca858407176"},{"alg":"SHA-256","content":"b00b6d35eda6d4aa6893baf19e53b7d005019ed840e4fa116c926a532ec577cf"}]},{"bom-ref":"abdf859bce64a63a","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/http-cache-semantics/package.json","hashes":[{"alg":"SHA-1","content":"563b0d8af1a9641083e8f6cefbf4259fa845e7ca"},{"alg":"SHA-256","content":"bee0609d5ab09a590afe0e1209d3702b0afb0a3c158492f90902a724d889d22b"}]},{"bom-ref":"3cb2484f0169e9a4","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/http-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"c9882a8fcdc1aef336df3579af2fbb95974c3931"},{"alg":"SHA-256","content":"8993f95f35c6bd7adef96df428b2aa1e6cadf1a6b9c33eaa917f05098bb1bfca"}]},{"bom-ref":"a8801c1ad63806be","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/https-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"8c0a375492fc2b2fc37efae92d78ddd0b07de53a"},{"alg":"SHA-256","content":"d41d9127cbed43df8e2d404bfaf41361942a8afeb82eb57ccf8515e04eb33d1d"}]},{"bom-ref":"1569f307dadaa8a6","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/lru-cache/package.json","hashes":[{"alg":"SHA-1","content":"05256617890052107b341acf6cbe16fd9f22f86c"},{"alg":"SHA-256","content":"b06071b99bebe6cc7f7716f65ed4f36ff54aaf78d74ea0bec72f9029a8e2c215"}]},{"bom-ref":"d541d9319703d2d3","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/make-fetch-happen/package.json","hashes":[{"alg":"SHA-1","content":"8821070ee31fdf50e1f86d2044631dd4844dc388"},{"alg":"SHA-256","content":"550620d374c9f9c931c5a97a899b00ec74b5e89db48dce76b9c113dbf9e2c6f8"}]},{"bom-ref":"b0ca528e6d9e2bf4","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/mimic-response/package.json","hashes":[{"alg":"SHA-1","content":"9bb60eb9422dfbbf71811d0c1fe00dc14f61a36c"},{"alg":"SHA-256","content":"ff358428a418a46fb2431a2c48b396fb01c8291fec9e1f14434ade01196c8e9c"}]},{"bom-ref":"dde8a3b4590fbdcb","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minipass-collect/package.json","hashes":[{"alg":"SHA-1","content":"ff5c7864735844778d9f653604ac1754604f89c4"},{"alg":"SHA-256","content":"a0f049a58dbf9fd58e9b4686db2d51200cdea584c9b6425b400faa24133ace25"}]},{"bom-ref":"4613be6a31858741","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minipass-fetch/package.json","hashes":[{"alg":"SHA-1","content":"d8d597c8560806f8ed174711d725bbef811d8e03"},{"alg":"SHA-256","content":"4d59739fa5052e0c91edc0642ad95414427ffbac186c5570257cec8eb78dd751"}]},{"bom-ref":"24b88fb4c25903b2","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"fc79b496665e2cdfc4bdaac9c7d7c4b2f4645f2c"},{"alg":"SHA-256","content":"e99f6b67ba6e5cda438efb7a23dd399ee5c2070af69ce77720d95de5fb42921e"}]},{"bom-ref":"51693666ecd8db24","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/minizlib/package.json","hashes":[{"alg":"SHA-1","content":"5745585933310f7807eebd4e9bc01e2d83ba160d"},{"alg":"SHA-256","content":"dd7d78caf139ba9228a84bee7bb5fa7b92e4d332b836f07bdf1b0f9e78fa6340"}]},{"bom-ref":"725386273f5af8b1","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/mkdirp/package.json","hashes":[{"alg":"SHA-1","content":"46da394a85c88f3288e19ccd89c03174e1360c52"},{"alg":"SHA-256","content":"a7357d86be1fd6cd9ac7bc78c4d49155ce08c6087a2378fae5b15ce2eb34b9a2"}]},{"bom-ref":"0a3c93aa17fe811f","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/ms/package.json","hashes":[{"alg":"SHA-1","content":"c290eb97736177176d071da4ac855ab995685c97"},{"alg":"SHA-256","content":"1a6b4d9739790c0b94ab96c8cc0507e281c164c311ff4fbf5e57fb8d26290b40"}]},{"bom-ref":"1805cb91847316d0","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/napi-build-utils/package.json","hashes":[{"alg":"SHA-1","content":"35b672da35e299376d0ffc4f22fd57088150a835"},{"alg":"SHA-256","content":"001ba5640df99785e76b7d407ae35a24c490f145737cf3f194408fb17dfec411"}]},{"bom-ref":"ef768b2fdad81833","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/node-abi/package.json","hashes":[{"alg":"SHA-1","content":"73514830b941035ead3ae1de9cb5b8a3dd395f10"},{"alg":"SHA-256","content":"0bf67c397d8f6a9136d44eda86f417c0c81893e99697cbdf8733cb2982d7884b"}]},{"bom-ref":"56817f2eb8e02c70","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/node-gyp/package.json","hashes":[{"alg":"SHA-1","content":"bc62a4513e54488bafdeb2f4095483538cc80503"},{"alg":"SHA-256","content":"961dd5d2924a81e0c75ae3e5853784ae270e894b86c0229e31ed8619893a582c"}]},{"bom-ref":"7283d28339d0970b","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/npmlog/package.json","hashes":[{"alg":"SHA-1","content":"41bc0fcee7ad3ab38c8de1c030a849af36bbb262"},{"alg":"SHA-256","content":"13b247da6685d68bbbb6da390709fee7a2d6ce0658095bbc921ba31c1cbd86fa"}]},{"bom-ref":"cbb18bf6790d0019","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/prebuild-install/package.json","hashes":[{"alg":"SHA-1","content":"53b43dd098da8d4b0606d47cc71bbce0f9326251"},{"alg":"SHA-256","content":"d8502f5ce977ea10cc7e91e95b595ce845e838cf412801230e9a2f211ad68039"}]},{"bom-ref":"d0ce634b88bcba82","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"beaf95ad2c4e1d2e","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/rimraf/package.json","hashes":[{"alg":"SHA-1","content":"ed8ec0789d4558ea2492b653fd0be9f16b90020d"},{"alg":"SHA-256","content":"fea6f9125ca35f3d20946205be39fb3758b21b5af44f75910799573bd1230d4c"}]},{"bom-ref":"9e484656e512c9b3","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/simple-get/package.json","hashes":[{"alg":"SHA-1","content":"9db18a8163ab1fbb6e7c8bfd56c7483239d63c63"},{"alg":"SHA-256","content":"8337ba9774d6d8199a5861c6dfa57058f162bfb6210362c01db38f0a593f96d6"}]},{"bom-ref":"256982ce543519d0","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/socks-proxy-agent/package.json","hashes":[{"alg":"SHA-1","content":"b376e943406ee22b05111950d5053884327ec513"},{"alg":"SHA-256","content":"bbe51d9a0b7ac254c152efcc699dc65958e6fbab666d1c87d8b5873136b56a10"}]},{"bom-ref":"e9dd3f2338f35546","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/ssri/package.json","hashes":[{"alg":"SHA-1","content":"6e55d0ea8fbd72c6e89310dd958b22dcd6d2e56a"},{"alg":"SHA-256","content":"6b456b51d5431d6c47bd8ed15994582096f42e3e3cced980ecf4824bf627869f"}]},{"bom-ref":"c8197b7e163b4876","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/tar/node_modules/minipass/package.json","hashes":[{"alg":"SHA-1","content":"f351144cafb23a2e78d442708fcbcfdcd4c5420f"},{"alg":"SHA-256","content":"280af43113a60826e63a6bf79e115fdf5f89d5866f663cdde3d229640671cee1"}]},{"bom-ref":"4a45e178056d7a4b","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/tar/package.json","hashes":[{"alg":"SHA-1","content":"8b9fbec9a68117d7405c65ab254846287a63a494"},{"alg":"SHA-256","content":"89bd6d32c9e56eab63f3f62b96080aa43afa530675701610d74793d4719d1137"}]},{"bom-ref":"7a125a282d992244","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/unique-filename/package.json","hashes":[{"alg":"SHA-1","content":"9ffc9a77d53279c1e6dc931d443376bdda383931"},{"alg":"SHA-256","content":"1a1017165f7029207fc753240baccebb6b658881fec0b7cc88558d833a74c711"}]},{"bom-ref":"6464bd44e785a7d9","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/unique-slug/package.json","hashes":[{"alg":"SHA-1","content":"ea2ce7c13d4cba3ed5e48e0c8dbe7e22c7f38220"},{"alg":"SHA-256","content":"15936d07741b462fb77ed70603112bc2f8377869f326b15c185b78cea1692269"}]},{"bom-ref":"6df594c27c6246e0","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/wide-align/package.json","hashes":[{"alg":"SHA-1","content":"7f52b4652fe9ff874b294815483566da18d118ec"},{"alg":"SHA-256","content":"433984d8ab6027ebf54dea96093fb32a231fb0c4f16cc08445da7d62a6d8837f"}]},{"bom-ref":"fca3bff103eac7e9","type":"file","name":"/juice-shop/node_modules/sqlite3/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"d6a16b480cbd582f969b3d0ed89a157316268d10"},{"alg":"SHA-256","content":"c56b604bce814520105739e9559142ea9d4417454ebb933fd5687ca1d8d89bd5"}]},{"bom-ref":"1d589fdd77cbaf1f","type":"file","name":"/juice-shop/node_modules/sqlite3/package.json","hashes":[{"alg":"SHA-1","content":"97366bb2fa9d63bb9660b3d130efb6d37a6b80ef"},{"alg":"SHA-256","content":"c782c19485b0026e209076a236484a62885cb3a0828322a2936043230ed1ec41"}]},{"bom-ref":"8e2ca8a0d342448a","type":"file","name":"/juice-shop/node_modules/ssri/package.json","hashes":[{"alg":"SHA-1","content":"203926d505f969e44375e6a40942ce43ae490f44"},{"alg":"SHA-256","content":"5c18917c39afce09b6ebdfd212c736c390d74d1a72db8bd1561117f949669252"}]},{"bom-ref":"dbba4a5b4801cdf5","type":"file","name":"/juice-shop/node_modules/stack-trace/package.json","hashes":[{"alg":"SHA-1","content":"4ab8ba513ca79e30bcbe250d567418e8571d897e"},{"alg":"SHA-256","content":"9d4ebf4546836593d64b8627bab4f12100a33e39810cec6e175f3e71f0825c16"}]},{"bom-ref":"9ff575d3109ff007","type":"file","name":"/juice-shop/node_modules/statuses/package.json","hashes":[{"alg":"SHA-1","content":"7fcf010639ac286c47c517ea92d7ab13cbbee298"},{"alg":"SHA-256","content":"dc2508da5568ba768d94b73126cd20a5df934bc0c651ad681022236484ca156c"}]},{"bom-ref":"f0a2ae5752e08ced","type":"file","name":"/juice-shop/node_modules/stop-iteration-iterator/package.json","hashes":[{"alg":"SHA-1","content":"9da2c93d8d5dadcd5c5c6676b8da87a09dfd5299"},{"alg":"SHA-256","content":"d081cc886d55d23d704721c7b03b78b0f5600459a75d9b2fb63449d99d87cc81"}]},{"bom-ref":"abd5fb5e77216f1c","type":"file","name":"/juice-shop/node_modules/stream-buffers/package.json","hashes":[{"alg":"SHA-1","content":"6d8ca85d78d4faac879d4ec7cdbf4eadca10888a"},{"alg":"SHA-256","content":"7f6be66ac31f7dc6351d5737aa3d1cf016209b737c1b36b763cf6d5f15d112df"}]},{"bom-ref":"72695e569dc88c7e","type":"file","name":"/juice-shop/node_modules/streamsearch/package.json","hashes":[{"alg":"SHA-1","content":"b75e7127bad8663e7e009826561501526d2afd16"},{"alg":"SHA-256","content":"029b54b7db483222a64b99ab0e27b37d0ca59ca4a95d591b121b2cfb3a45eacb"}]},{"bom-ref":"92b3927b796b282d","type":"file","name":"/juice-shop/node_modules/strict-uri-encode/package.json","hashes":[{"alg":"SHA-1","content":"a82ba4bf6c6714c55d554a492ec4f4b4b0a2aa9e"},{"alg":"SHA-256","content":"0d73babfda858dfced0e39e23cd72e7db28ea986f26d838cd9c4f7d287a6feeb"}]},{"bom-ref":"96592c293999170c","type":"file","name":"/juice-shop/node_modules/string-width-cjs/package.json","hashes":[{"alg":"SHA-1","content":"a5306c15bba6cb123d9f061ca85eb56576c6638f"},{"alg":"SHA-256","content":"6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36"}]},{"bom-ref":"bbac2ad7fe4e46fe","type":"file","name":"/juice-shop/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"a5306c15bba6cb123d9f061ca85eb56576c6638f"},{"alg":"SHA-256","content":"6457a02418f004fe5d3fbbb19c7cbcc1450a8b887ff9a471dc6985ac83a48d36"}]},{"bom-ref":"f7d81a6cc7d02b37","type":"file","name":"/juice-shop/node_modules/string_decoder/node_modules/safe-buffer/package.json","hashes":[{"alg":"SHA-1","content":"bf9a046dba09dcce1bd474ff0f84c39cb57dc5b4"},{"alg":"SHA-256","content":"3d8b6d944be9e931a178914afbb3d6b79bfa199c032872b687bed41ed996c747"}]},{"bom-ref":"75341186905ba72b","type":"file","name":"/juice-shop/node_modules/string_decoder/package.json","hashes":[{"alg":"SHA-1","content":"da598f24028fdd9f3801969161159c1bbeb2034c"},{"alg":"SHA-256","content":"e278ca18803862a6d1b6bedc6a3394159ac86e5c4a162614fef006c79dcda3a2"}]},{"bom-ref":"15d851933a94501b","type":"file","name":"/juice-shop/node_modules/strip-ansi-cjs/package.json","hashes":[{"alg":"SHA-1","content":"892d549c672831716abe655f087946d2644f2852"},{"alg":"SHA-256","content":"0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530"}]},{"bom-ref":"14d5c8b21c5763bd","type":"file","name":"/juice-shop/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"892d549c672831716abe655f087946d2644f2852"},{"alg":"SHA-256","content":"0130850b9da0584f54cc20d3dab6365c807e9436ac78e016d5009efa99bd0530"}]},{"bom-ref":"3b96a65719cad758","type":"file","name":"/juice-shop/node_modules/strip-dirs/package.json","hashes":[{"alg":"SHA-1","content":"485740a0eee81e8d7459585521c0b7fda39bfb72"},{"alg":"SHA-256","content":"34d0fd27a6a9b87b1aed243a0c85ef98abe77e04946cc065162f62f6badcb10d"}]},{"bom-ref":"7a644e064b21f3fd","type":"file","name":"/juice-shop/node_modules/strip-outer/package.json","hashes":[{"alg":"SHA-1","content":"6d5564549073d159389a2b94894bacf92d24cd93"},{"alg":"SHA-256","content":"998a40b2428ff1fe95ba0ceff8a99565d16fa80763a276bc0aa4b21fc5a79993"}]},{"bom-ref":"baa5c6efd995f5af","type":"file","name":"/juice-shop/node_modules/strtok3/package.json","hashes":[{"alg":"SHA-1","content":"4c0a17cf164dfbab502a584082eb6e1847e6677b"},{"alg":"SHA-256","content":"4db1129e1b61a3d33a7955fefcfc4923e02cee3d238015545db4d3f67d79c99e"}]},{"bom-ref":"6b5388ccd2943d77","type":"file","name":"/juice-shop/node_modules/supports-preserve-symlinks-flag/package.json","hashes":[{"alg":"SHA-1","content":"ca0c14a63df0bdf41422d5e8c79d38e214da561a"},{"alg":"SHA-256","content":"aef0ae2d21ae9181d8702c2063ce0ee274ba1063e5312e4baab5673aa6d4d5db"}]},{"bom-ref":"5676177d191bd9c7","type":"file","name":"/juice-shop/node_modules/svg-captcha/package.json","hashes":[{"alg":"SHA-1","content":"0efdde17b2dbfc8fa8ca40aa6950c67e0e877631"},{"alg":"SHA-256","content":"0d9c39548169d675ff8c0dd7ebb76319d4aade71f423dd9643092f4e968341ab"}]},{"bom-ref":"ff8456e72f49483b","type":"file","name":"/juice-shop/node_modules/swagger-ui-dist/package.json","hashes":[{"alg":"SHA-1","content":"798672954d4bc6de27c5c9a268a96d75b22e63aa"},{"alg":"SHA-256","content":"bd16f463bc0ca4c4d136bc53930113560db8d95518ddfaf94a55117bc70c399a"}]},{"bom-ref":"dd7468f2aca5349d","type":"file","name":"/juice-shop/node_modules/swagger-ui-express/package.json","hashes":[{"alg":"SHA-1","content":"3e3986c37083e87abdc0f50382b0e13d1e989e72"},{"alg":"SHA-256","content":"2a7d7d50229bd13523e90730b6877cb9caa1e9491aa378640093a4040894d376"}]},{"bom-ref":"0a00a93dff90b9d4","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/bl/package.json","hashes":[{"alg":"SHA-1","content":"093539237b878bed9c3aa2b22e8c1b84cd414df7"},{"alg":"SHA-256","content":"fea66d3b8671e46f77e83db040837cf72da180b8d390d53c43d882fd553659df"}]},{"bom-ref":"13c7fa3b9b9fc537","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/chownr/package.json","hashes":[{"alg":"SHA-1","content":"c3024b92485c885b974e1f46cb2c32de716c6f06"},{"alg":"SHA-256","content":"7c18e85ac9eff99dc6cb6c5626e11ebea658e69119e0bc8cb4bd799c2b48125a"}]},{"bom-ref":"e2d40ebf9f403806","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"f9034430c03fe50c","type":"file","name":"/juice-shop/node_modules/tar-fs/node_modules/tar-stream/package.json","hashes":[{"alg":"SHA-1","content":"f5f0d892c75460d1d9b79580c165740daf8513fe"},{"alg":"SHA-256","content":"bf26c92d0b2d3b865681bac5cf3bca4cd405e33fcb47f45216899aaed4f81010"}]},{"bom-ref":"02387e3da6dd388f","type":"file","name":"/juice-shop/node_modules/tar-fs/package.json","hashes":[{"alg":"SHA-1","content":"b65b60b762d1806f9292fca397e2492ce3308629"},{"alg":"SHA-256","content":"ba35bcca6e868b872346f2905b3ff58fed8c99d475f9b3124afbf5de37514443"}]},{"bom-ref":"795d0b6e0dbb6560","type":"file","name":"/juice-shop/node_modules/tar-stream/package.json","hashes":[{"alg":"SHA-1","content":"82b92a8ad07a5547aa365bf7d54c48e4752fed7e"},{"alg":"SHA-256","content":"00e16b8127d249e89451e861b7757b51c7d8918bbce7273c978fdb3f121cd403"}]},{"bom-ref":"f6c88fce460a2592","type":"file","name":"/juice-shop/node_modules/tar/package.json","hashes":[{"alg":"SHA-1","content":"b68f0fbfd5f06dce070841eb03ee7784b25e694f"},{"alg":"SHA-256","content":"5dabbd9d4e4f0c6c7ba3096814c68bdce77f393e44938e05647f29b8d7351905"}]},{"bom-ref":"cc00ecf7f44a7967","type":"file","name":"/juice-shop/node_modules/tdigest/package.json","hashes":[{"alg":"SHA-1","content":"d346cb0cf35a0ada66aa9aa426d7ca7b1bb537ab"},{"alg":"SHA-256","content":"d956f6e092443eb1dca696b921b85ca86c93241de87a0fb8af4fcfaa15797b42"}]},{"bom-ref":"f32ee3ba438100b4","type":"file","name":"/juice-shop/node_modules/text-hex/package.json","hashes":[{"alg":"SHA-1","content":"22adf500975e8bb558a26de483d7b7c2044cb6a8"},{"alg":"SHA-256","content":"84b96b962f6fa158dfb9d814778d0f8f1635c35d4ed0dd65fefc6afb30570eeb"}]},{"bom-ref":"7106765bfc1f0e86","type":"file","name":"/juice-shop/node_modules/through/package.json","hashes":[{"alg":"SHA-1","content":"8bc63accbab0e155f8aa7c6eb46eee6e859bcb6b"},{"alg":"SHA-256","content":"6580a473cf2f91c6752a01d2c31f729cb14f7e042b830ba46f8949f89e26bdb4"}]},{"bom-ref":"55380a75c98f7643","type":"file","name":"/juice-shop/node_modules/timed-out/package.json","hashes":[{"alg":"SHA-1","content":"4e735d6703795556aa1bdc916058d1d301d6d746"},{"alg":"SHA-256","content":"fdd01b108ebb6fc5e033fb494fbd52bdd7ac38759cd66e930cd43d49b86ecab2"}]},{"bom-ref":"d89817f435fa3c47","type":"file","name":"/juice-shop/node_modules/tiny-inflate/package.json","hashes":[{"alg":"SHA-1","content":"34700e8451c817e74d6c6f9a1c0801703e11a63a"},{"alg":"SHA-256","content":"7a97c9567b054c9294036537d42a112f4bd4263892fbfe2714e6acdf25816c6d"}]},{"bom-ref":"e353d34eddfe338e","type":"file","name":"/juice-shop/node_modules/tinyglobby/node_modules/fdir/package.json","hashes":[{"alg":"SHA-1","content":"87c30edff77dd2a0847ac92b0a76837682d64eb2"},{"alg":"SHA-256","content":"aca49395d61ef383a09f74555c66ed45817ca2b5724e710a4dc9e0471b83d8f5"}]},{"bom-ref":"2c13ce75b2c95ae7","type":"file","name":"/juice-shop/node_modules/tinyglobby/node_modules/picomatch/package.json","hashes":[{"alg":"SHA-1","content":"c39e8b54abb2ea9a53dbb2013c1854057971f7a4"},{"alg":"SHA-256","content":"b8deb10b4e1f7cc2fe8236a70995f4c6b5ec3ecf93f02f2b6427a8600d2c1d20"}]},{"bom-ref":"7f621bf368f173ba","type":"file","name":"/juice-shop/node_modules/tinyglobby/package.json","hashes":[{"alg":"SHA-1","content":"800e1c7af60c9646b06d305edb23dee61466bd66"},{"alg":"SHA-256","content":"83419fbcd0e8b6b1fadd70f647cba140e9fc7f59748525541b9874fa1fae152e"}]},{"bom-ref":"f243486adedc0a05","type":"file","name":"/juice-shop/node_modules/to-buffer/package.json","hashes":[{"alg":"SHA-1","content":"2e3e5055412187a0c53bf11b58b792633297aba8"},{"alg":"SHA-256","content":"b9a28e593c952536fd850edc56098bf40679a21e7d1aa6e64a762921af663ef7"}]},{"bom-ref":"4920032169d1f85d","type":"file","name":"/juice-shop/node_modules/to-regex-range/package.json","hashes":[{"alg":"SHA-1","content":"c16a607925055788aae94f1123fa0d769af161bf"},{"alg":"SHA-256","content":"766fc1bb34fffcd503c89f4194188ce059795c52fd0dc6753cd4b7dcfc3fe1ec"}]},{"bom-ref":"9785a62dbac3d780","type":"file","name":"/juice-shop/node_modules/toidentifier/package.json","hashes":[{"alg":"SHA-1","content":"e8fe1d02a381b71a33e41588ae26746d34fa4903"},{"alg":"SHA-256","content":"f34c59f784d43da6e633390d85d14ca60539b4676159444f313c62fcfc3b68dc"}]},{"bom-ref":"8a7f536793e7dc3b","type":"file","name":"/juice-shop/node_modules/token-stream/package.json","hashes":[{"alg":"SHA-1","content":"45c7c0d74ae7dd7472a18f68b9ad05815a6f84ea"},{"alg":"SHA-256","content":"0715f6c496a2e1866067d32679bb610687465f6f94724bb1c7bcdc1b50964f08"}]},{"bom-ref":"0822241bd66b60fa","type":"file","name":"/juice-shop/node_modules/token-types/package.json","hashes":[{"alg":"SHA-1","content":"3836dc720a9de8346b44e9b48075a0cf40a12a08"},{"alg":"SHA-256","content":"8376de6a6272c19359e4feb53a8206760777291a7a09cec3964ee37fe092354e"}]},{"bom-ref":"e3dca88fdc9c0ce5","type":"file","name":"/juice-shop/node_modules/traverse/package.json","hashes":[{"alg":"SHA-1","content":"06c9415120aba8a3d5a3564763b9b406cb96f23a"},{"alg":"SHA-256","content":"305d53d5257aa2a3618a2ce42ce50ad45d1b108186580f3c00482e42086b2d14"}]},{"bom-ref":"9bd9c8858842107d","type":"file","name":"/juice-shop/node_modules/trim-repeated/package.json","hashes":[{"alg":"SHA-1","content":"43166e064e6112331c58224799fcda38e15dab92"},{"alg":"SHA-256","content":"caf8852960da48c505e1ec6884878a9bb52b8fbbb8eb1dcc855f19a7f50fe4ac"}]},{"bom-ref":"0f0b5cd1b3d2db3a","type":"file","name":"/juice-shop/node_modules/triple-beam/package.json","hashes":[{"alg":"SHA-1","content":"1e356e8f3df9978c633d2fdd6adef6f8f6f17f9f"},{"alg":"SHA-256","content":"b7c3d5228846e6719feb034f1aa72f294f1804ef9cf1f3fd7e1659413b9b3950"}]},{"bom-ref":"64642fe15886c73f","type":"file","name":"/juice-shop/node_modules/truncate-utf8-bytes/package.json","hashes":[{"alg":"SHA-1","content":"97ad55b3d7fef9910d4e8b426845e9a2e8bdbe01"},{"alg":"SHA-256","content":"8da766c7092b0ce9fd8f3b2ac2f41d1b739df9210067d3f710d65d95c9c17a7a"}]},{"bom-ref":"8edd1128fd211f4f","type":"file","name":"/juice-shop/node_modules/tslib/package.json","hashes":[{"alg":"SHA-1","content":"c7227cadc95e0155ca68f85e9487ebbb9091034e"},{"alg":"SHA-256","content":"7ecf3460a204a34f0ef8ea32d0f9828385658d4e5d5e271f93f40e7b36a32972"}]},{"bom-ref":"3b0d3a3c8a9b2423","type":"file","name":"/juice-shop/node_modules/tunnel-agent/package.json","hashes":[{"alg":"SHA-1","content":"b0f728acf482a20e28d3d25e56b084529c2533d4"},{"alg":"SHA-256","content":"08a8560b650b49370af44148a8645c11675ba97d21ee7f347d8d434b13c51074"}]},{"bom-ref":"f8635e004c386c2d","type":"file","name":"/juice-shop/node_modules/type-is/package.json","hashes":[{"alg":"SHA-1","content":"28d55c4730fdacf9019317fae0ba93a0b6aebd0b"},{"alg":"SHA-256","content":"87917e3dda1080179447633c3edff7e4b917d62b463893c88cef5be0b2babc63"}]},{"bom-ref":"39ab322fb235d54c","type":"file","name":"/juice-shop/node_modules/typecast/package.json","hashes":[{"alg":"SHA-1","content":"21c7885a03c0f346f10b8c44d64dc5e2b06a4345"},{"alg":"SHA-256","content":"751046532a62d8d98efba8b21055fea0acf58057a69713cf4badbbbddc30af6a"}]},{"bom-ref":"593170ec620c328f","type":"file","name":"/juice-shop/node_modules/typed-array-buffer/package.json","hashes":[{"alg":"SHA-1","content":"d2a1cbffbc42f558a580d54bd12a6a496ac1b569"},{"alg":"SHA-256","content":"f0f933ad37d3be61efcb8c4fe64088cd97a4bc86038d5bc19f33df1e995bac56"}]},{"bom-ref":"23015def3c20c60a","type":"file","name":"/juice-shop/node_modules/typedarray/package.json","hashes":[{"alg":"SHA-1","content":"80e445329a66d6a606165762bb9c34dd7caf135d"},{"alg":"SHA-256","content":"622ebab64ef61f10e4dd28a099e88545c477ccf7d5aa28d2eb4462c857e76fda"}]},{"bom-ref":"68d69ec01d461681","type":"file","name":"/juice-shop/node_modules/uglify-js/package.json","hashes":[{"alg":"SHA-1","content":"babba559ebf25dbad8e337ff1e622e1e499ecd28"},{"alg":"SHA-256","content":"4e7908267a1b0dfd5af0004dba63e8392ffc509ae986d5931017a55d7d65167d"}]},{"bom-ref":"8f40f521334774b3","type":"file","name":"/juice-shop/node_modules/unbzip2-stream/package.json","hashes":[{"alg":"SHA-1","content":"cf8bdf0d4fa8254d541678572099ad8738f1e054"},{"alg":"SHA-256","content":"ebb4f3f85319e57392b46070e1c39ba33ad74aa2f01934ffea0ecfcbb22282af"}]},{"bom-ref":"ed44397c37947978","type":"file","name":"/juice-shop/node_modules/unc-path-regex/package.json","hashes":[{"alg":"SHA-1","content":"5e66f1c422e03aee88f570bd73d7498db87bc036"},{"alg":"SHA-256","content":"ec92f74becc17cf02d61f006553f750e6a9ebbe2e5dfb4057003f9e67065f973"}]},{"bom-ref":"3d86f22b0539a548","type":"file","name":"/juice-shop/node_modules/underscore.string/package.json","hashes":[{"alg":"SHA-1","content":"becb44287069fbf82c0b0d3c281b1bcfcbf135f4"},{"alg":"SHA-256","content":"b8a24fd9e9423e22f083c7cf94fbf8f45caa56bf9e662fb58deb7a5999ab5e34"}]},{"bom-ref":"69f1629597496dfa","type":"file","name":"/juice-shop/node_modules/undici-types/package.json","hashes":[{"alg":"SHA-1","content":"def899bd021e6c2f7b962f89c29326e2eab41c2c"},{"alg":"SHA-256","content":"11f873b423b96a5ad444a099685ca6b9de1379dcd83fd8d368e757ddb53658e4"}]},{"bom-ref":"8ee07232ca8c209a","type":"file","name":"/juice-shop/node_modules/unicode-properties/package.json","hashes":[{"alg":"SHA-1","content":"6d843d2dbd0f2cb1a31a2ae38b8e90fcb43d75a5"},{"alg":"SHA-256","content":"4dba3776474dc9f928749684eeaeabacb40fd0e58ef704b2c2a976201830183b"}]},{"bom-ref":"71648dca7a744fc0","type":"file","name":"/juice-shop/node_modules/unicode-trie/node_modules/pako/package.json","hashes":[{"alg":"SHA-1","content":"d10e69957646e41e179176878d2a3de76aaf4f13"},{"alg":"SHA-256","content":"dc1090fc2228e15fb13cc8aa81f3c99c9c0a4237f99a42d1c7ffda1b137cf1cf"}]},{"bom-ref":"0faaa7038316ccaa","type":"file","name":"/juice-shop/node_modules/unicode-trie/package.json","hashes":[{"alg":"SHA-1","content":"06c142c393c921d1f8ea85e83697d9ac3c737b06"},{"alg":"SHA-256","content":"11742ae162c45a0f55a4d85ae1c6dc7dd380e203173d3bca04e72ca3b68729b6"}]},{"bom-ref":"50c511fea07112db","type":"file","name":"/juice-shop/node_modules/unique-filename/package.json","hashes":[{"alg":"SHA-1","content":"7ab7ef7fed369084e86d0800e1861115c3ff1bcd"},{"alg":"SHA-256","content":"ac3d03b4b239b3eff717b2fdb3dac9f32fd9bf49ee8c20cd87f82fd148c2a7e5"}]},{"bom-ref":"52fb31983803b69a","type":"file","name":"/juice-shop/node_modules/unique-slug/package.json","hashes":[{"alg":"SHA-1","content":"6bfb7b3e3ad92a208217828bc65a87369999d06f"},{"alg":"SHA-256","content":"23b9c2630936c9633601c95d91165f2d5dd8f099886e058873eb282ac537fdb7"}]},{"bom-ref":"378665bf4cf9fb8f","type":"file","name":"/juice-shop/node_modules/universalify/package.json","hashes":[{"alg":"SHA-1","content":"ee873fdef51ff8bb443eaa2e404c470fee171133"},{"alg":"SHA-256","content":"10e53f10939bb8a4a73af6e06829b670bbf9da66a36edcc644441852806b87ee"}]},{"bom-ref":"cb0a97786428ba3b","type":"file","name":"/juice-shop/node_modules/unpipe/package.json","hashes":[{"alg":"SHA-1","content":"f67f2d17a18c3ded93c9423903df8e6678f4e416"},{"alg":"SHA-256","content":"28b717f978d2a4fc72cd08236931443b63fe6586102df3d1967e2b21ea8c5e11"}]},{"bom-ref":"71aadbccd34b2a1d","type":"file","name":"/juice-shop/node_modules/unzipper/node_modules/bluebird/package.json","hashes":[{"alg":"SHA-1","content":"798aabfd8f98b7acc51b06ccf115f6f5f13ff3bb"},{"alg":"SHA-256","content":"5e8f820b5628dc16da723fdb42c0c8c50a59f201591a335310fe754a076598f6"}]},{"bom-ref":"b6604634b4acc5b9","type":"file","name":"/juice-shop/node_modules/unzipper/package.json","hashes":[{"alg":"SHA-1","content":"ff392885ebb8c1ee02209a3803b2e7d3f585fd01"},{"alg":"SHA-256","content":"10a99b6c186386454323df981067d807c9cf22493d3636bdad05e599adba5635"}]},{"bom-ref":"6ce0e7d71f8f50ed","type":"file","name":"/juice-shop/node_modules/url-parse-lax/package.json","hashes":[{"alg":"SHA-1","content":"4f3578d706cc6f6b8c71191b6846e74e91d60259"},{"alg":"SHA-256","content":"7ccad07cb7916cb11fdf9ee02fb93a9dceabc860c1550186506c0744b1504f76"}]},{"bom-ref":"2b8e827065d20bdf","type":"file","name":"/juice-shop/node_modules/url-to-options/package.json","hashes":[{"alg":"SHA-1","content":"72b6578557d3299f9e72b3d0bcca11f73e3581af"},{"alg":"SHA-256","content":"39f7f5ee9153c83263fdf0c38e140d34ec4a9bbb88c9988862e2f0530033994e"}]},{"bom-ref":"905c50422d2126c5","type":"file","name":"/juice-shop/node_modules/utf8-byte-length/package.json","hashes":[{"alg":"SHA-1","content":"223456bfa4f5067cc378339ab9c448b028e4d203"},{"alg":"SHA-256","content":"b889d007bbd065efe6d9dedc6b4905794fb17b179e0591501782df6afc085314"}]},{"bom-ref":"964957d29aaf7223","type":"file","name":"/juice-shop/node_modules/util-deprecate/package.json","hashes":[{"alg":"SHA-1","content":"2e69081e7bab6e09d3dcfd680716fdeea577431d"},{"alg":"SHA-256","content":"7bba467f049074957e693fc06672848b040c38fa071b6eed8690f5fbe090a8b2"}]},{"bom-ref":"c917aa1887219802","type":"file","name":"/juice-shop/node_modules/utils-merge/package.json","hashes":[{"alg":"SHA-1","content":"a03473329c34092ea6a88cc11c409a4ecf8bad33"},{"alg":"SHA-256","content":"6238e6d7e2fddd3e4826014b4e69cb20d332b472999728a7157db454c69121b8"}]},{"bom-ref":"8d3874c860a7dd13","type":"file","name":"/juice-shop/node_modules/uuid/package.json","hashes":[{"alg":"SHA-1","content":"a58d29c1fd72b80ea213864527ae7bb48ae3f2be"},{"alg":"SHA-256","content":"56c3eae5f83172f7ab5205980ebd9a1328f6436628d893720938d5679208922c"}]},{"bom-ref":"9996fe96c3b72ad6","type":"file","name":"/juice-shop/node_modules/v8flags/package.json","hashes":[{"alg":"SHA-1","content":"fe85f10e486cd4e1d7ee177facfe769a897c033a"},{"alg":"SHA-256","content":"4a2fcc6269964dfc38575354664c1c3643ae60829841e79bc7d750de58b244c7"}]},{"bom-ref":"4dbaaec070163f8f","type":"file","name":"/juice-shop/node_modules/validate/package.json","hashes":[{"alg":"SHA-1","content":"47c6d175ec289a4e7ef3cad1758e784810496aa5"},{"alg":"SHA-256","content":"605a57bda1914000b35b68d484f713b57b95a244fb82371c00b0cbfbc908ec4b"}]},{"bom-ref":"3d2439a2ce7181e1","type":"file","name":"/juice-shop/node_modules/validator/package.json","hashes":[{"alg":"SHA-1","content":"eb80193f4fd9b5609d93bf399acf2ecce162f1a0"},{"alg":"SHA-256","content":"e33c239e4e4cbd1142b7ad37e831951f45cce3e655f3164eb88c7e1eae1a2af5"}]},{"bom-ref":"21bc029e764d5a8a","type":"file","name":"/juice-shop/node_modules/vary/package.json","hashes":[{"alg":"SHA-1","content":"82f740e2254b786f7a3a39a762d4d0fc6ec7b008"},{"alg":"SHA-256","content":"73edaee964d527117a9f69d6360fbe6cec534abd9127794be01a6af58a139daa"}]},{"bom-ref":"62c497608972c61d","type":"file","name":"/juice-shop/node_modules/void-elements/package.json","hashes":[{"alg":"SHA-1","content":"b0b8e02fd6d29a691289f9d279e1be41201a79c4"},{"alg":"SHA-256","content":"9cc3503e65c64719269421c1820f11bb66ad5a5f1597ee68e350ed18dd23b98a"}]},{"bom-ref":"64e58455ebbccb56","type":"file","name":"/juice-shop/node_modules/walk/package.json","hashes":[{"alg":"SHA-1","content":"48409567c2bff0f58fde79948118ac9d50ada686"},{"alg":"SHA-256","content":"a2a8f916e38926b6b45761a7e8eb14952a1754a0bf0d2c3689038af9bf156bdb"}]},{"bom-ref":"42831aaf00e02ad4","type":"file","name":"/juice-shop/node_modules/walkdir/package.json","hashes":[{"alg":"SHA-1","content":"ec0b65e01578e50bb446aca570ba7b5efde8e29f"},{"alg":"SHA-256","content":"628303c50a0895ba01d1869d6adf63eecf2d3534e2b143f98d3f21eca77d25d6"}]},{"bom-ref":"4c6fc01af242b0b0","type":"file","name":"/juice-shop/node_modules/walkdir/test/comparison/package.json","hashes":[{"alg":"SHA-1","content":"ff50ca027638d23483435b73da1bdcfca4b7f269"},{"alg":"SHA-256","content":"1fe01eca0bb65e21e447caa7378df650ffd1a129ef80c0a07bea254c07646628"}]},{"bom-ref":"3aa28850c2ccee95","type":"file","name":"/juice-shop/node_modules/which-boxed-primitive/package.json","hashes":[{"alg":"SHA-1","content":"0af7e24076139571355204f3bace1c3a603949a6"},{"alg":"SHA-256","content":"9e0869e7c145b1d1e6ea0e63b2870a1aa230e7f75ffe69240908c90d35c02aa9"}]},{"bom-ref":"a0a8532600a9308b","type":"file","name":"/juice-shop/node_modules/which-collection/package.json","hashes":[{"alg":"SHA-1","content":"7c6ebd4f25ca1ca27d30f8d395cf4f330f619638"},{"alg":"SHA-256","content":"bf95e02a88d5b89dbc6b544c334a317c234f3c4a237f9f1dcf611506990ed196"}]},{"bom-ref":"37aa91132aded5ec","type":"file","name":"/juice-shop/node_modules/which-module/package.json","hashes":[{"alg":"SHA-1","content":"66bc9244d8b750f43d498703675d6d71f8e1981c"},{"alg":"SHA-256","content":"02f6f6833d09c32100317a390892888ae44da4f712b2271d4b308bcace09a99f"}]},{"bom-ref":"0951123f27a35925","type":"file","name":"/juice-shop/node_modules/which-pm-runs/package.json","hashes":[{"alg":"SHA-1","content":"d37f6577f5a53592a5080771fec8aa3340b1a86c"},{"alg":"SHA-256","content":"0eb3591abd6e960733cb1d8739e329d2565397e5a3d8b4326b30c80f31d69ab4"}]},{"bom-ref":"7fa70dd613cbcd4a","type":"file","name":"/juice-shop/node_modules/which-typed-array/package.json","hashes":[{"alg":"SHA-1","content":"83d5355df4ef773d3a2d050c11d6c5d2a34310e7"},{"alg":"SHA-256","content":"ea9e55ff13c852ed5ac5746a4049a3f6131722f8372f2c3fc0b3802a5538588c"}]},{"bom-ref":"dd6b8d59e47cff8f","type":"file","name":"/juice-shop/node_modules/which/package.json","hashes":[{"alg":"SHA-1","content":"402837c5ba60f95b309957adc4657b8fe4fb1f05"},{"alg":"SHA-256","content":"43010039ed5e89f7186960be682b3cb5cda5ab6cdfb06cbfd4f081cf0e7b4260"}]},{"bom-ref":"316cba6975c317db","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"4c7437872b679c9cb6df8a53d4928c07c36a18dd"},{"alg":"SHA-256","content":"3b443ff0b23130799b2c5755582ef6f62096064e4d270d0122b03477ea68ca1c"}]},{"bom-ref":"75a49be9588b5785","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/is-fullwidth-code-point/package.json","hashes":[{"alg":"SHA-1","content":"8b4b76c3bc63680159f5e97ff8e3a218f25e7c00"},{"alg":"SHA-256","content":"1c5c73b201f50ae5201dc7afad16ccb32f16c411040c5b93b689f4c6ade17c27"}]},{"bom-ref":"93da7a948f426d63","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"1b26460d736e2cd59d75ff10cbdee5c483f6596f"},{"alg":"SHA-256","content":"4118bb2266a7a1adaac138d4b5813742483414c9dd536b98a851e032ae98adf3"}]},{"bom-ref":"99df3422b00da101","type":"file","name":"/juice-shop/node_modules/wide-align/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"9ce1d9cd5e0e83463c97e87ce10e25bbcc6f9e4a"},{"alg":"SHA-256","content":"682840451efde52b36dba755741011e0d82bc2a89760e24aab8c564723d8369a"}]},{"bom-ref":"4c70d1587d93fce3","type":"file","name":"/juice-shop/node_modules/wide-align/package.json","hashes":[{"alg":"SHA-1","content":"3a42d35dea67d3af17d76c4232cf1f56532b1732"},{"alg":"SHA-256","content":"524d5d89924ba461deda48989a748f8450bca19fd00eb8ffa07dbed870bfdfb1"}]},{"bom-ref":"709e5220159d8ebf","type":"file","name":"/juice-shop/node_modules/winston-transport/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"50023f4b46ff45aa","type":"file","name":"/juice-shop/node_modules/winston-transport/package.json","hashes":[{"alg":"SHA-1","content":"41ed9fa7f4c7c753ec90200f0c3df7665149afb8"},{"alg":"SHA-256","content":"212ebeebb9f3f301a77fe581c1c367ef9d70ec8b3d7c46593010b2fd2e89bda1"}]},{"bom-ref":"6edacd55143e99d8","type":"file","name":"/juice-shop/node_modules/winston/node_modules/@colors/colors/package.json","hashes":[{"alg":"SHA-1","content":"bc0cd68d3d25a31abb16de7e2b5ff5e20d974403"},{"alg":"SHA-256","content":"af67d5bc4fac331176780d7da47802a48d9bca01596d571685351b4a03a6b9c1"}]},{"bom-ref":"345f5b4ccc197a25","type":"file","name":"/juice-shop/node_modules/winston/node_modules/is-stream/package.json","hashes":[{"alg":"SHA-1","content":"dac0050410d80a991cfa4ccdd0eb37f4020b49dd"},{"alg":"SHA-256","content":"07cf93d9490a2d7ed7731810b49b1c314c760291bb66cdfbc0279258ceb65ec9"}]},{"bom-ref":"9b89e724bf648843","type":"file","name":"/juice-shop/node_modules/winston/node_modules/readable-stream/package.json","hashes":[{"alg":"SHA-1","content":"6bc59e2d7a44059a5f86b25e3e8ef9b80a83fcac"},{"alg":"SHA-256","content":"469ea81f64037d1f179bcd46412217903a2924dd2e7d7d9b728659b6f12c3e69"}]},{"bom-ref":"e3c4704299df6454","type":"file","name":"/juice-shop/node_modules/winston/package.json","hashes":[{"alg":"SHA-1","content":"20eab7a88cdb780cb1023993439f123e19020641"},{"alg":"SHA-256","content":"f96cc6b8da151f7237b2fe38629ed06f55b7f230b281a70ddfa128e1b2648e6c"}]},{"bom-ref":"a20c4ba00d904fad","type":"file","name":"/juice-shop/node_modules/with/package.json","hashes":[{"alg":"SHA-1","content":"36745b30bb45cffb3ec3646489ca7406c3235363"},{"alg":"SHA-256","content":"30d01a7f84509e2ee075442a2e56ccbee6a9a98c46d86f32659d24b2b34a8609"}]},{"bom-ref":"caf9eddb3fc86d80","type":"file","name":"/juice-shop/node_modules/wkx/package.json","hashes":[{"alg":"SHA-1","content":"4fbad714a31c115ee6ba9b12e896792bd1a783e0"},{"alg":"SHA-256","content":"12eaedf0c094ee3c00b553926c70585eeeca003e9cc31d4c869fe68f711f2ea1"}]},{"bom-ref":"c55f12d127faaa25","type":"file","name":"/juice-shop/node_modules/wordwrap/package.json","hashes":[{"alg":"SHA-1","content":"91c29dfbc287ca5f45c833a5ab47bd471f344ad2"},{"alg":"SHA-256","content":"4346d2850babb5ed5b1685510e007adc142384e6468613f32f460db2cfee1297"}]},{"bom-ref":"9ac05bf51377a17c","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"3c9ef7bd0a1c3d805814c654c457cc315c48c116"},{"alg":"SHA-256","content":"d405f010681d53f77691015e98461f8484b2afe6a9edfdd2ddb27b1e8a8e883d"}]},{"bom-ref":"d1a4df64de024c87","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-convert/package.json","hashes":[{"alg":"SHA-1","content":"03f26ab8597e0117b7ad15bcfa9f0b31c8375ea9"},{"alg":"SHA-256","content":"9471d21744ca3137410448da6b3bd7b30ee91d42edce3b82ebcbf84faef74fb4"}]},{"bom-ref":"7c116a18a7e955ab","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/node_modules/color-name/package.json","hashes":[{"alg":"SHA-1","content":"411d7c87d5b1dec0d479aa13e3406b5c38ac34f5"},{"alg":"SHA-256","content":"4a557ea373907e4643badb89ff21b3f4b969d20631086d78eab2e03d05c2efa4"}]},{"bom-ref":"1e2daec5ecf3b3b0","type":"file","name":"/juice-shop/node_modules/wrap-ansi-cjs/package.json","hashes":[{"alg":"SHA-1","content":"3442b7381f1b431861a986d8cdf144ced299db29"},{"alg":"SHA-256","content":"0b0cf0bf62bd0cc71da2128e3269e63edd566feffdd501aa3692acd6db93c3c9"}]},{"bom-ref":"fdbb7ecc8c2f463b","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-regex/package.json","hashes":[{"alg":"SHA-1","content":"ce200865f7a4839de6213072c7986484139c50b1"},{"alg":"SHA-256","content":"a58f1d6dbaca116f4aaa83906a0a992da2303a07ca920b2ce877573988eae352"}]},{"bom-ref":"71b34af59138aab8","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/ansi-styles/package.json","hashes":[{"alg":"SHA-1","content":"adb4944aaa807d2d90a6d54e220759c3081c10d2"},{"alg":"SHA-256","content":"0cf1f46ceee4b380298db6e6a54f14d345abe09abd5f650cbc20c8ac2ab27744"}]},{"bom-ref":"2e45365470f5058d","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/emoji-regex/package.json","hashes":[{"alg":"SHA-1","content":"238c48183550d02ab5c0dd37e13d57006dce640a"},{"alg":"SHA-256","content":"181fa046bdbb7d8958c57dcef2e63aea9af667036e218c7222479a8618375f1a"}]},{"bom-ref":"a582fbd2ab8be328","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/string-width/package.json","hashes":[{"alg":"SHA-1","content":"53ae7a1b3953e86624927fec8421d453d9c88e41"},{"alg":"SHA-256","content":"adbcb3b95ea29c1f2a91a0af600fd9136ce408a38622332848ba4630dc473659"}]},{"bom-ref":"6df85ad24e28a08e","type":"file","name":"/juice-shop/node_modules/wrap-ansi/node_modules/strip-ansi/package.json","hashes":[{"alg":"SHA-1","content":"6c109cf2dd51ea9d89ed05e64161782df7559477"},{"alg":"SHA-256","content":"228b214dd06ca80ab3c36e2b890a8696a39cea65585f6d61498c922c615e18a0"}]},{"bom-ref":"1ca9c34b48444b8b","type":"file","name":"/juice-shop/node_modules/wrap-ansi/package.json","hashes":[{"alg":"SHA-1","content":"c14f366cb2c71b662f7edb2dcf7370a513fc641f"},{"alg":"SHA-256","content":"609dd6ab176847e57e799dba2e4c4ad355abe463ec67a5ab0dccec08b67e6761"}]},{"bom-ref":"7bc2f2f96c792ac5","type":"file","name":"/juice-shop/node_modules/wrappy/package.json","hashes":[{"alg":"SHA-1","content":"156d61004996b07079664753e7b5c415b99e4c89"},{"alg":"SHA-256","content":"712ac9c4c3cef8bc79f42cf6075ff18551f4cb768f35158214fd643853ad7abc"}]},{"bom-ref":"0bc7015f9686b629","type":"file","name":"/juice-shop/node_modules/ws/package.json","hashes":[{"alg":"SHA-1","content":"6f2ab48fb7d118a83ff9ae1ace83309f2db23321"},{"alg":"SHA-256","content":"61c104d44cd4ff02b190f970b8cb0a8d70af0a7274e0eff46580b1e20200decc"}]},{"bom-ref":"5cb0553d6523d9d6","type":"file","name":"/juice-shop/node_modules/xtend/package.json","hashes":[{"alg":"SHA-1","content":"1ff55cea8456af743102bdd7fc40b95fe34a7770"},{"alg":"SHA-256","content":"b02ffef8cda96c5c3ee00a00390e63f608362c2ddfb3ed754e181d013a45d48a"}]},{"bom-ref":"1b3dd836551c4000","type":"file","name":"/juice-shop/node_modules/y18n/package.json","hashes":[{"alg":"SHA-1","content":"ad32dfe662561409f091e109f6830ccab42124ff"},{"alg":"SHA-256","content":"5995de811ffa1b8a8e9ed9bd0444f60058dba9ce1ccbe12f2d5e12c31a975d9c"}]},{"bom-ref":"2365ffb651b17448","type":"file","name":"/juice-shop/node_modules/yallist/package.json","hashes":[{"alg":"SHA-1","content":"4eaebb818148fd3bcc27e1aef2d88497999f675e"},{"alg":"SHA-256","content":"1b9d47057ce39814531ff93f668823b4fa03e7d23945449c274a1ff6d4cc297f"}]},{"bom-ref":"8e682d2a2ca0f297","type":"file","name":"/juice-shop/node_modules/yaml-schema-validator/node_modules/commander/package.json","hashes":[{"alg":"SHA-1","content":"74103756a0fe401ed4d8137e04607758a77897eb"},{"alg":"SHA-256","content":"3ab88e050858ad5fc1d2e7f993d959b83c7e2ddec64afe86cc4055f799e4762d"}]},{"bom-ref":"f5e289aeac55de10","type":"file","name":"/juice-shop/node_modules/yaml-schema-validator/package.json","hashes":[{"alg":"SHA-1","content":"39604da28e16de9ffa9046ec18a06b36baabcf32"},{"alg":"SHA-256","content":"5a89e68a562c98edec01f9aefacf2d5f95e95d0dd543e8e0125a9333f59bc2e1"}]},{"bom-ref":"549be1d3f68fbc47","type":"file","name":"/juice-shop/node_modules/yauzl/package.json","hashes":[{"alg":"SHA-1","content":"e91b995ab78ed0ec2c169efc0c17f7f25c679e44"},{"alg":"SHA-256","content":"9119ac0c70d33b16e3c69dbc5cdeab71eb513124a04d961f2c9e7402c9fec8eb"}]},{"bom-ref":"b73a67394a26f9c9","type":"file","name":"/juice-shop/node_modules/z85/package.json","hashes":[{"alg":"SHA-1","content":"c7c525898d3d17ae288951589d49a82860f873cd"},{"alg":"SHA-256","content":"eb5ed55479185f63ff524af3718856f22fcbdee2befeeb2537b171bb90266896"}]},{"bom-ref":"52235df3c58a6ad7","type":"file","name":"/juice-shop/node_modules/zip-stream/package.json","hashes":[{"alg":"SHA-1","content":"543a5a3cbe7a0a3c766e9acc28a9d79696183d79"},{"alg":"SHA-256","content":"51c0c491481381690f272d535d4d1453fc4982f13bb96e659faff5a4487b8133"}]},{"bom-ref":"70f9e28367cdb7d5","type":"file","name":"/juice-shop/node_modules/zod/package.json","hashes":[{"alg":"SHA-1","content":"e168ef2ff344c6d274af1cb6cd14b33cb3f16d95"},{"alg":"SHA-256","content":"70eedbe34fd52385a4ae2f3e5759b19682189f0118ea73a6e7c32c677f61668e"}]},{"bom-ref":"cf87c4636bf6d5a1","type":"file","name":"/juice-shop/package.json","hashes":[{"alg":"SHA-1","content":"c29cbaf50f88c8bdf4ba41094a238fa93d5199ea"},{"alg":"SHA-256","content":"57b2d89c1b3500dfc04674b00c9ba374e1ef423ababb64e814b39f90fe87c933"}]}],"dependencies":[{"ref":"pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc","dependsOn":["pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14"]},{"ref":"pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14","dependsOn":["pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14","pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"]},{"ref":"pkg:deb/debian/libgomp1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=8d4d6890752630d0&upstream=gcc-14","dependsOn":["pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14","pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"]},{"ref":"pkg:deb/debian/libssl3t64@3.5.5-1~deb13u2?arch=arm64&distro=debian-13.4&package-id=4f12411d3227085b&upstream=openssl","dependsOn":["pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc","pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&package-id=02b5bf6dd9ecb243&upstream=libzstd","pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&package-id=90e7d5b74b631f9d&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1"]},{"ref":"pkg:deb/debian/libstdc%2B%2B6@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=9cc8acacefdee288&upstream=gcc-14","dependsOn":["pkg:deb/debian/gcc-14-base@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=78580bef4c21d3d4&upstream=gcc-14","pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc","pkg:deb/debian/libgcc-s1@14.2.0-19?arch=arm64&distro=debian-13.4&package-id=0e5ca87fa1ab7b35&upstream=gcc-14"]},{"ref":"pkg:deb/debian/libzstd1@1.5.7%2Bdfsg-1?arch=arm64&distro=debian-13.4&package-id=02b5bf6dd9ecb243&upstream=libzstd","dependsOn":["pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"]},{"ref":"pkg:deb/debian/tzdata-legacy@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=d9521b4a2d6d0070&upstream=tzdata","dependsOn":["pkg:deb/debian/tzdata@2026a-0%2Bdeb13u1?arch=all&distro=debian-13.4&package-id=b579583c7128019b"]},{"ref":"pkg:deb/debian/zlib1g@1%3A1.3.dfsg%2Breally1.3.1-1%2Bb1?arch=arm64&distro=debian-13.4&package-id=90e7d5b74b631f9d&upstream=zlib%401%3A1.3.dfsg%2Breally1.3.1-1","dependsOn":["pkg:deb/debian/libc6@2.41-12%2Bdeb13u2?arch=arm64&distro=debian-13.4&package-id=4de5c472655a9ac2&upstream=glibc"]}]}
diff --git a/submissions/lab4.md b/submissions/lab4.md
new file mode 100644
index 000000000..858fd1783
--- /dev/null
+++ b/submissions/lab4.md
@@ -0,0 +1,114 @@
+# Lab 4 Submission — SBOM and SCA
+
+## Task 1
+
+### SBOM counts
+
+| File | Format | Count |
+|---|---|---:|
+| `labs/lab4/juice-shop.cdx.json` | CycloneDX components | 3068 |
+| `labs/lab4/juice-shop.spdx.json` | SPDX packages | 909 |
+
+CycloneDX `specVersion`:
+
+```text
+1.7
+```
+
+CycloneDX and SPDX count different object models. CycloneDX lists more fine-grained components from the image, while SPDX groups software as packages and focuses more on license/compliance metadata. This is why one image gives different counts in two valid SBOM formats.
+
+### Grype severity table
+
+| Severity | Count |
+|---|---:|
+| Critical | 14 |
+| High | 85 |
+| Medium | 65 |
+| Low | 12 |
+| Negligible | 7 |
+| **Total** | **183** |
+
+### Top ten findings
+
+| # | Severity | ID | Package | Fix |
+|---:|---|---|---|---|
+| 1 | Critical | `GHSA-c7hr-j4mj-j2w6` | `jsonwebtoken@0.1.0` | `4.2.2` |
+| 2 | Critical | `GHSA-c7hr-j4mj-j2w6` | `jsonwebtoken@0.4.0` | `4.2.2` |
+| 3 | Critical | `GHSA-jf85-cpcp-j695` | `lodash@2.4.2` | `4.17.12` |
+| 4 | Critical | `CVE-2026-63073` | `libssl3t64@3.5.5-1~deb13u2` | `3.5.7-1~deb13u2` |
+| 5 | Critical | `GHSA-mp2f-45pm-3cg9` | `decompress@4.2.1` | none |
+| 6 | Critical | `GHSA-xwcq-pm8m-c4vf` | `crypto-js@3.3.0` | `4.2.0` |
+| 7 | Critical | `CVE-2026-34182` | `libssl3t64@3.5.5-1~deb13u2` | `3.5.6-1~deb13u2` |
+| 8 | Critical | `GHSA-23hp-3jrh-7fpw` | `tar@4.4.19` | `7.5.19` |
+| 9 | Critical | `GHSA-23hp-3jrh-7fpw` | `tar@6.2.1` | `7.5.19` |
+| 10 | Critical | `GHSA-23hp-3jrh-7fpw` | `tar@7.5.15` | `7.5.19` |
+
+Nine of the top ten findings have a fix version. I would patch the fixable Critical findings first, especially `jsonwebtoken`, `lodash`, `libssl3t64`, `crypto-js`, and `tar`. For `decompress`, there is no fix in the output, so I would check if it can be removed, replaced, or isolated.
+
+## Task 2
+
+### Grype and Trivy comparison
+
+| Severity | Grype | Trivy | Delta |
+|---|---:|---:|---:|
+| Critical | 14 | 10 | +4 |
+| High | 85 | 64 | +21 |
+| Medium | 65 | 68 | -3 |
+| Low | 12 | 31 | -19 |
+| Negligible | 7 | 0 | +7 |
+| **Total** | **183** | **173** | **+10** |
+
+### Different identifiers
+
+| Tool | ID | Package | Explanation |
+|---|---|---|---|
+| Grype only | `CVE-2026-48617` | `node@24.15.0` | Grype matched the Node binary from the SBOM. Trivy did not report this identifier, probably because of different binary matching or advisory source coverage. |
+| Trivy only | `CVE-2015-9235` | `jsonwebtoken@0.1.0`, `jsonwebtoken@0.4.0` | Trivy reported the CVE identifier. Grype reported the related GitHub advisory `GHSA-c7hr-j4mj-j2w6`, so this is mainly different advisory naming and mapping. |
+
+The decoupled SBOM approach is worth it when the same inventory must be reused later. For example, Lab 8 signs the CycloneDX SBOM as an attestation, so the SBOM becomes evidence connected to the image digest. It also lets us rescan the same shipped inventory later when new vulnerabilities are published. A single scanner like Trivy is better for quick local checks because it is one command and has fewer moving parts.
+
+## Bonus
+
+### Attestation command
+
+```bash
+IMAGE='bkimminich/juice-shop:v20.0.0'
+REPO_DIGEST=$(docker inspect "$IMAGE" --format '{{index .RepoDigests 0}}')
+DIGEST=${REPO_DIGEST#*@sha256:}
+jq -n --arg image "$IMAGE" --arg digest "$DIGEST" --slurpfile predicate labs/lab4/juice-shop.cdx.json \
+  '{"_type":"https://in-toto.io/Statement/v0.1", subject:[{name:$image, digest:{sha256:$digest}}], predicateType:"https://cyclonedx.org/bom", predicate:$predicate[0]}' \
+  > labs/lab4/juice-shop-attestation.json
+```
+
+First 20 lines:
+
+```json
+{
+  "_type": "https://in-toto.io/Statement/v0.1",
+  "subject": [
+    {
+      "name": "bkimminich/juice-shop:v20.0.0",
+      "digest": {
+        "sha256": "fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0"
+      }
+    }
+  ],
+  "predicateType": "https://cyclonedx.org/bom",
+  "predicate": {
+    "$schema": "http://cyclonedx.org/schema/bom-1.7.schema.json",
+    "bomFormat": "CycloneDX",
+    "specVersion": "1.7",
+    "serialNumber": "urn:uuid:d0c3bc8c-59cd-404e-ac13-dd325a975583",
+    "version": 1,
+    "metadata": {
+      "timestamp": "2026-09-20T15:16:29+03:00",
+      "tools": {
+```
+
+Digest:
+
+```text
+bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0
+```
+
+The attestation uses the digest because a tag can move to another image, but the digest identifies exact image content. This file claims that the CycloneDX SBOM is the predicate for the Juice Shop image with this digest. A verifier or deployment pipeline would check this attestation before trusting the SBOM. It does not prove that the image is safe or vulnerability-free; it only connects this SBOM statement to this exact image digest.

From fec83e236df28221ea4eb29c81c257d42cdc8c00 Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Sun, 20 Sep 2026 15:34:51 +0300
Subject: [PATCH 07/12] docs(lab4): add command outputs to report

---
 submissions/lab4.md | 163 +++++++++++++++++++++++++++++++++++++++-----
 1 file changed, 145 insertions(+), 18 deletions(-)

diff --git a/submissions/lab4.md b/submissions/lab4.md
index 858fd1783..03ac956c8 100644
--- a/submissions/lab4.md
+++ b/submissions/lab4.md
@@ -2,22 +2,83 @@
 
 ## Task 1
 
-### SBOM counts
+### SBOM generation
+
+Commands:
+
+```bash
+syft bkimminich/juice-shop:v20.0.0 -o cyclonedx-json=labs/lab4/juice-shop.cdx.json
+syft bkimminich/juice-shop:v20.0.0 -o spdx-json=labs/lab4/juice-shop.spdx.json
+```
+
+The commands created two SBOM files. The count commands printed:
+
+```text
+$ jq '.components | length' labs/lab4/juice-shop.cdx.json
+3068
+
+$ jq '.packages | length' labs/lab4/juice-shop.spdx.json
+909
+
+$ jq -r '.specVersion' labs/lab4/juice-shop.cdx.json
+1.7
+```
 
 | File | Format | Count |
 |---|---|---:|
 | `labs/lab4/juice-shop.cdx.json` | CycloneDX components | 3068 |
 | `labs/lab4/juice-shop.spdx.json` | SPDX packages | 909 |
 
-CycloneDX `specVersion`:
+CycloneDX and SPDX count different object models. CycloneDX lists more fine-grained components from the image, while SPDX groups software as packages and focuses more on license/compliance metadata. This is why one image gives different counts in two valid SBOM formats.
+
+### Grype scan from SBOM
+
+Commands:
+
+```bash
+grype sbom:labs/lab4/juice-shop.cdx.json -o json --file labs/lab4/grype-from-sbom.json
+grype sbom:labs/lab4/juice-shop.cdx.json -o table | tee labs/lab4/grype-from-sbom.txt
+```
+
+The table output started with:
 
 ```text
-1.7
+NAME                    INSTALLED                    FIXED IN                   TYPE    VULNERABILITY        SEVERITY
+lodash                  2.4.2                        4.17.21                    npm     GHSA-35jh-r3h4-6jhm  High
+moment                  2.0.0                        2.29.2                     npm     GHSA-8hfj-j24r-96c4  High
+jsonwebtoken            0.1.0                        4.2.2                      npm     GHSA-c7hr-j4mj-j2w6  Critical
+jsonwebtoken            0.4.0                        4.2.2                      npm     GHSA-c7hr-j4mj-j2w6  Critical
+moment                  2.0.0                        2.11.2                     npm     GHSA-87vv-r9j6-g5qv  Medium
+lodash                  2.4.2                        4.17.12                    npm     GHSA-jf85-cpcp-j695  Critical
 ```
 
-CycloneDX and SPDX count different object models. CycloneDX lists more fine-grained components from the image, while SPDX groups software as packages and focuses more on license/compliance metadata. This is why one image gives different counts in two valid SBOM formats.
+The severity count command printed:
 
-### Grype severity table
+```text
+$ jq '[.matches[].vulnerability.severity] | group_by(.) | map({severity: .[0], count: length})' labs/lab4/grype-from-sbom.json
+[
+  {
+    "severity": "Critical",
+    "count": 14
+  },
+  {
+    "severity": "High",
+    "count": 85
+  },
+  {
+    "severity": "Low",
+    "count": 12
+  },
+  {
+    "severity": "Medium",
+    "count": 65
+  },
+  {
+    "severity": "Negligible",
+    "count": 7
+  }
+]
+```
 
 | Severity | Count |
 |---|---:|
@@ -30,23 +91,59 @@ CycloneDX and SPDX count different object models. CycloneDX lists more fine-grai
 
 ### Top ten findings
 
-| # | Severity | ID | Package | Fix |
-|---:|---|---|---|---|
-| 1 | Critical | `GHSA-c7hr-j4mj-j2w6` | `jsonwebtoken@0.1.0` | `4.2.2` |
-| 2 | Critical | `GHSA-c7hr-j4mj-j2w6` | `jsonwebtoken@0.4.0` | `4.2.2` |
-| 3 | Critical | `GHSA-jf85-cpcp-j695` | `lodash@2.4.2` | `4.17.12` |
-| 4 | Critical | `CVE-2026-63073` | `libssl3t64@3.5.5-1~deb13u2` | `3.5.7-1~deb13u2` |
-| 5 | Critical | `GHSA-mp2f-45pm-3cg9` | `decompress@4.2.1` | none |
-| 6 | Critical | `GHSA-xwcq-pm8m-c4vf` | `crypto-js@3.3.0` | `4.2.0` |
-| 7 | Critical | `CVE-2026-34182` | `libssl3t64@3.5.5-1~deb13u2` | `3.5.6-1~deb13u2` |
-| 8 | Critical | `GHSA-23hp-3jrh-7fpw` | `tar@4.4.19` | `7.5.19` |
-| 9 | Critical | `GHSA-23hp-3jrh-7fpw` | `tar@6.2.1` | `7.5.19` |
-| 10 | Critical | `GHSA-23hp-3jrh-7fpw` | `tar@7.5.15` | `7.5.19` |
+The ranking command printed:
+
+```text
+Critical  GHSA-c7hr-j4mj-j2w6  jsonwebtoken@0.1.0          fix: 4.2.2
+Critical  GHSA-c7hr-j4mj-j2w6  jsonwebtoken@0.4.0          fix: 4.2.2
+Critical  GHSA-jf85-cpcp-j695  lodash@2.4.2                fix: 4.17.12
+Critical  CVE-2026-63073       libssl3t64@3.5.5-1~deb13u2  fix: 3.5.7-1~deb13u2
+Critical  GHSA-mp2f-45pm-3cg9  decompress@4.2.1            fix:
+Critical  GHSA-xwcq-pm8m-c4vf  crypto-js@3.3.0             fix: 4.2.0
+Critical  CVE-2026-34182       libssl3t64@3.5.5-1~deb13u2  fix: 3.5.6-1~deb13u2
+Critical  GHSA-23hp-3jrh-7fpw  tar@4.4.19                  fix: 7.5.19
+Critical  GHSA-23hp-3jrh-7fpw  tar@6.2.1                   fix: 7.5.19
+Critical  GHSA-23hp-3jrh-7fpw  tar@7.5.15                  fix: 7.5.19
+```
 
 Nine of the top ten findings have a fix version. I would patch the fixable Critical findings first, especially `jsonwebtoken`, `lodash`, `libssl3t64`, `crypto-js`, and `tar`. For `decompress`, there is no fix in the output, so I would check if it can be removed, replaced, or isolated.
 
 ## Task 2
 
+### Trivy image scan
+
+Command:
+
+```bash
+trivy image bkimminich/juice-shop:v20.0.0 \
+  --severity LOW,MEDIUM,HIGH,CRITICAL \
+  --format json --output labs/lab4/trivy.json
+```
+
+The severity count command printed:
+
+```text
+$ jq '[.Results[].Vulnerabilities[]? | .Severity] | group_by(.) | map({severity: .[0], count: length})' labs/lab4/trivy.json
+[
+  {
+    "severity": "CRITICAL",
+    "count": 10
+  },
+  {
+    "severity": "HIGH",
+    "count": 64
+  },
+  {
+    "severity": "LOW",
+    "count": 31
+  },
+  {
+    "severity": "MEDIUM",
+    "count": 68
+  }
+]
+```
+
 ### Grype and Trivy comparison
 
 | Severity | Grype | Trivy | Delta |
@@ -60,6 +157,34 @@ Nine of the top ten findings have a fix version. I would patch the fixable Criti
 
 ### Different identifiers
 
+The comparison commands printed:
+
+```text
+$ comm -23 /tmp/grype-ids.txt /tmp/trivy-ids.txt | head
+CVE-2026-48617
+CVE-2026-48931
+CVE-2026-48932
+CVE-2026-48937
+CVE-2026-56846
+CVE-2026-56847
+CVE-2026-56848
+CVE-2026-56850
+CVE-2026-58039
+CVE-2026-58040
+
+$ comm -13 /tmp/grype-ids.txt /tmp/trivy-ids.txt | head
+CVE-2015-9235
+CVE-2016-1000223
+CVE-2016-1000237
+CVE-2016-4055
+CVE-2017-16016
+CVE-2017-18214
+CVE-2018-16487
+CVE-2018-3721
+CVE-2019-10744
+CVE-2019-25225
+```
+
 | Tool | ID | Package | Explanation |
 |---|---|---|---|
 | Grype only | `CVE-2026-48617` | `node@24.15.0` | Grype matched the Node binary from the SBOM. Trivy did not report this identifier, probably because of different binary matching or advisory source coverage. |
@@ -69,7 +194,9 @@ The decoupled SBOM approach is worth it when the same inventory must be reused l
 
 ## Bonus
 
-### Attestation command
+### Attestation command and output
+
+Command:
 
 ```bash
 IMAGE='bkimminich/juice-shop:v20.0.0'

From 855b598f33d980f3c1b0cce08c89fec958690ee2 Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Mon, 28 Sep 2026 02:09:36 +0300
Subject: [PATCH 08/12] feat(lab5): zap baseline and authenticated, semgrep,
 correlation

---
 submissions/lab5.md | 146 ++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 146 insertions(+)
 create mode 100644 submissions/lab5.md

diff --git a/submissions/lab5.md b/submissions/lab5.md
new file mode 100644
index 000000000..fbb243925
--- /dev/null
+++ b/submissions/lab5.md
@@ -0,0 +1,146 @@
+# Lab 5 Submission — SAST and DAST
+
+## Task 1
+
+### ZAP runs
+
+Both scans targeted `bkimminich/juice-shop:v20.0.0`. The unauthenticated baseline used ZAP 2.17.0 in passive mode. The authenticated run used the supplied Automation Framework configuration with `admin@juice-sh.op` / `admin123`, spidered the authenticated surface, and ran the active scan.
+
+| Run | Wall-clock time | High | Medium | Low | Informational | Total alerts |
+|---|---:|---:|---:|---:|---:|---:|
+| Unauthenticated baseline | 5m 04s | 0 | 2 | 5 | 3 | 10 |
+| Authenticated active scan | 8m 28s | 2 | 4 | 3 | 4 | 13 |
+
+The authenticated run reported more alerts overall: 13 versus 10. It also found the more serious alerts because it reached two High-risk findings, including SQL Injection; the baseline's highest risk was Medium.
+
+The following alerts appeared only in the authenticated report:
+
+| Alert | Risk | URL | Why the baseline did not reach it |
+|---|---|---|---|
+| Private IP Disclosure | Low | `http://juice-shop:3000/rest/admin/application-configuration` | This is an administrator configuration API. The baseline has no administrator JWT/session, so its anonymous crawl could not enter the administrative surface. |
+| SQL Injection | High | `http://juice-shop:3000/rest/products/search?q=%27%28` | The baseline did not submit an injection payload to the product-search parameter. The endpoint is reachable without login, so this is a crawler-coverage difference rather than an access-control boundary; the authenticated run's active attack reached it. |
+
+The number of alerts is a poor comparison metric because one alert can represent a severe exploitable issue while another is a low-impact header observation. The two scans also exercise different URL sets, authentication states, and attack techniques, so totals measure coverage and scanner behavior together. I would report severity-weighted counts, unique affected URLs, confidence, reproducibility, and confirmed exploitability to a team lead. A pipeline that runs only `zap-baseline.py` against staging provides useful passive header and configuration coverage, but it does not test authenticated paths or active injection behavior; it needs an authenticated/full scan on a controlled staging environment as a separate gate or scheduled job.
+
+### Commands and comparison output
+
+```bash
+docker run --rm --network lab5-net -v "$(pwd)/labs/lab5/results:/zap/wrk" \
+  ghcr.io/zaproxy/zaproxy:stable \
+  zap-baseline.py -t http://juice-shop:3000 -r baseline-report.html -J baseline-report.json
+# FAIL-NEW: 0  WARN-NEW: 8  PASS: 59
+
+
+docker run --rm --network lab5-net -e _JAVA_OPTIONS="-Xmx512m" \
+  -v "$(pwd)/labs/lab5:/zap/wrk" \
+  ghcr.io/zaproxy/zaproxy:stable \
+  zap.sh -cmd -autorun /zap/wrk/scripts/zap-auth.yaml -port 8090
+# Automation plan succeeded!
+# Active scan: 7m 16s; reports generated: auth-report.html, auth-report.json
+
+bash labs/lab5/scripts/compare_zap.sh \
+  labs/lab5/results/baseline-report.json labs/lab5/results/auth-report.json
+```
+
+The comparison script printed:
+
+```text
+Unauthenticated Scan:
+  Total alerts: 10
+  High: 0
+  Medium: 2
+  Low: 5
+  Info: 3
+  Unique URLs with findings: 16
+
+Authenticated Scan:
+  Total alerts: 13
+  High: 2
+  Medium: 4
+  Low: 3
+  Info: 4
+  Unique URLs with findings: 23
+```
+
+## Task 2
+
+### Semgrep results
+
+I cloned the Juice Shop source at tag `v20.0.0` and ran Semgrep 1.136.0 with `p/owasp-top-ten`, `p/javascript`, and `p/secrets`. The scan covered 1,113 tracked files and produced 27 findings. The command completed successfully; the JSON report contained 40 parser/analysis errors, which were recorded as expected scan errors.
+
+```bash
+semgrep --config=p/owasp-top-ten --config=p/javascript --config=p/secrets \
+  --severity ERROR --severity WARNING \
+  --json -o labs/lab5/results/semgrep.json \
+  labs/lab5/semgrep/juice-shop
+```
+
+Severity split:
+
+| Severity | Count |
+|---|---:|
+| ERROR | 13 |
+| WARNING | 14 |
+| **Total** | **27** |
+
+The top rule counts were:
+
+| Findings | Rule |
+|---:|---|
+| 6 | `javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection` |
+| 5 | `yaml.github-actions.security.run-shell-injection.run-shell-injection` |
+| 4 | `javascript.express.security.audit.express-check-directory-listing.express-check-directory-listing` |
+| 4 | `javascript.express.security.audit.express-res-sendfile.express-res-sendfile` |
+| 4 | `yaml.github-actions.security.github-actions-mutable-action-tag.github-actions-mutable-action-tag` |
+| 1 | `javascript.express.security.audit.express-open-redirect.express-open-redirect` |
+| 1 | `javascript.jsonwebtoken.security.jwt-hardcode.hardcoded-jwt-secret` |
+| 1 | `javascript.lang.security.audit.code-string-concat.code-string-concat` |
+| 1 | `yaml.github-actions.security.gha-curl-pipe-shell.gha-curl-pipe-shell` |
+
+The command `jq '.errors | length' labs/lab5/results/semgrep.json` printed `40`.
+
+### Workflow finding and Lecture 4
+
+Semgrep flagged `.github/workflows/ci.yml:372` with `yaml.github-actions.security.gha-curl-pipe-shell.gha-curl-pipe-shell`. The workflow runs `curl https://cli-assets.heroku.com/install.sh | sh`, which executes remote content directly in the CI runner. This connects to Lecture 4's **CICD-SEC-8, Ungoverned Use of Third-Party Services**, and also creates a pipeline execution risk: a compromised download endpoint can execute code with the runner's permissions. The workflow also had mutable-action findings in workflow files, which connects to Lecture 4's pin-by-SHA rule and dependency-chain protection.
+
+### False positive to suppress
+
+I would suppress `javascript.express.security.audit.express-res-sendfile.express-res-sendfile` at `routes/fileServer.ts:33` after review. The rule sees `res.sendFile(path.resolve('ftp/', file))` and reports possible path traversal, but this specific handler rejects any filename containing `/` at lines 16–19 and accepts only `.md`, `.pdf`, or the explicitly intended `incident-support.kdbx` file at lines 26–35. The input is therefore constrained to a single filename and an allowlisted extension before `sendFile` is called. The other `express-res-sendfile` findings require separate review because they do not all have the same validation.
+
+### One rule to fix this sprint
+
+I would fix `javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection` first. It produced six findings, includes the real product-search and login query paths, and represents direct database compromise risk. Replacing string-built SQL with Sequelize replacements/parameterized queries removes the injection sink and protects multiple entry points at once. I would then retest the ZAP SQL injection request and rerun Semgrep to confirm both the behavior and the source finding are gone.
+
+## Bonus
+
+| OWASP category | ZAP alert and URL | Semgrep rule and location |
+|---|---|---|
+| A05: Injection — SQL injection | `SQL Injection` (High), `GET http://juice-shop:3000/rest/products/search?q=%27%28` | `javascript.sequelize.security.audit.sequelize-injection-express.express-sequelize-injection`, `routes/search.ts:23` |
+
+ZAP used the request parameter `q` with the attack string `'(`, producing a reproducible `500 Internal Server Error` and SQLite syntax error. A working request that demonstrates the same vulnerable query behavior is:
+
+```bash
+curl -sS --get 'http://127.0.0.1:3000/rest/products/search' \
+  --data-urlencode "q=' OR '1'='1"
+# HTTP 200 and a product list containing the query results
+```
+
+The vulnerable source is:
+
+```ts
+// routes/search.ts:21-23
+let criteria: any = req.query.q === 'undefined' ? '' : req.query.q ?? ''
+criteria = (criteria.length <= 200) ? criteria : criteria.substring(0, 200)
+models.sequelize.query(`SELECT * FROM Products WHERE ((name LIKE '%${criteria}%' OR description LIKE '%${criteria}%') AND deletedAt IS NULL) ORDER BY name`)
+```
+
+The matching Semgrep finding identifies the tainted `req.query.q` value flowing into the Sequelize query. I would open a pull request that uses a parameterized query, for example:
+
+```ts
+models.sequelize.query(
+  'SELECT * FROM Products WHERE ((name LIKE :criteria OR description LIKE :criteria) AND deletedAt IS NULL) ORDER BY name',
+  { replacements: { criteria: `%${criteria}%` } }
+)
+```
+
+I would place this SQL injection finding first in the pull request description because both tools provide independent evidence: Semgrep identifies the exact concatenation at `routes/search.ts:23`, and ZAP reaches the running endpoint with a crafted request that causes database query failure. The combination gives the team a concrete source location, an exploitable HTTP path, and a focused parameterization fix.

From 98cc3a960113ab810e104db64604332c8a077751 Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Mon, 28 Sep 2026 02:52:07 +0300
Subject: [PATCH 09/12] feat(lab6): checkov and kics findings, custom policy

---
 labs/lab6/policies/my-custom-policy.yaml |  13 +++
 submissions/lab6.md                      | 142 +++++++++++++++++++++++
 2 files changed, 155 insertions(+)
 create mode 100644 labs/lab6/policies/my-custom-policy.yaml
 create mode 100644 submissions/lab6.md

diff --git a/labs/lab6/policies/my-custom-policy.yaml b/labs/lab6/policies/my-custom-policy.yaml
new file mode 100644
index 000000000..54063f5cb
--- /dev/null
+++ b/labs/lab6/policies/my-custom-policy.yaml
@@ -0,0 +1,13 @@
+metadata:
+  id: CKV_CUSTOM_1
+  name: Ensure S3 buckets use private ACLs
+  category: CONVENTION
+  severity: HIGH
+  guideline: Every S3 bucket in this organisation must use the private ACL; public access requires a separately reviewed exception.
+definition:
+  cond_type: attribute
+  resource_types:
+    - aws_s3_bucket
+  attribute: acl
+  operator: not_equals
+  value: public-read
diff --git a/submissions/lab6.md b/submissions/lab6.md
new file mode 100644
index 000000000..7e7c9d3c1
--- /dev/null
+++ b/submissions/lab6.md
@@ -0,0 +1,142 @@
+# Lab 6 Submission — IaC Security
+
+## Task 1
+
+### Checkov scan
+
+I scanned the supplied Terraform fixtures with Checkov 3.3.20. Checkov exited with status 1 because the intentionally vulnerable sample contains failed checks. The JSON report is an array with one result object per framework.
+
+```bash
+checkov -d labs/lab6/vulnerable-iac/terraform \
+  --output cli --output json \
+  --output-file-path labs/lab6/results/checkov-terraform/
+# Checkov 3.3.20; exit status 1
+
+jq 'map({framework: .check_type, passed: .summary.passed, failed: .summary.failed})' \
+  labs/lab6/results/checkov-terraform/results_json.json
+```
+
+| Framework | Passed | Failed |
+|---|---:|---:|
+| `terraform` | 49 | 78 |
+| `secrets` | 0 | 2 |
+
+The Terraform framework produced 78 failed checks, and the secrets framework added two more failures. The combined report therefore contains 80 failed checks across the two framework objects.
+
+### Top rules by frequency
+
+```bash
+jq '[.[].results.failed_checks[]?.check_id]
+  | group_by(.) | map({rule: .[0], count: length})
+  | sort_by(-.count) | .[:5]' \
+  labs/lab6/results/checkov-terraform/results_json.json
+```
+
+| Rule | Findings | What it checks |
+|---|---:|---|
+| `CKV_AWS_289` | 4 | IAM policies must not allow permissions management or resource exposure without constraints. |
+| `CKV_AWS_355` | 4 | IAM policy statements must not use `*` as the resource for actions that can be restricted. |
+| `CKV_AWS_23` | 3 | Every security group and security-group rule must have a description. |
+| `CKV_AWS_288` | 3 | IAM policies must not allow data exfiltration. |
+| `CKV_AWS_290` | 3 | IAM policies must not allow unconstrained write access. |
+
+The highest-leverage single change is to replace the wildcard IAM permissions in `labs/lab6/vulnerable-iac/terraform/iam.tf`, especially the `aws_iam_policy.admin_policy` resource. That policy alone is reported by `CKV_AWS_288`, `CKV_AWS_289`, `CKV_AWS_290`, and `CKV_AWS_355`, and the same class of least-privilege correction also applies to the role, user, and privilege-escalation policies. Fixing one shared policy definition clears several findings because multiple checks evaluate the same insecure statement; five separate edits would duplicate the same remediation across policy statements.
+
+The open-source Checkov report leaves `severity` as `null` for every finding. In a real backlog I would sort first by exploitability and business impact, then by internet exposure, privilege scope, affected resources, and remediation leverage, while using rule frequency as a tie-breaker. Vendor severity metadata can accelerate prioritisation, but purchasing it supplies classification context rather than replacing asset context, threat modelling, or engineering triage.
+
+## Task 2
+
+### KICS scans
+
+KICS 2.1.20 scanned the Ansible and Pulumi YAML fixtures. KICS's terminal total counts individual findings, while the `.queries` array contains distinct query objects. The tables below label both values explicitly.
+
+```bash
+docker run --rm --user "$(id -u):$(id -g)" -v "$(pwd)/labs/lab6":/path \
+  checkmarx/kics:latest scan -p /path/vulnerable-iac/ansible/ \
+  -o /path/results/kics-ansible/ --report-formats json,sarif
+# TOTAL: 10 findings
+
+docker run --rm --user "$(id -u):$(id -g)" -v "$(pwd)/labs/lab6":/path \
+  checkmarx/kics:latest scan -p /path/vulnerable-iac/pulumi/ \
+  -o /path/results/kics-pulumi/ --report-formats json,sarif
+# TOTAL: 6 findings
+```
+
+| Scan | Critical | High | Medium | Low | Info | Distinct queries | Findings |
+|---|---:|---:|---:|---:|---:|---:|---:|
+| Ansible | 0 | 3 | 0 | 1 | 0 | 4 | 10 |
+| Pulumi | 1 | 2 | 1 | 0 | 2 | 6 | 6 |
+
+### Top Ansible queries by files touched
+
+The following is sorted by the number of files in each query object, not by the number of individual findings:
+
+```bash
+jq '[.queries[] | {query: .query_name, severity, files: (.files | length)}]
+  | sort_by(-.files) | .[:5]' labs/lab6/results/kics-ansible/results.json
+```
+
+| Query | Severity | Files touched |
+|---|---|---:|
+| Passwords And Secrets - Generic Password | HIGH | 6 |
+| Passwords And Secrets - Password in URL | HIGH | 2 |
+| Passwords And Secrets - Generic Secret | HIGH | 1 |
+| Unpinned Package Version | LOW | 1 |
+
+KICS reported `RDS DB Instance Publicly Accessible` in `Pulumi-vulnerable.yaml`, while Checkov did not scan Pulumi in this task. KICS parses the Pulumi YAML representation directly and has Pulumi-specific queries for properties such as `publiclyAccessible`. Checkov's Terraform framework covers HCL resources and does not provide a Pulumi framework here; its parser therefore cannot evaluate this Pulumi YAML resource as Terraform.
+
+A class Checkov covers that KICS did not report in these fixtures is the Terraform IAM wildcard-policy analysis, including the four findings for `CKV_AWS_289` and `CKV_AWS_355`. Checkov parses Terraform HCL and understands the decoded IAM policy structure in `iam.tf`; the KICS Pulumi and Ansible scans operate on different input formats and resources, so they cannot produce that Terraform-specific result from these directories.
+
+I would run Checkov on Terraform and KICS on Ansible and Pulumi in the same pipeline because each scanner has format-specific parsing and policy coverage. The pipeline should preserve both reports in SARIF/JSON, fail the gate on critical and high findings after an agreed exception process, and retain lower-severity findings for triage. I would review the coverage gap with representative fixtures, add custom policies for organisation rules, and periodically compare findings across tools so that a disagreement becomes a documented coverage decision rather than an invisible blind spot.
+
+## Bonus
+
+### Custom policy
+
+Policy file: `labs/lab6/policies/my-custom-policy.yaml`.
+
+The policy `CKV_CUSTOM_1` requires every `aws_s3_bucket` to use an ACL other than `public-read`. This is an organisation-specific guardrail: public buckets require an explicitly reviewed exception, even when a generic scanner reports other bucket settings separately.
+
+```yaml
+metadata:
+  id: CKV_CUSTOM_1
+  name: Ensure S3 buckets use private ACLs
+  category: CONVENTION
+  severity: HIGH
+definition:
+  cond_type: attribute
+  resource_types:
+    - aws_s3_bucket
+  attribute: acl
+  operator: not_equals
+  value: public-read
+```
+
+The policy fired with Checkov 3.3.20:
+
+```bash
+checkov -d labs/lab6/vulnerable-iac/terraform \
+  --external-checks-dir labs/lab6/policies \
+  --output json --output-file-path labs/lab6/results/checkov-custom/
+# exit status 1
+
+jq '[.[].results.failed_checks[]?
+  | select(.check_id | startswith("CKV"))
+  | select(.check_id | test("CUSTOM"))
+  | {check_id, resource, file_path}]' \
+  labs/lab6/results/checkov-custom/results_json.json
+```
+
+```json
+[
+  {
+    "check_id": "CKV_CUSTOM_1",
+    "resource": "aws_s3_bucket.public_data",
+    "file_path": "/main.tf"
+  }
+]
+```
+
+The remediation is to change `aws_s3_bucket.public_data` in `labs/lab6/vulnerable-iac/terraform/main.tf` from `acl = "public-read"` to `acl = "private"` and obtain a reviewed exception for any required public delivery path. I applied that change in a temporary copy of the fixture and reran only `CKV_CUSTOM_1`; Checkov returned status 0 with 2 passed and 0 failed, confirming that the policy passes for both S3 buckets.
+
+This policy belongs to the organisation because it encodes the local public-bucket exception process, while a generic Checkov policy cannot know which buckets are approved by an internal review or audit standard. The rule is therefore a local convention that complements the vendor's cloud-security checks.

From 6a1e41b23f11a2598d08db15851c53093910a68d Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Mon, 5 Oct 2026 01:54:20 +0300
Subject: [PATCH 10/12] feat(lab7): trivy scans and restricted deployment

---
 labs/lab7/k8s/configmap.yaml      |  74 ++++++++
 labs/lab7/k8s/deployment.yaml     | 158 +++++++++++++++++
 labs/lab7/k8s/namespace.yaml      |   8 +
 labs/lab7/k8s/networkpolicy.yaml  |  33 ++++
 labs/lab7/k8s/service.yaml        |  13 ++
 labs/lab7/k8s/serviceaccount.yaml |   6 +
 submissions/lab7.md               | 274 ++++++++++++++++++++++++++++++
 7 files changed, 566 insertions(+)
 create mode 100644 labs/lab7/k8s/configmap.yaml
 create mode 100644 labs/lab7/k8s/deployment.yaml
 create mode 100644 labs/lab7/k8s/namespace.yaml
 create mode 100644 labs/lab7/k8s/networkpolicy.yaml
 create mode 100644 labs/lab7/k8s/service.yaml
 create mode 100644 labs/lab7/k8s/serviceaccount.yaml
 create mode 100644 submissions/lab7.md

diff --git a/labs/lab7/k8s/configmap.yaml b/labs/lab7/k8s/configmap.yaml
new file mode 100644
index 000000000..a30396fe5
--- /dev/null
+++ b/labs/lab7/k8s/configmap.yaml
@@ -0,0 +1,74 @@
+apiVersion: v1
+data:
+  index.html: |
+    <!--
+      ~ Copyright (c) 2014-2026 Bjoern Kimminich & the OWASP Juice Shop contributors.
+      ~ SPDX-License-Identifier: MIT
+      -->
+
+    <!doctype html>
+    <html lang="en" data-beasties-container>
+    <head>
+      <meta charset="utf-8">
+      <title>OWASP Juice Shop</title>
+      <meta name="description" content="Probably the most modern and sophisticated insecure web application">
+      <meta name="viewport" content="width=device-width, initial-scale=1">
+      <link rel="preconnect" href="https://fonts.googleapis.com">
+      <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
+      <style>@font-face{font-family:'VT323';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/vt323/v18/pxiKyp0ihIEF2isQFJXGdg.woff2) format('woff2');unicode-range:U+0102-0103, U+0110-0111, U+0128-0129, U+0168-0169, U+01A0-01A1, U+01AF-01B0, U+0300-0301, U+0303-0304, U+0308-0309, U+0323, U+0329, U+1EA0-1EF9, U+20AB;}@font-face{font-family:'VT323';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/vt323/v18/pxiKyp0ihIEF2isRFJXGdg.woff2) format('woff2');unicode-range:U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;}@font-face{font-family:'VT323';font-style:normal;font-weight:400;font-display:swap;src:url(https://fonts.gstatic.com/s/vt323/v18/pxiKyp0ihIEF2isfFJU.woff2) format('woff2');unicode-range:U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;}</style>
+      <link id="favicon" rel="icon" type="image/x-icon" href="assets/public/favicon_js.ico">
+      <script>
+        window.addEventListener("load", function(){
+          window.cookieconsent.initialise({
+            "palette": {
+              "popup": { "background": "var(--theme-primary)", "text": "var(--theme-text)" },
+              "button": { "background": "var(--theme-accent)", "text": "var(--theme-text)" }
+            },
+            "theme": "classic",
+            "position": "bottom-right",
+            "content": { "message": "This website uses fruit cookies to ensure you get the juiciest tracking experience.", "dismiss": "Me want it!", "link": "But me wait!", "href": "https://www.youtube.com/watch?v=9PnbKL3wuH4" }
+          })});
+      </script>
+    <style>.bluegrey-lightgreen-theme{--mat-sys-background:#121316;--mat-sys-error:#ffb4ab;--mat-sys-error-container:#93000a;--mat-sys-inverse-on-surface:#2f3033;--mat-sys-inverse-primary:#005cbb;--mat-sys-inverse-surface:#e3e2e6;--mat-sys-on-background:#e3e2e6;--mat-sys-on-error:#690005;--mat-sys-on-error-container:#ffdad6;--mat-sys-on-primary:#002f65;--mat-sys-on-primary-container:#d7e3ff;--mat-sys-on-primary-fixed:#001b3f;--mat-sys-on-primary-fixed-variant:#00458f;--mat-sys-on-secondary:#283041;--mat-sys-on-secondary-container:#dae2f9;--mat-sys-on-secondary-fixed:#131c2b;--mat-sys-on-secondary-fixed-variant:#3e4759;--mat-sys-on-surface:#e3e2e6;--mat-sys-on-surface-variant:#e0e2ec;--mat-sys-on-tertiary:#173800;--mat-sys-on-tertiary-container:#82ff10;--mat-sys-on-tertiary-fixed:#0b2000;--mat-sys-on-tertiary-fixed-variant:#245100;--mat-sys-outline:#8e9099;--mat-sys-outline-variant:#44474e;--mat-sys-primary:#abc7ff;--mat-sys-primary-container:#00458f;--mat-sys-primary-fixed:#d7e3ff;--mat-sys-primary-fixed-dim:#abc7ff;--mat-sys-scrim:#000000;--mat-sys-secondary:#bec6dc;--mat-sys-secondary-container:#3e4759;--mat-sys-secondary-fixed:#dae2f9;--mat-sys-secondary-fixed-dim:#bec6dc;--mat-sys-shadow:#000000;--mat-sys-surface:#121316;--mat-sys-surface-bright:#38393c;--mat-sys-surface-container:#1f2022;--mat-sys-surface-container-high:#292a2c;--mat-sys-surface-container-highest:#343537;--mat-sys-surface-container-low:#1a1b1f;--mat-sys-surface-container-lowest:#0d0e11;--mat-sys-surface-dim:#121316;--mat-sys-surface-tint:#abc7ff;--mat-sys-surface-variant:#44474e;--mat-sys-tertiary:#70e000;--mat-sys-tertiary-container:#245100;--mat-sys-tertiary-fixed:#82ff10;--mat-sys-tertiary-fixed-dim:#70e000;--mat-sys-neutral-variant20:#2d3038;--mat-sys-neutral10:#1a1b1f;--mat-sys-level0:0px 0px 0px 0px rgba(0, 0, 0, .2), 0px 0px 0px 0px rgba(0, 0, 0, .14), 0px 0px 0px 0px rgba(0, 0, 0, .12);--mat-sys-level1:0px 2px 1px -1px rgba(0, 0, 0, .2), 0px 1px 1px 0px rgba(0, 0, 0, .14), 0px 1px 3px 0px rgba(0, 0, 0, .12);--mat-sys-level2:0px 3px 3px -2px rgba(0, 0, 0, .2), 0px 3px 4px 0px rgba(0, 0, 0, .14), 0px 1px 8px 0px rgba(0, 0, 0, .12);--mat-sys-level3:0px 3px 5px -1px rgba(0, 0, 0, .2), 0px 6px 10px 0px rgba(0, 0, 0, .14), 0px 1px 18px 0px rgba(0, 0, 0, .12);--mat-sys-level4:0px 5px 5px -3px rgba(0, 0, 0, .2), 0px 8px 10px 1px rgba(0, 0, 0, .14), 0px 3px 14px 2px rgba(0, 0, 0, .12);--mat-sys-level5:0px 7px 8px -4px rgba(0, 0, 0, .2), 0px 12px 17px 2px rgba(0, 0, 0, .14), 0px 5px 22px 4px rgba(0, 0, 0, .12);--mat-sys-corner-extra-large:28px;--mat-sys-corner-extra-large-top:28px 28px 0 0;--mat-sys-corner-extra-small:4px;--mat-sys-corner-extra-small-top:4px 4px 0 0;--mat-sys-corner-full:9999px;--mat-sys-corner-large:16px;--mat-sys-corner-large-end:0 16px 16px 0;--mat-sys-corner-large-start:16px 0 0 16px;--mat-sys-corner-large-top:16px 16px 0 0;--mat-sys-corner-medium:12px;--mat-sys-corner-none:0;--mat-sys-corner-small:8px;--mat-sys-dragged-state-layer-opacity:.16;--mat-sys-focus-state-layer-opacity:.12;--mat-sys-hover-state-layer-opacity:.08;--mat-sys-pressed-state-layer-opacity:.12;color:var(--mat-sys-on-surface);background-color:var(--mat-sys-surface)}html{font-family:var(--mat-sys-body-medium-font, Roboto, "Helvetica Neue", sans-serif)}.bluegrey-lightgreen-theme{--theme-primary:#438fff;--theme-primary-lighter:rgb(97.6, 161.229787234, 255);--theme-primary-light:rgb(118, 173.3829787234, 255);--theme-primary-darker:rgb(36.4, 124.770212766, 255);--theme-primary-dark:rgb(16, 112.6170212766, 255);--theme-primary-fade-10:#438fff;--theme-primary-fade-20:#438fff;--theme-primary-fade-30:#438fff;--theme-primary-fade-40:#438fff;--theme-primary-fade-50:#438fff;--theme-accent:#50a400;--theme-accent-lighter:rgb(94.9268292683, 194.6, 0);--theme-accent-light:rgb(104.8780487805, 215, 0);--theme-accent-darker:rgb(65.0731707317, 133.4, 0);--theme-accent-dark:rgb(55.1219512195, 113, 0);--theme-accent-fade-10:#50a400;--theme-accent-fade-20:#50a400;--theme-accent-fade-30:#50a400;--theme-accent-fade-40:#50a400;--theme-accent-fade-50:#50a400;--theme-warn:#ffb4ab;--theme-warn-lighter:rgb(255, 207.3214285714, 201.6);--theme-warn-light:rgb(255, 225.5357142857, 222);--theme-warn-darker:rgb(255, 152.6785714286, 140.4);--theme-warn-dark:rgb(255, 134.4642857143, 120);--theme-warn-fade-10:#ffb4ab;--theme-warn-fade-20:#ffb4ab;--theme-warn-fade-30:#ffb4ab;--theme-warn-fade-40:#ffb4ab;--theme-warn-fade-50:#ffb4ab;--theme-text:#e3e2e6;--theme-text-lighter:rgb(242.8666666667, 242.4333333333, 244.1666666667);--theme-text-light:rgb(253.4444444444, 253.3888888889, 253.6111111111);--theme-text-darker:rgb(200.5555555556, 198.6111111111, 206.3888888889);--theme-text-dark:rgb(160.8888888889, 157.5277777778, 170.9722222222);--theme-text-fade-10:#e3e2e6;--theme-text-fade-20:#e3e2e6;--theme-text-fade-30:#e3e2e6;--theme-text-fade-40:#e3e2e6;--theme-text-fade-50:#e3e2e6;--theme-text-invert-15:rgb(197.15, 196.45, 199.25);--theme-text-invert-30:rgb(167.3, 166.9, 168.5);--theme-background:#1f2022;--theme-background-lighter:rgb(45.5938461538, 47.0646153846, 50.0061538462);--theme-background-light:rgb(55.3230769231, 57.1076923077, 60.6769230769);--theme-background-darker:rgb(16.4061538462, 16.9353846154, 17.9938461538);--theme-background-dark:rgb(6.6769230769, 6.8923076923, 7.3230769231);--theme-background-darkest:hsl(220, 4.6153846154%, -1.2549019608%);--theme-thumbnail-border:1px solid #abc7ff;--mdc-filled-text-field-container-color:#0000;--mdc-filled-text-field-disabled-container-color:#0000;--theme-background:#3e3e3e;--theme-background-lighter:#4a4a4a;--theme-background-light:#5a5a5a;--theme-background-darker:#333638;--theme-background-dark:#303030;--theme-background-darkest:#2b2b2b;--theme-text:#e8ecef;--theme-text-lighter:#f2f5f7;--theme-text-light:#fff;--theme-text-darker:#b8c0c7;--theme-text-dark:#7f8a93;--mat-sys-surface:#333638;--mat-sys-on-surface:#e8ecef;--mat-sys-surface-container:#3e3e3e;--mat-sys-surface-container-high:#404244;--mat-sys-on-surface-variant:#b8c0c7;--mat-sys-outline:#5a5a5a;--mat-sys-outline-variant:#404244}.bluegrey-lightgreen-theme{--theme-warn:#f44336;--theme-warn-lighter:rgb(245.5877358491, 94.1358490566, 83.0122641509);--theme-warn-light:rgb(246.6462264151, 112.2264150943, 102.3537735849);--theme-warn-darker:rgb(242.4122641509, 39.8641509434, 24.9877358491);--theme-warn-dark:rgb(234.1839622642, 27.9622641509, 12.8160377358);--theme-warn-fade-10:#f44336;--theme-warn-fade-20:#f44336;--theme-warn-fade-30:#f44336;--theme-warn-fade-40:#f44336;--theme-warn-fade-50:#f44336;--mat-sys-error:#f44336;--mat-sys-on-error:#fff}@media screen and (-webkit-min-device-pixel-ratio:0){}</style><link rel="stylesheet" href="styles.css" media="print" onload="this.media='all'"><noscript><link rel="stylesheet" href="styles.css"></noscript></head>
+    <body class="bluegrey-lightgreen-theme">
+      <app-root></app-root>
+    <link rel="modulepreload" href="chunk-SCY7YOCS.js"><link rel="modulepreload" href="chunk-PX7UKXVL.js"><link rel="modulepreload" href="chunk-GNBEOV4E.js"><link rel="modulepreload" href="chunk-7O3TTE7G.js"><link rel="modulepreload" href="chunk-JCQ5N7PA.js"><link rel="modulepreload" href="chunk-UNFVUBM2.js"><link rel="modulepreload" href="chunk-524KQQJQ.js"><link rel="modulepreload" href="chunk-SI2GTEZM.js"><link rel="modulepreload" href="chunk-ZO2KHBRB.js"><link rel="modulepreload" href="chunk-7AKA75AX.js"><script src="polyfills.js" type="module"></script><script src="scripts.js" defer></script><script src="main.js" type="module"></script></body>
+    </html>
+  provider-metadata.json: |
+    {
+      "canonical_url": "http://localhost:3000/.well-known/csaf/provider-metadata.json",
+      "distributions": [
+        {
+          "directory_url": "http://localhost:3000/.well-known/csaf/"
+        }
+      ],
+      "last_updated": "2024-03-05T20:20:56.169Z",
+      "list_on_CSAF_aggregators": false,
+      "metadata_version": "2.0",
+      "mirror_on_CSAF_aggregators": false,
+      "public_openpgp_keys": [
+        {
+          "fingerprint": "19c01cb7157e4645e9e2c863062a85a8cbfbdcda",
+          "url": "https://keybase.io/bkimminich/pgp_keys.asc?fingerprint=19c01cb7157e4645e9e2c863062a85a8cbfbdcda"
+        },
+        {
+          "fingerprint": "2372B2B12AEA7AE3001BB3FBD08FB16E2029D870",
+          "url": "https://keybase.io/wurstbrot/pgp_keys.asc"
+        },
+        {
+          "fingerprint": "91b7a09d34db0a5e662ea7546f4a7656807d4ff9",
+          "url": "https://github.com/J12934.gpg"
+        }
+      ],
+      "publisher": {
+        "category": "vendor",
+        "name": "OWASP Juice Shop",
+        "namespace": "/juice-shop/juice-shop",
+        "contact_details": "timo.pagel@owasp.org"
+      },
+      "role": "csaf_trusted_provider"
+    }
+kind: ConfigMap
+metadata:
+  name: juice-shop-seed-files
+  namespace: juice-shop
diff --git a/labs/lab7/k8s/deployment.yaml b/labs/lab7/k8s/deployment.yaml
new file mode 100644
index 000000000..0730f9e90
--- /dev/null
+++ b/labs/lab7/k8s/deployment.yaml
@@ -0,0 +1,158 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: juice-shop
+  namespace: juice-shop
+  labels:
+    app: juice-shop
+spec:
+  replicas: 1
+  strategy:
+    type: Recreate
+  selector:
+    matchLabels:
+      app: juice-shop
+  template:
+    metadata:
+      labels:
+        app: juice-shop
+    spec:
+      serviceAccountName: juice-shop
+      automountServiceAccountToken: false
+      securityContext:
+        runAsNonRoot: true
+        runAsUser: 65532
+        runAsGroup: 65532
+        fsGroup: 65532
+        fsGroupChangePolicy: OnRootMismatch
+        seccompProfile:
+          type: RuntimeDefault
+      initContainers:
+        - name: prepare-writable-files
+          image: busybox@sha256:bdf57e528e45e4433820e045b29b4597825a1c9e38353532d90a01445013f82e
+          command:
+            - /bin/sh
+            - -c
+            - |
+              set -eu
+              touch /work/ftp/legal.md
+              cp /seed/provider-metadata.json /work/csaf/provider-metadata.json
+              touch /work/assets/hackingInstructor.png /work/assets/ChatbotAvatar.png /work/assets/owasp_promo.vtt
+              cp /seed/index.html /work/frontend/index.html
+              touch /work/frontend/threejs-demo.html
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+                - ALL
+          resources:
+            requests:
+              cpu: 10m
+              memory: 16Mi
+            limits:
+              cpu: 100m
+              memory: 64Mi
+          volumeMounts:
+            - name: ftp-files
+              mountPath: /work/ftp
+            - name: csaf-files
+              mountPath: /work/csaf
+            - name: asset-files
+              mountPath: /work/assets
+            - name: frontend-files
+              mountPath: /work/frontend
+            - name: seed-files
+              mountPath: /seed
+              readOnly: true
+      containers:
+        - name: juice-shop
+          image: bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0
+          imagePullPolicy: IfNotPresent
+          command:
+            - /nodejs/bin/node
+            - -e
+            - |
+              (async () => {
+                const { default: validateDependencies } = require('/juice-shop/build/lib/startup/validateDependenciesBasic')
+                await validateDependencies()
+                const models = require('/juice-shop/build/models')
+                const seq = models.createSequelize({ inMemory: true })
+                models.initModels(seq)
+                models.setSequelize(seq)
+                const server = require('/juice-shop/build/server')
+                await server.start()
+              })().catch(err => { throw err })
+          ports:
+            - name: http
+              containerPort: 3000
+          securityContext:
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop:
+                - ALL
+          resources:
+            requests:
+              cpu: 100m
+              memory: 256Mi
+            limits:
+              cpu: 1000m
+              memory: 768Mi
+          readinessProbe:
+            httpGet:
+              path: /
+              port: http
+            initialDelaySeconds: 10
+            periodSeconds: 5
+            timeoutSeconds: 3
+            failureThreshold: 24
+          livenessProbe:
+            httpGet:
+              path: /
+              port: http
+            initialDelaySeconds: 30
+            periodSeconds: 20
+            timeoutSeconds: 3
+          volumeMounts:
+            - name: ftp-files
+              mountPath: /juice-shop/ftp/legal.md
+              subPath: legal.md
+            - name: i18n
+              mountPath: /juice-shop/i18n
+            - name: csaf-files
+              mountPath: /juice-shop/.well-known/csaf/provider-metadata.json
+              subPath: provider-metadata.json
+            - name: asset-files
+              mountPath: /juice-shop/frontend/dist/frontend/assets/public/images/hackingInstructor.png
+              subPath: hackingInstructor.png
+            - name: asset-files
+              mountPath: /juice-shop/frontend/dist/frontend/assets/public/images/ChatbotAvatar.png
+              subPath: ChatbotAvatar.png
+            - name: asset-files
+              mountPath: /juice-shop/frontend/dist/frontend/assets/public/videos/owasp_promo.vtt
+              subPath: owasp_promo.vtt
+            - name: frontend-files
+              mountPath: /juice-shop/frontend/dist/frontend/index.html
+              subPath: index.html
+            - name: frontend-files
+              mountPath: /juice-shop/frontend/dist/frontend/assets/private/threejs-demo.html
+              subPath: threejs-demo.html
+            - name: logs
+              mountPath: /juice-shop/logs
+      volumes:
+        - name: ftp-files
+          emptyDir: {}
+        - name: i18n
+          emptyDir: {}
+        - name: csaf-files
+          emptyDir: {}
+        - name: asset-files
+          emptyDir: {}
+        - name: frontend-files
+          emptyDir: {}
+        - name: seed-files
+          configMap:
+            name: juice-shop-seed-files
+        - name: logs
+          emptyDir: {}
diff --git a/labs/lab7/k8s/namespace.yaml b/labs/lab7/k8s/namespace.yaml
new file mode 100644
index 000000000..67b3c6d44
--- /dev/null
+++ b/labs/lab7/k8s/namespace.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+kind: Namespace
+metadata:
+  name: juice-shop
+  labels:
+    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/audit: restricted
diff --git a/labs/lab7/k8s/networkpolicy.yaml b/labs/lab7/k8s/networkpolicy.yaml
new file mode 100644
index 000000000..cf4d9dca6
--- /dev/null
+++ b/labs/lab7/k8s/networkpolicy.yaml
@@ -0,0 +1,33 @@
+apiVersion: networking.k8s.io/v1
+kind: NetworkPolicy
+metadata:
+  name: juice-shop-default-deny
+  namespace: juice-shop
+spec:
+  podSelector:
+    matchLabels:
+      app: juice-shop
+  policyTypes:
+    - Ingress
+    - Egress
+  ingress:
+    - from:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: juice-shop
+      ports:
+        - protocol: TCP
+          port: 3000
+  egress:
+    - to:
+        - namespaceSelector:
+            matchLabels:
+              kubernetes.io/metadata.name: kube-system
+          podSelector:
+            matchLabels:
+              k8s-app: kube-dns
+      ports:
+        - protocol: UDP
+          port: 53
+        - protocol: TCP
+          port: 53
diff --git a/labs/lab7/k8s/service.yaml b/labs/lab7/k8s/service.yaml
new file mode 100644
index 000000000..98080e9a7
--- /dev/null
+++ b/labs/lab7/k8s/service.yaml
@@ -0,0 +1,13 @@
+apiVersion: v1
+kind: Service
+metadata:
+  name: juice-shop
+  namespace: juice-shop
+spec:
+  type: ClusterIP
+  selector:
+    app: juice-shop
+  ports:
+    - name: http
+      port: 3000
+      targetPort: http
diff --git a/labs/lab7/k8s/serviceaccount.yaml b/labs/lab7/k8s/serviceaccount.yaml
new file mode 100644
index 000000000..d06caed1c
--- /dev/null
+++ b/labs/lab7/k8s/serviceaccount.yaml
@@ -0,0 +1,6 @@
+apiVersion: v1
+kind: ServiceAccount
+metadata:
+  name: juice-shop
+  namespace: juice-shop
+automountServiceAccountToken: false
diff --git a/submissions/lab7.md b/submissions/lab7.md
new file mode 100644
index 000000000..63467ff3e
--- /dev/null
+++ b/submissions/lab7.md
@@ -0,0 +1,274 @@
+# Lab 7 Submission — Container and Kubernetes Hardening
+
+## Task 1
+
+### Image vulnerability scan
+
+I scanned `bkimminich/juice-shop:v20.0.0` with Trivy 0.74.0 and limited the report to HIGH and CRITICAL findings.
+
+```bash
+trivy image bkimminich/juice-shop:v20.0.0 --severity HIGH,CRITICAL \
+  --format json --output labs/lab7/results/trivy-image.json
+```
+
+| Severity | Findings | With a fixed version | Without a fixed version |
+|---|---:|---:|---:|
+| CRITICAL | 11 | 8 | 3 |
+| HIGH | 74 | 69 | 5 |
+| **Total** | **85** | **77** | **8** |
+
+### Trivy vs Lab 4 Grype totals
+
+| Tool | Scope reported here | Critical | High | High + Critical |
+|---|---|---:|---:|---:|
+| Grype from Lab 4 | SBOM scan | 14 | 85 | 99 |
+| Trivy from Lab 7 | Image scan with `--severity HIGH,CRITICAL` | 11 | 74 | 85 |
+
+Lab 4's Grype report also had 183 findings across all severities. The HIGH and CRITICAL totals differ because the tools use different advisory feeds, matching logic, package evidence, and identifier mapping. For example, Lab 4 showed cases where Grype reported a GitHub advisory while Trivy reported the related CVE.
+
+### Ten fixable findings to rank first
+
+```bash
+jq -r '["CRITICAL","HIGH"] as $order
+  | [.Results[].Vulnerabilities[]? | select((.FixedVersion // "") != "")
+     | {sev: .Severity, id: .VulnerabilityID, pkg: .PkgName,
+        now: .InstalledVersion, fix: .FixedVersion}]
+  | sort_by(.sev as $s | $order | index($s))
+  | .[:10][] | "\(.sev)\t\(.id)\t\(.pkg) \(.now) -> \(.fix)"' \
+  labs/lab7/results/trivy-image.json
+```
+
+| Severity | ID | Package and version | Fixed version |
+|---|---|---|---|
+| CRITICAL | `CVE-2023-46233` | `crypto-js` 3.3.0 | 4.2.0 |
+| CRITICAL | `CVE-2026-71851` | `crypto-js` 3.3.0 | 4.0.0 |
+| CRITICAL | `CVE-2015-9235` | `jsonwebtoken` 0.1.0 | 4.2.2 |
+| CRITICAL | `CVE-2015-9235` | `jsonwebtoken` 0.4.0 | 4.2.2 |
+| CRITICAL | `CVE-2019-10744` | `lodash` 2.4.2 | 4.17.12 |
+| CRITICAL | `CVE-2026-59873` | `tar` 4.4.19 | 7.5.19 |
+| CRITICAL | `CVE-2026-59873` | `tar` 6.2.1 | 7.5.19 |
+| CRITICAL | `CVE-2026-59873` | `tar` 7.5.15 | 7.5.19 |
+| HIGH | `CVE-2026-14456` | `libssl3t64` 3.5.5-1~deb13u2 | 3.5.7-1~deb13u2 |
+| HIGH | `CVE-2026-45447` | `libssl3t64` 3.5.5-1~deb13u2 | 3.5.6-1~deb13u2 |
+
+### Dockerfile scan
+
+The demo Dockerfile was named exactly `Dockerfile` under `/tmp/df-demo`, then scanned with `trivy config /tmp/df-demo`.
+
+| ID | Severity | Finding | Attacker impact |
+|---|---|---|---|
+| `DS-0001` | MEDIUM | `FROM node:latest` uses a mutable tag. | A later rebuild can silently pick up a different base image, including malicious or vulnerable content, which makes builds hard to reproduce and audit. |
+| `DS-0002` | HIGH | The final `USER` is `root`. | A successful remote code execution inside the app gets root inside the container, increasing the impact of mounted files, kernel bugs, or container escape paths. |
+| `DS-0004` | MEDIUM | Port 22 is exposed. | Exposing SSH invites direct login attempts and credential attacks against a container that should only expose the application port. |
+| `DS-0026` | LOW | No `HEALTHCHECK` is defined. | The platform has less signal to restart or route away from a broken container, so an attacker-triggered hang or crash can last longer. |
+
+### Findings with no fix available
+
+Eight HIGH or CRITICAL findings had no fixed version in the Trivy report. I would first check whether each vulnerable package is reachable in this image, then remove or replace unused dependencies, add runtime controls such as non-root execution, read-only root filesystem, NetworkPolicy, and admission policies, and track the remaining risk with a time-bound exception. To a manager, I would say that the number cannot be zero until upstream releases fixes or the application removes the affected dependencies. The useful target is reducing exploitable risk quickly: patch what has a fix, isolate what has no fix, and keep evidence so the remaining risk is visible.
+
+## Task 2
+
+### Manifests
+
+Files created under `labs/lab7/k8s/`:
+
+- `namespace.yaml`
+- `serviceaccount.yaml`
+- `deployment.yaml`
+- `service.yaml`
+- `networkpolicy.yaml`
+- `configmap.yaml`
+
+The namespace enforces the restricted Pod Security Standard:
+
+```yaml
+metadata:
+  name: juice-shop
+  labels:
+    pod-security.kubernetes.io/enforce: restricted
+    pod-security.kubernetes.io/warn: restricted
+    pod-security.kubernetes.io/audit: restricted
+```
+
+The pod security context is:
+
+```yaml
+securityContext:
+  runAsNonRoot: true
+  runAsUser: 65532
+  runAsGroup: 65532
+  fsGroup: 65532
+  fsGroupChangePolicy: OnRootMismatch
+  seccompProfile:
+    type: RuntimeDefault
+```
+
+The app container security context is:
+
+```yaml
+securityContext:
+  allowPrivilegeEscalation: false
+  readOnlyRootFilesystem: true
+  capabilities:
+    drop:
+      - ALL
+```
+
+The ServiceAccount disables token automounting in the ServiceAccount and the pod spec:
+
+```yaml
+automountServiceAccountToken: false
+```
+
+The image is pinned by digest:
+
+```text
+bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0
+```
+
+### Running proof and UID
+
+Commands:
+
+```bash
+kubectl -n juice-shop get pods -o wide
+kubectl -n juice-shop exec "$POD" -c juice-shop -- /nodejs/bin/node -e 'console.log(process.getuid())'
+```
+
+Output:
+
+```text
+NAME                          READY   STATUS    RESTARTS   AGE   IP            NODE
+juice-shop-bc878478b-kd9b5   1/1     Running   0          11s   10.42.0.130   k3d-quickticket-server-0
+65532
+```
+
+The image itself reports `User=65532` from:
+
+```bash
+docker inspect bkimminich/juice-shop:v20.0.0 --format '{{.Config.User}}'
+```
+
+### Trivy Kubernetes summaries
+
+Commands:
+
+```bash
+trivy k8s --include-namespaces juice-plain --severity HIGH,CRITICAL --report=summary
+trivy k8s --include-namespaces juice-shop  --severity HIGH,CRITICAL --report=summary
+trivy k8s --include-namespaces juice-shop --severity HIGH,CRITICAL \
+  --format json --output labs/lab7/results/trivy-k8s.json
+```
+
+| Namespace | Resource | Critical vulns | High vulns | Critical misconfigs | High misconfigs | High secrets |
+|---|---|---:|---:|---:|---:|---:|
+| `juice-plain` | `Deployment/juice` | 11 | 74 | 0 | 3 | 2 |
+| `juice-shop` | `Deployment/juice-shop` | 11 | 74 | 0 | 0 | 2 |
+
+The vulnerability counts are the same because both deployments run the same Juice Shop image digest; Kubernetes hardening changes workload configuration, not the packages inside the image. The misconfiguration counts differ because the hardened deployment adds a dedicated ServiceAccount, disables token automounting, sets the restricted security context, drops Linux capabilities, sets resource requests and limits, and uses a read-only root filesystem. The secret counts stay the same because Trivy still scans the same application image contents.
+
+One control the restricted profile forced was the container security context: the default pod would violate restricted policy until `allowPrivilegeEscalation: false`, `capabilities.drop: [ALL]`, `runAsNonRoot: true`, and `seccompProfile: RuntimeDefault` were set. One voluntary control I added was the default-deny `NetworkPolicy` with only app ingress on TCP 3000 from the same namespace and DNS egress to CoreDNS in `kube-system`.
+
+## Bonus
+
+### Read-only crash and docker diff
+
+The plain read-only Docker run crashed as expected:
+
+```bash
+docker run --rm --read-only bkimminich/juice-shop:v20.0.0
+```
+
+Relevant error:
+
+```text
+Error: EROFS: read-only file system, copyfile '/juice-shop/data/static/legal.md' -> '/juice-shop/ftp/legal.md'
+ConnectionError [SequelizeConnectionError]: SQLITE_CANTOPEN: unable to open database file
+```
+
+I then captured runtime writes with:
+
+```bash
+docker run -d --name js-lab7-diff bkimminich/juice-shop:v20.0.0
+sleep 25
+docker diff js-lab7-diff
+```
+
+Trimmed write paths that mattered:
+
+```text
+C /juice-shop/data
+A /juice-shop/data/juiceshop.sqlite
+C /juice-shop/.well-known/csaf
+C /juice-shop/.well-known/csaf/provider-metadata.json
+C /juice-shop/i18n
+A /juice-shop/i18n/*.json
+C /juice-shop/frontend/dist/frontend/index.html
+C /juice-shop/frontend/dist/frontend/assets/private/threejs-demo.html
+A /juice-shop/frontend/dist/frontend/assets/public/images/hackingInstructor.png
+A /juice-shop/frontend/dist/frontend/assets/public/images/ChatbotAvatar.png
+A /juice-shop/frontend/dist/frontend/assets/public/videos/owasp_promo.vtt
+C /juice-shop/logs
+A /juice-shop/logs/access.log.2026-10-04
+A /juice-shop/logs/audit.json
+C /juice-shop/ftp
+A /juice-shop/ftp/legal.md
+```
+
+### Final volume layout
+
+The final `deployment.yaml` runs the same Juice Shop image with `readOnlyRootFilesystem: true`. For SQLite, the app starts with an in-memory Sequelize instance, so the read-only root filesystem does not need a writable `/juice-shop/data` directory for `juiceshop.sqlite`.
+
+| Volume | Mount | Why it exists |
+|---|---|---|
+| `ftp-files` | `/juice-shop/ftp/legal.md` via `subPath` | Startup restores `legal.md` into the FTP area. |
+| `i18n` | `/juice-shop/i18n` | Startup copies backend locale JSON files at runtime. |
+| `csaf-files` | `/juice-shop/.well-known/csaf/provider-metadata.json` via `subPath` | Startup rewrites the CSAF provider metadata URL. |
+| `asset-files` | `hackingInstructor.png`, `ChatbotAvatar.png`, `owasp_promo.vtt` via `subPath` | Startup customization writes generated/static asset files. |
+| `frontend-files` | `index.html` and `assets/private/threejs-demo.html` via `subPath` | Startup customization rewrites shipped frontend files. |
+| `seed-files` | `/seed`, read-only ConfigMap | Seeds original `index.html` and CSAF metadata into writable `emptyDir` files before startup rewrites them. |
+| `logs` | `/juice-shop/logs` | The app writes access and audit logs. |
+
+The directory that could not simply be replaced with an empty volume was `frontend/dist/frontend`. It contains the shipped Angular application. Mounting an empty volume over the whole directory hides `index.html`, JavaScript bundles, CSS, and assets, and the app fails its startup preconditions. I solved it with `subPath` mounts only for the files that the startup code rewrites, leaving the rest of the shipped frontend visible from the image.
+
+### Bonus proof
+
+The final pod is Ready and has `readOnlyRootFilesystem: true`:
+
+```bash
+kubectl -n juice-shop get pods -o wide
+kubectl -n juice-shop get deploy juice-shop -o json \
+  | jq '.spec.template.spec.containers[0].securityContext'
+```
+
+Output:
+
+```text
+NAME                          READY   STATUS    RESTARTS   AGE   IP            NODE
+juice-shop-bc878478b-kd9b5   1/1     Running   0          11s   10.42.0.130   k3d-quickticket-server-0
+```
+
+```json
+{
+  "allowPrivilegeEscalation": false,
+  "capabilities": {
+    "drop": [
+      "ALL"
+    ]
+  },
+  "readOnlyRootFilesystem": true
+}
+```
+
+HTTP proof through `kubectl port-forward`:
+
+```bash
+kubectl -n juice-shop port-forward svc/juice-shop 3000:3000
+curl -fsS -o /tmp/lab7-http-body.html -w '%{http_code}' http://127.0.0.1:3000/
+```
+
+Output:
+
+```text
+200
+```

From 272910f2420b3930af9c274bbb7dd9c5ad046b14 Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Mon, 5 Oct 2026 02:11:17 +0300
Subject: [PATCH 11/12] feat(lab8): cosign signing and attestations

---
 labs/lab8/keys/cosign.pub |   4 +
 submissions/lab8.md       | 251 ++++++++++++++++++++++++++++++++++++++
 2 files changed, 255 insertions(+)
 create mode 100644 labs/lab8/keys/cosign.pub
 create mode 100644 submissions/lab8.md

diff --git a/labs/lab8/keys/cosign.pub b/labs/lab8/keys/cosign.pub
new file mode 100644
index 000000000..386d428b8
--- /dev/null
+++ b/labs/lab8/keys/cosign.pub
@@ -0,0 +1,4 @@
+-----BEGIN PUBLIC KEY-----
+MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEhbCIW6t7VgU2jgpr64VSX1EnbMGW
+6ylymOh+D/HMEynTENgWCSevuDvd3WgqvnQc6Aw70RRh5g73F9zwXyFVBw==
+-----END PUBLIC KEY-----
diff --git a/submissions/lab8.md b/submissions/lab8.md
new file mode 100644
index 000000000..db4e336ba
--- /dev/null
+++ b/submissions/lab8.md
@@ -0,0 +1,251 @@
+# Lab 8 Submission — Supply Chain: Signing, Tampering, and Attestation
+
+**Git identity:** `shnupel <ufamail.com2@gmail.com>`  
+**Cosign:** `v3.0.2`  
+**Registry:** local Docker Registry 3 at `127.0.0.1:5000`
+
+The Docker registry was also published as `localhost:5000`. On this macOS host, `localhost:5000` is intercepted by the AirTunes service for direct HTTP requests, so Cosign commands used the equivalent Docker host address `127.0.0.1:5000`.
+
+## Task 1
+
+### Signed digest
+
+I pulled and pushed the Juice Shop image as follows:
+
+```bash
+docker pull bkimminich/juice-shop:v20.0.0
+docker tag bkimminich/juice-shop:v20.0.0 localhost:5000/juice-shop:v20.0.0
+docker push localhost:5000/juice-shop:v20.0.0
+```
+
+The image carried these repository digests:
+
+```text
+bkimminich/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0
+localhost:5000/juice-shop@sha256:fd58bdc9745416afce8184ee0666278a436574633ea7880365153a63bfd418b0
+```
+
+I selected the line beginning with `localhost:5000/`, as required by the lab. Docker pushed the available single-platform OCI manifest and reported the registry manifest digest as:
+
+```text
+sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+```
+
+The registry's `Docker-Content-Digest` for the pushed tag confirmed that this was the immutable artifact available to Cosign. I signed:
+
+```text
+localhost:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+```
+
+The difference between the `docker inspect` repository digest and the registry manifest digest occurred because Docker reported the source multi-platform image digest while the local push contained the available single-platform OCI manifest. Cosign must sign the digest that the local registry serves.
+
+I used Cosign 3.0.2 with transparency-log upload disabled for this local-only registry:
+
+```bash
+COSIGN_PASSWORD="<local passphrase>" cosign sign \
+  --key labs/lab8/keys/cosign.key --tlog-upload=false \
+  --allow-insecure-registry --yes \
+  127.0.0.1:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+```
+
+The private key was not staged. Git reported:
+
+```text
+The following paths are ignored by one of your .gitignore files:
+labs/lab8/keys/cosign.key
+hint: Use -f if you really want to add them.
+```
+
+Verification of the original digest succeeded:
+
+```text
+Verification for 127.0.0.1:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113 --
+The following checks were performed on each of these signatures:
+  - The cosign claims were validated
+  - Existence of the claims in the transparency log was verified offline
+  - The signatures were verified against the specified public key
+```
+
+The verified signature record contained:
+
+```json
+{
+  "docker-manifest-digest": "sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113",
+  "type": "https://sigstore.dev/cosign/sign/v1"
+}
+```
+
+### Tag overwrite and verification failure
+
+I overwrote the same tag with Alpine:
+
+```bash
+docker pull alpine:3.20
+docker tag alpine:3.20 localhost:5000/juice-shop:v20.0.0
+docker push localhost:5000/juice-shop:v20.0.0
+```
+
+The digest comparison was:
+
+```text
+signed:  localhost:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+now:     localhost:5000/juice-shop@sha256:45e09956dc667c5eff3583c9d94830261fb1ca0be10a0a7db36266edf5de9e1d
+```
+
+Verification of the swapped image failed with the exact Cosign error:
+
+```text
+WARNING: Skipping tlog verification is an insecure practice that lacks transparency and auditability verification for the signature.
+Error: no signatures found
+error during command execution: no signatures found
+```
+
+The original digest still verified after the tag overwrite. This shows that the signature is bound to the image manifest digest, which identifies the exact content. A tag is a mutable name and can be moved to another manifest. If the signature were bound to the tag, an attacker could overwrite `v20.0.0` and make the old signature appear to approve the new image; digest binding prevents that substitution.
+
+## Task 2
+
+### CycloneDX SBOM attestation
+
+I attached the Lab 4 CycloneDX SBOM to the signed image digest and verified it with:
+
+```bash
+COSIGN_PASSWORD="<local passphrase>" cosign attest \
+  --key labs/lab8/keys/cosign.key --type cyclonedx \
+  --predicate labs/lab4/juice-shop.cdx.json \
+  --tlog-upload=false --allow-insecure-registry --yes \
+  127.0.0.1:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+
+cosign verify-attestation --key labs/lab8/keys/cosign.pub \
+  --insecure-ignore-tlog --allow-insecure-registry --type cyclonedx \
+  127.0.0.1:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+```
+
+The component counts matched:
+
+| Source | Component count |
+|---|---:|
+| `labs/lab4/juice-shop.cdx.json` | 3068 |
+| Decoded verified attestation | 3068 |
+
+The verified SBOM statement contained:
+
+```json
+{
+  "_type": "https://in-toto.io/Statement/v0.1",
+  "subject": [
+    {
+      "name": "127.0.0.1:5000/juice-shop",
+      "digest": {
+        "sha256": "cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113"
+      }
+    }
+  ],
+  "predicateType": "https://cyclonedx.org/bom"
+}
+```
+
+The `predicateType` was read from the decoded verified payload: `https://cyclonedx.org/bom`.
+
+### SLSA provenance attestation
+
+I created this provenance predicate:
+
+```json
+{
+  "builder": { "id": "https://localhost/lab8-student" },
+  "buildType": "https://example.com/lab8/local-build",
+  "invocation": {
+    "configSource": {
+      "uri": "https://github.com/Shnupel/DevSecOps-Intro"
+    }
+  }
+}
+```
+
+I attached and verified it as a SLSA provenance attestation:
+
+```bash
+COSIGN_PASSWORD="<local passphrase>" cosign attest \
+  --key labs/lab8/keys/cosign.key --type slsaprovenance \
+  --predicate /tmp/provenance.json \
+  --tlog-upload=false --allow-insecure-registry --yes \
+  127.0.0.1:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+
+cosign verify-attestation --key labs/lab8/keys/cosign.pub \
+  --insecure-ignore-tlog --allow-insecure-registry --type slsaprovenance \
+  127.0.0.1:5000/juice-shop@sha256:cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113
+```
+
+The second verified payload reported:
+
+```json
+{
+  "_type": "https://in-toto.io/Statement/v0.1",
+  "subject": [
+    {
+      "name": "127.0.0.1:5000/juice-shop",
+      "digest": {
+        "sha256": "cbdfc00de875926f20ff603fac73c5b68577e37680cf2e0c324adda42ffc1113"
+      }
+    }
+  ],
+  "predicateType": "https://slsa.dev/provenance/v0.2",
+  "predicate": {
+    "builder": {
+      "id": "https://localhost/lab8-student"
+    },
+    "buildType": "https://example.com/lab8/local-build",
+    "invocation": {
+      "configSource": {
+        "uri": "https://github.com/Shnupel/DevSecOps-Intro"
+      }
+    }
+  }
+}
+```
+
+The provenance `predicateType` was read from the decoded verified payload: `https://slsa.dev/provenance/v0.2`.
+
+Cosign filled the in-toto envelope fields `_type`, `subject`, and `predicateType`. The `_type` is the in-toto statement type. The `subject` identifies the image name and digest that I supplied as the Cosign target. The `predicateType` is the type selected by `--type cyclonedx` or `--type slsaprovenance`. I supplied the SBOM predicate body from Lab 4 and the provenance predicate body from `/tmp/provenance.json`.
+
+The morning after the next Log4Shell, the attestation lets an incident responder query the registry for images whose signed SBOM contains the affected component or version, then prioritize those images for isolation and rebuild. A signature alone proves that the image bytes are unchanged after signing, but it does not describe the packages inside the image or how it was built. This works at three in the morning only when every image has a verified attestation, the predicate format is queryable, the registry retains the attestations, and the responder trusts the public key used to verify them.
+
+## Bonus
+
+### Blob signing and tampering
+
+I created and signed a release archive:
+
+```bash
+printf '#!/bin/bash\necho "installing my-tool"\n' > /tmp/install.sh
+tar -czf labs/lab8/results/my-tool.tar.gz -C /tmp install.sh
+
+COSIGN_PASSWORD="<local passphrase>" cosign sign-blob \
+  --key labs/lab8/keys/cosign.key --yes --tlog-upload=false \
+  --bundle labs/lab8/results/my-tool.tar.gz.bundle \
+  labs/lab8/results/my-tool.tar.gz
+```
+
+Verification of the original archive returned:
+
+```text
+WARNING: Skipping tlog verification is an insecure practice that lacks transparency and auditability verification for the blob.
+Verified OK
+```
+
+I then changed `/tmp/install.sh`, rebuilt the archive without signing it again, and verified it with the original bundle. The exact failure was:
+
+```text
+WARNING: Skipping tlog verification is an insecure practice that lacks transparency and auditability verification for the blob.
+Error: failed to verify signature: could not verify message: invalid signature when validating ASN.1 encoded signature
+error during command execution: failed to verify signature: could not verify message: invalid signature when validating ASN.1 encoded signature
+```
+
+A consumer needs these two artifact files:
+
+1. `my-tool.tar.gz` — the release artifact.
+2. `my-tool.tar.gz.bundle` — the Cosign signature bundle.
+
+The bundle may travel over the same channel as the archive because it verifies the archive's content. The public key is a separate trust anchor and must be distributed or pinned through a trusted channel; downloading the public key only from the same untrusted location would not establish who signed the release.
+
+For a safe installation, I would publish the archive, its Cosign bundle, and the public key fingerprint through separate trusted channels. The installation instructions would download the archive and bundle, obtain the pinned public key from a trusted repository or preinstalled package, run `cosign verify-blob --key cosign.pub --bundle my-tool.tar.gz.bundle my-tool.tar.gz`, and extract or execute the archive only after the command returns `Verified OK`. The key step most projects skip is verification before execution: Codecov's modified uploader was run by thousands of pipelines without an independent signature check.

From 0b407f68a50bb483a2f81c2316e38765d0d4004a Mon Sep 17 00:00:00 2001
From: shnupel <ufamail.com2@gmail.com>
Date: Sat, 10 Oct 2026 15:29:25 +0300
Subject: [PATCH 12/12] complete lab 9

---
 labs/lab9/falco/rules/custom-rules.yaml       |  15 ++
 .../manifests/k8s/violates-extra-policy.yaml  |  32 ++++
 labs/lab9/policies/extra/hardening.rego       |  17 ++
 submissions/lab9.md                           | 154 ++++++++++++++++++
 4 files changed, 218 insertions(+)
 create mode 100644 labs/lab9/falco/rules/custom-rules.yaml
 create mode 100644 labs/lab9/manifests/k8s/violates-extra-policy.yaml
 create mode 100644 labs/lab9/policies/extra/hardening.rego
 create mode 100644 submissions/lab9.md

diff --git a/labs/lab9/falco/rules/custom-rules.yaml b/labs/lab9/falco/rules/custom-rules.yaml
new file mode 100644
index 000000000..bb0624bb2
--- /dev/null
+++ b/labs/lab9/falco/rules/custom-rules.yaml
@@ -0,0 +1,15 @@
+# Lab 9 custom runtime detections.
+- rule: Container writes below tmp
+  desc: Detect a process writing a file below /tmp inside a container.
+  condition: open_write and container.id != host and fd.name startswith /tmp/
+  output: "container=%container.name user=%user.name file=%fd.name command=%proc.cmdline"
+  priority: WARNING
+  tags: [container, drift]
+
+- rule: Likely cryptominer activity
+  desc: Detect a likely miner connecting to a common mining pool port from a container.
+  condition: evt.type=connect and evt.dir=< and container.id != host and fd.sport in (3333, 4444, 5555, 7777, 14444) and (proc.name in (xmrig, minerd, cpuminer, cgminer) or proc.cmdline contains xmrig or proc.cmdline contains miner)
+  output: "container=%container.name process=%proc.name command=%proc.cmdline destination=%fd.sip:%fd.sport"
+  priority: CRITICAL
+  tags: [container, crypto-mining, mitre_command_and_control]
+
diff --git a/labs/lab9/manifests/k8s/violates-extra-policy.yaml b/labs/lab9/manifests/k8s/violates-extra-policy.yaml
new file mode 100644
index 000000000..1e352cfa2
--- /dev/null
+++ b/labs/lab9/manifests/k8s/violates-extra-policy.yaml
@@ -0,0 +1,32 @@
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: juice-extra-policy-violation
+spec:
+  replicas: 1
+  selector:
+    matchLabels: { app: juice-extra }
+  template:
+    metadata:
+      labels: { app: juice-extra }
+    spec:
+      automountServiceAccountToken: true
+      containers:
+        - name: juice
+          image: bkimminich/juice-shop:v20.0.0
+          securityContext:
+            runAsNonRoot: true
+            runAsUser: 100000
+            allowPrivilegeEscalation: false
+            readOnlyRootFilesystem: true
+            capabilities:
+              drop: ["ALL"]
+          resources:
+            requests: { cpu: "100m", memory: "256Mi" }
+            limits:   { cpu: "500m", memory: "512Mi" }
+          ports:
+            - containerPort: 3000
+          readinessProbe:
+            httpGet: { path: /, port: 3000 }
+          livenessProbe:
+            httpGet: { path: /, port: 3000 }
diff --git a/labs/lab9/policies/extra/hardening.rego b/labs/lab9/policies/extra/hardening.rego
new file mode 100644
index 000000000..20d4a30f5
--- /dev/null
+++ b/labs/lab9/policies/extra/hardening.rego
@@ -0,0 +1,17 @@
+package k8s.extra
+
+# Images must be immutable so a mutable tag cannot change after review.
+deny contains msg if {
+  input.kind == "Deployment"
+  c := input.spec.template.spec.containers[_]
+  not contains(c.image, "@sha256:")
+  msg := sprintf("container %q must pin its image by digest", [c.name])
+}
+
+# Explicitly enabling the service-account token automount is unnecessary for Juice Shop.
+warn contains msg if {
+  input.kind == "Deployment"
+  input.spec.template.spec.automountServiceAccountToken == true
+  c := input.spec.template.spec.containers[_]
+  msg := sprintf("container %q should disable automountServiceAccountToken", [c.name])
+}
diff --git a/submissions/lab9.md b/submissions/lab9.md
new file mode 100644
index 000000000..60234467b
--- /dev/null
+++ b/submissions/lab9.md
@@ -0,0 +1,154 @@
+# Lab 9 Submission — Runtime Detection and Policy as Code
+
+**Git identity:** `shnupel <ufamail.com2@gmail.com>`  
+**Branch:** `lab9`
+
+## Task 1
+
+### Falco setup
+
+Falco 0.43.1 and the target container were started with Docker. The Docker Desktop LinuxKit kernel reported the expected missing tracepoints for TOCTOU mitigation; Falco continued running and detected syscall events.
+
+The lab command included `/boot`, but Docker Desktop rejected that mount because `/boot` is not shared from macOS. I reran Falco without that read-only mount. Falco loaded `labs/lab9/falco/rules/custom-rules.yaml` successfully and reported the TOCTOU warning described in the lab.
+
+### Built-in detections
+
+The TTY shell command was:
+
+```bash
+docker exec -t lab9-target sh -lc 'echo hello-from-shell'
+```
+
+It produced the built-in `Terminal shell in container` alert:
+
+```json
+{"priority":"Notice","rule":"Terminal shell in container","output_fields":{"container.name":"lab9-target","proc.cmdline":"sh -lc echo hello-from-shell","proc.tty":34816,"user.name":"root"}}
+```
+
+The sensitive-file command was:
+
+```bash
+docker exec lab9-target sh -c 'cat /etc/shadow'
+```
+
+It produced the built-in `Read sensitive file untrusted` alert:
+
+```json
+{"priority":"Warning","rule":"Read sensitive file untrusted","output_fields":{"container.name":"lab9-target","fd.name":"/etc/shadow","proc.cmdline":"cat /etc/shadow","proc.name":"cat","user.name":"root"}}
+```
+
+The full JSON alert lines are in `labs/lab9/falco/logs/after-builtins.log`.
+
+One incident-relevant field that is not in the human-readable `output` is `container.id`. It identifies the exact container instance, even when a container name is reused after restart. Other useful structured fields include `evt.time.iso8601`, `proc.exepath`, and `user.uid`.
+
+### Custom `/tmp` write rule
+
+The rule is in `labs/lab9/falco/rules/custom-rules.yaml`:
+
+```yaml
+- rule: Container writes below tmp
+  desc: Detect a process writing a file below /tmp inside a container.
+  condition: open_write and container.id != host and fd.name startswith /tmp/
+  output: "container=%container.name user=%user.name file=%fd.name command=%proc.cmdline"
+  priority: WARNING
+  tags: [container, drift]
+```
+
+After reloading with `SIGHUP`, I triggered it with:
+
+```bash
+docker exec --user 0 lab9-target sh -lc 'echo test > /tmp/my-write.txt'
+```
+
+The alert JSON was:
+
+```json
+{"priority":"Warning","rule":"Container writes below tmp","output_fields":{"container.id":"d8ee3fbcbc9e","container.name":"lab9-target","fd.name":"/tmp/my-write.txt","proc.cmdline":"sh -lc echo test > /tmp/my-write.txt","user.name":"root","evt.time.iso8601":1791634939025828688}}
+```
+
+The complete alert is saved in `labs/lab9/falco/logs/after-tmp-write.log`. The rule fires on every write below `/tmp` in every container. A browser, image-processing service, or package manager can legitimately use temporary files and create noise. I would keep the detection and tune it with an allowlist for approved container images and known process paths, while retaining alerts for unexpected users, images, and command lines. I would review the allowlist periodically so it does not hide drift.
+
+## Task 2
+
+### Shipped policy results
+
+I ran Conftest 0.69.0 in Docker because the host does not have the `conftest` binary installed.
+
+| Manifest | Passed | Warnings | Failed |
+|---|---:|---:|---:|
+| `juice-hardened.yaml` with shipped Kubernetes policy | 30 | 0 | 0 |
+| `juice-unhardened.yaml` with shipped Kubernetes policy | 20 | 2 | 8 |
+| `juice-compose.yml` with shipped Compose policy | 15 | 0 | 0 |
+
+Two failures from the unhardened Kubernetes manifest map directly to rules:
+
+- `container "juice" uses disallowed :latest tag` → `k8s.security` rule `deny` that checks `endswith(c.image, ":latest")`.
+- `container "juice" must set runAsNonRoot: true` → `k8s.security` rule `deny` that checks `c.securityContext.runAsNonRoot`.
+
+The same requirement needs a separate Compose rule and Kubernetes rule because the input schemas differ: Compose uses service objects under `input.services`, while Kubernetes stores containers under `input.spec.template.spec.containers`. The Compose file passing all 15 checks shows that the Compose policy matches its schema and that this supplied service configuration satisfies the shipped controls.
+
+### Extended policy
+
+The added policy is `labs/lab9/policies/extra/hardening.rego`:
+
+```rego
+package k8s.extra
+
+deny contains msg if {
+  input.kind == "Deployment"
+  c := input.spec.template.spec.containers[_]
+  not contains(c.image, "@sha256:")
+  msg := sprintf("container %q must pin its image by digest", [c.name])
+}
+
+warn contains msg if {
+  input.kind == "Deployment"
+  input.spec.template.spec.automountServiceAccountToken == true
+  c := input.spec.template.spec.containers[_]
+  msg := sprintf("container %q should disable automountServiceAccountToken", [c.name])
+}
+```
+
+The hardened manifest passed the extended policy:
+
+```text
+34 tests, 34 passed, 0 warnings, 0 failures, 0 exceptions
+```
+
+The violating manifest is `labs/lab9/manifests/k8s/violates-extra-policy.yaml`. It intentionally uses a mutable image tag and enables the service-account token:
+
+```text
+17 tests, 15 passed, 1 warning, 1 failure, 0 exceptions
+WARN - ... - k8s.extra - container "juice" should disable automountServiceAccountToken
+FAIL - ... - k8s.extra - container "juice" must pin its image by digest
+```
+
+The digest rule is a deny because mutable image references must block deployment. The service-account token check is a warning because some workloads need a token and the choice requires workload context.
+
+The same control can be a Conftest rule in continuous integration (CI) or a Falco rule at runtime. I would keep the Conftest rule if I could keep only one because it prevents the insecure configuration from deploying. Falco still detects runtime drift, compromised workloads, and changes made after admission, so it provides visibility that a pre-deployment check cannot provide.
+
+## Bonus
+
+The bonus rule is included in `labs/lab9/falco/rules/custom-rules.yaml`:
+
+```yaml
+- rule: Likely cryptominer activity
+  desc: Detect a likely miner connecting to a common mining pool port from a container.
+  condition: evt.type=connect and evt.dir=< and container.id != host and fd.sport in (3333, 4444, 5555, 7777, 14444) and (proc.name in (xmrig, minerd, cpuminer, cgminer) or proc.cmdline contains xmrig or proc.cmdline contains miner)
+  output: "container=%container.name process=%proc.name command=%proc.cmdline destination=%fd.sip:%fd.sport"
+  priority: CRITICAL
+  tags: [container, crypto-mining, mitre_command_and_control]
+```
+
+The rule loaded successfully with the required `CRITICAL` priority and MITRE command-and-control tag. The macOS Docker Desktop LinuxKit environment recorded the connect tracepoint limitation and did not emit a completed-connect alert for the synthetic `nc` trigger. The runtime rule and its required signals are present and validated by Falco's rule loader; a Linux VM or Colima VM with the required tracepoints is required to collect the bonus alert line exactly as written by the lab.
+
+A refused connection is enough because Falco observes the process's connect syscall before an application receives a successful connection. This means Falco sits at the kernel syscall-observation layer, below the container process and independently of whether a mining pool accepts the connection.
+
+Changing the pool port is cheap for an attacker because the list of common ports is visible in the rule. The process-and-command-line signal is more expensive to evade when the attacker needs a functioning miner, although renaming the binary is also possible. I would add destination reputation, DNS or TLS indicators, sustained CPU usage, and an egress baseline to catch miners that use another port or disguise their process name.
+
+## Files
+
+- `labs/lab9/falco/rules/custom-rules.yaml`
+- `labs/lab9/policies/extra/hardening.rego`
+- `labs/lab9/manifests/k8s/violates-extra-policy.yaml`
+- `submissions/lab9.md`