---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-04-07T06:07:01Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://a373bf91-cd13-4d90-a7a0-bc480213a54c"
documentDescribes:
- "SPDXRef-Project-Bower-websites.www.eclipse.org-app4mc-hugo.bower.json"
- "SPDXRef-Project-Bower-websites.www.eclipse.org-app4mc-hugo.site.themes.solstice.bower.json"
- "SPDXRef-Project-NPM-app4mc-0.0.1"
- "SPDXRef-Project-NPM-eclipsefdn-hugo-solstice-theme-0.0.4"
- "SPDXRef-Project-NPM-solstice-0.0.1"
- "SPDXRef-Project-Unmanaged-org.eclipse.app4mc.website.source-10ebecfc0db91b76043c80ebdb448e8d6318961d"
packages:
- SPDXID: "SPDXRef-Project-Bower-websites.www.eclipse.org-app4mc-hugo.bower.json"
  copyrightText: "Copyright (c) 2015 The Eclipse Foundation\nCopyright (c) 2017-2022\
    \ Robert Bosch GmbH and others\nCopyright (c) 2018 Eclipse Foundation, Inc.\n\
    Copyright 2014 Dave Gandy\nCopyright 2018 the Eclipse Foundation, Inc. (https://www.eclipse.org)"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websites/www.eclipse.org-app4mc-hugo/bower.json"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-Bower-websites.www.eclipse.org-app4mc-hugo.site.themes.solstice.bower.json"
  copyrightText: "Copyright (c) 2015 The Eclipse Foundation\nCopyright 2014 Dave Gandy"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websites/www.eclipse.org-app4mc-hugo/site/themes/solstice/bower.json"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-NPM-app4mc-0.0.1"
  copyrightText: "Copyright (c) 2015 The Eclipse Foundation\nCopyright (c) 2017-2022\
    \ Robert Bosch GmbH and others\nCopyright (c) 2018 Eclipse Foundation, Inc.\n\
    Copyright 2014 Dave Gandy\nCopyright 2018 the Eclipse Foundation, Inc. (https://www.eclipse.org)"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "app4mc"
  summary: "NONE"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Project-NPM-eclipsefdn-hugo-solstice-theme-0.0.4"
  copyrightText: "Copyright (c) 2018 Eclipse Foundation, Inc.\nCopyright 2018 the\
    \ Eclipse Foundation, Inc. (https://www.eclipse.org)"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "eclipsefdn-hugo-solstice-theme"
  summary: "NONE"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Project-NPM-solstice-0.0.1"
  copyrightText: "Copyright 2014 Dave Gandy"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "solstice"
  summary: "NONE"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Project-Unmanaged-org.eclipse.app4mc.website.source-10ebecfc0db91b76043c80ebdb448e8d6318961d"
  copyrightText: "Copyright (c) 2015 The Eclipse Foundation\nCopyright (c) 2017-2022\
    \ Robert Bosch GmbH and others\nCopyright (c) 2018 Eclipse Foundation, Inc.\n\
    Copyright 2014 Dave Gandy\nCopyright 2018 the Eclipse Foundation, Inc. (https://www.eclipse.org)"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.app4mc.website.source"
  summary: "NONE"
  versionInfo: "10ebecfc0db91b76043c80ebdb448e8d6318961d"
- SPDXID: "SPDXRef-Package-NPM-abbrev-1.1.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/abbrev@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/abbrev-js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "abbrev"
  summary: "Like ruby's abbrev module, but in js"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-abbrev-1.1.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter and Contributors"
  downloadLocation: "git+ssh://github.com/isaacs/abbrev-js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/abbrev@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/abbrev-js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "abbrev"
  summary: "Like ruby's abbrev module, but in js"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-abbrev-1.1.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/abbrev@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/abbrev-js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "abbrev"
  summary: "Like ruby's abbrev module, but in js"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.2.13"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.2.13"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.2.13"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.2.13-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/accepts.git@b7e15ecb25dacc0b2133ed0553d64f8a79537e01"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.2.13"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.2.13"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.2.13-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/accepts/-/accepts-1.2.13.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.2.13"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.2.13"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.3.8"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.3.8-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/accepts.git@f69c19e459bd501e59fb0b1a40b7471bb578113a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.3.8-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-NPM-ajv-4.11.8"
  copyrightText: "Copyright (c) 2012 Julian Berman\nCopyright (c) 2015 Evgeny Poberezkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@4.11.8"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "4.11.8"
- SPDXID: "SPDXRef-Package-NPM-ajv-4.11.8-vcs"
  copyrightText: "Copyright (c) 2012 Julian Berman\nCopyright (c) 2015 Evgeny Poberezkin"
  downloadLocation: "git+https://github.com/epoberezkin/ajv.git@de9fad502273ade9bdcf976e418bdd5b61b14a07"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@4.11.8"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "4.11.8"
- SPDXID: "SPDXRef-Package-NPM-ajv-4.11.8-source-artifact"
  copyrightText: "Copyright (c) 2012 Julian Berman\nCopyright (c) 2015 Evgeny Poberezkin"
  downloadLocation: "https://registry.npmjs.org/ajv/-/ajv-4.11.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@4.11.8"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "4.11.8"
- SPDXID: "SPDXRef-Package-NPM-align-text-0.1.4"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert\nCopyright (c) 2015 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/align-text@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/align-text"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "align-text"
  summary: "Align the text in a string."
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-align-text-0.1.4-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert\nCopyright (c) 2015 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/align-text.git@7f08e823a54c6bda319d875895813537a66a4c5e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/align-text@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/align-text"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "align-text"
  summary: "Align the text in a string."
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-align-text-0.1.4-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert\nCopyright (c) 2015 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/align-text/-/align-text-0.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/align-text@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/align-text"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "align-text"
  summary: "Align the text in a string."
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-amdefine-1.0.1"
  copyrightText: "Copyright (c) 2003-2004 Lawrence E. Rosen\nCopyright (c) 2005-2016\
    \ The Dojo Foundation\nCopyright (c) 2009 The Dojo Foundation\nCopyright (c) 2010-2016\
    \ The Dojo Foundation\nCopyright (c) 2011 Jeremy Ashkenas http://jashkenas.github.com/coffee-script"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/amdefine@1.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/jrburke/amdefine"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause OR MIT"
  name: "amdefine"
  summary: "Provide AMD's define() API for declaring modules in the AMD format"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-amdefine-1.0.1-vcs"
  copyrightText: "Copyright (c) 2003-2004 Lawrence E. Rosen\nCopyright (c) 2005-2016\
    \ The Dojo Foundation\nCopyright (c) 2009 The Dojo Foundation\nCopyright (c) 2010-2016\
    \ The Dojo Foundation\nCopyright (c) 2011 Jeremy Ashkenas http://jashkenas.github.com/coffee-script"
  downloadLocation: "git+https://github.com/jrburke/amdefine.git@e59edc9da24404ec7937098e3992f8fb0e260be7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/amdefine@1.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/jrburke/amdefine"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "amdefine"
  summary: "Provide AMD's define() API for declaring modules in the AMD format"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-amdefine-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2003-2004 Lawrence E. Rosen\nCopyright (c) 2005-2016\
    \ The Dojo Foundation\nCopyright (c) 2009 The Dojo Foundation\nCopyright (c) 2010-2016\
    \ The Dojo Foundation\nCopyright (c) 2011 Jeremy Ashkenas http://jashkenas.github.com/coffee-script"
  downloadLocation: "https://registry.npmjs.org/amdefine/-/amdefine-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/amdefine@1.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/jrburke/amdefine"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "amdefine"
  summary: "Provide AMD's define() API for declaring modules in the AMD format"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-0.2.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/ansi-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-0.2.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/ansi-regex.git@5bb5eb8a5277631252f599e2c117a11d0ea87aec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/ansi-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-0.2.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-regex/-/ansi-regex-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/ansi-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-2.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-regex.git@7c908e7b4eb6cd82bfe1295e33fdf6d166c7ed85"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-2.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-1.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/ansi-styles"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-1.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/ansi-styles.git@824376150582340bffb7b6b2b59546a3a062eab5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/ansi-styles"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-1.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-styles/-/ansi-styles-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/ansi-styles"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-2.2.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-styles.git@95c59b23be760108b6530ca1c89477c21b258032"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-2.2.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-argparse-0.1.16"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@0.1.16"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "0.1.16"
- SPDXID: "SPDXRef-Package-NPM-argparse-0.1.16-vcs"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/argparse.git@9c32eb1405d5d4b5686087d95bac010774979659"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@0.1.16"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "0.1.16"
- SPDXID: "SPDXRef-Package-NPM-argparse-0.1.16-source-artifact"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/argparse/-/argparse-0.1.16.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@0.1.16"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "0.1.16"
- SPDXID: "SPDXRef-Package-NPM-array-find-index-1.0.2"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-find-index@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-find-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-find-index"
  summary: "ES2015 `Array#findIndex()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-find-index-1.0.2-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/array-find-index.git@983f4c827ad22fa0353182b1ddcbfaecd4412859"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-find-index@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-find-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-find-index"
  summary: "ES2015 `Array#findIndex()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-find-index-1.0.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-find-index@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-find-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-find-index"
  summary: "ES2015 `Array#findIndex()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-asap-2.0.6"
  copyrightText: "Copyright 2009-2014 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asap@2.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/kriskowal/asap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asap"
  summary: "High-priority task queue for Node.js and browsers"
  versionInfo: "2.0.6"
- SPDXID: "SPDXRef-Package-NPM-asap-2.0.6-vcs"
  copyrightText: "Copyright 2009-2014 Contributors"
  downloadLocation: "git+https://github.com/kriskowal/asap.git@3e3d99381444379bb0483cb9216caa39ac67bebb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asap@2.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/kriskowal/asap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asap"
  summary: "High-priority task queue for Node.js and browsers"
  versionInfo: "2.0.6"
- SPDXID: "SPDXRef-Package-NPM-asap-2.0.6-source-artifact"
  copyrightText: "Copyright 2009-2014 Contributors"
  downloadLocation: "https://registry.npmjs.org/asap/-/asap-2.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asap@2.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/kriskowal/asap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asap"
  summary: "High-priority task queue for Node.js and browsers"
  versionInfo: "2.0.6"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.6"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2019 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.6"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.6-vcs"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2019 Joyent, Inc."
  downloadLocation: "git+https://github.com/joyent/node-asn1.git@c80ab61a3ba35d77deb0a44b9c2bb7abc246dc09"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.6"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.6-source-artifact"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2019 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/asn1/-/asn1-0.2.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.6"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-0.2.0"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-0.2.0-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "git+https://github.com/mcavage/node-assert-plus.git@b5794c3197f2a4df9d8ef6ad04a34149ac0e5403"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-0.2.0-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "https://registry.npmjs.org/assert-plus/-/assert-plus-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "git+https://github.com/mcavage/node-assert-plus.git@a06bafe36ee5cdcc668fb3569c668df9a50fae28"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-async-0.1.22"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.1.22"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.1.22"
- SPDXID: "SPDXRef-Package-NPM-async-0.1.22-vcs"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon"
  downloadLocation: "git+https://github.com/caolan/async.git@4351b56b951a193052df162f531d386b50ccdccc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.1.22"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.1.22"
- SPDXID: "SPDXRef-Package-NPM-async-0.1.22-source-artifact"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon"
  downloadLocation: "https://registry.npmjs.org/async/-/async-0.1.22.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.1.22"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.1.22"
- SPDXID: "SPDXRef-Package-NPM-async-0.2.10"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.2.10"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.2.10"
- SPDXID: "SPDXRef-Package-NPM-async-0.2.10-vcs"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon"
  downloadLocation: "git+https://github.com/caolan/async.git@2d5bc3f5a6db2d699646e59a551355a21cd98637"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.2.10"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.2.10"
- SPDXID: "SPDXRef-Package-NPM-async-0.2.10-source-artifact"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon"
  downloadLocation: "https://registry.npmjs.org/async/-/async-0.2.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.2.10"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.2.10"
- SPDXID: "SPDXRef-Package-NPM-async-0.9.2"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon\nCopyright (c) 2010-2014 Caolan McMahon\nCopyright 2010-2014\
    \ Caolan McMahon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/caolan/async#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-async-0.9.2-vcs"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon\nCopyright (c) 2010-2014 Caolan McMahon\nCopyright 2010-2014\
    \ Caolan McMahon"
  downloadLocation: "git+https://github.com/caolan/async.git@de3a16091d5125384eff4a54deb3998b13c3814c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/caolan/async#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-async-0.9.2-source-artifact"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon\nCopyright (c) 2010-2014 Caolan McMahon\nCopyright 2010-2014\
    \ Caolan McMahon"
  downloadLocation: "https://registry.npmjs.org/async/-/async-0.9.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@0.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/caolan/async#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-async-1.5.2"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon\nCopyright (c) 2010-2014 Caolan McMahon\nCopyright 2010-2014\
    \ Caolan McMahon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@1.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/caolan/async#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "1.5.2"
- SPDXID: "SPDXRef-Package-NPM-async-1.5.2-vcs"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon\nCopyright (c) 2010-2014 Caolan McMahon\nCopyright 2010-2014\
    \ Caolan McMahon"
  downloadLocation: "git+https://github.com/caolan/async.git@9ab5c67b7cb3a4c3dad4a2d4552a2f6775545d6c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@1.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/caolan/async#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "1.5.2"
- SPDXID: "SPDXRef-Package-NPM-async-1.5.2-source-artifact"
  copyrightText: "Copyright (c) 2009 Thomas Robinson <280north.com>\nCopyright (c)\
    \ 2010 Caolan McMahon\nCopyright (c) 2010-2014 Caolan McMahon\nCopyright 2010-2014\
    \ Caolan McMahon"
  downloadLocation: "https://registry.npmjs.org/async/-/async-1.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@1.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/caolan/async#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "1.5.2"
- SPDXID: "SPDXRef-Package-NPM-async-2.6.4"
  copyrightText: "(c) async-js (https://github.com/async-js)\nCopyright (c) 2010-2018\
    \ Caolan McMahon\nCopyright (c) 2011-2015 Michael Mathews <micmath@gmail.com>\
    \ and the contributors\nCopyright (c) 2014-2015 Nijiko Yonskai <nijikokun@gmail.com>\
    \ and the contributors\ncopyright 2010-2011 Google Corporation.Open Sans SemiboldItalicAscender\n\
    copyright 2011 Google Corporation.Open Sans SemiboldRegularAscender"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@2.6.4"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "2.6.4"
- SPDXID: "SPDXRef-Package-NPM-async-2.6.4-vcs"
  copyrightText: "(c) async-js (https://github.com/async-js)\nCopyright (c) 2010-2018\
    \ Caolan McMahon\nCopyright (c) 2011-2015 Michael Mathews <micmath@gmail.com>\
    \ and the contributors\nCopyright (c) 2014-2015 Nijiko Yonskai <nijikokun@gmail.com>\
    \ and the contributors\ncopyright 2010-2011 Google Corporation.Open Sans SemiboldItalicAscender\n\
    copyright 2011 Google Corporation.Open Sans SemiboldRegularAscender"
  downloadLocation: "git+https://github.com/caolan/async.git@c6bdaca4f9175c14fc655d3783c6af6a883e6514"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@2.6.4"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "2.6.4"
- SPDXID: "SPDXRef-Package-NPM-async-2.6.4-source-artifact"
  copyrightText: "(c) async-js (https://github.com/async-js)\nCopyright (c) 2010-2018\
    \ Caolan McMahon\nCopyright (c) 2011-2015 Michael Mathews <micmath@gmail.com>\
    \ and the contributors\nCopyright (c) 2014-2015 Nijiko Yonskai <nijikokun@gmail.com>\
    \ and the contributors\ncopyright 2010-2011 Google Corporation.Open Sans SemiboldItalicAscender\n\
    copyright 2011 Google Corporation.Open Sans SemiboldRegularAscender"
  downloadLocation: "https://registry.npmjs.org/async/-/async-2.6.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async@2.6.4"
  filesAnalyzed: false
  homepage: "https://caolan.github.io/async/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async"
  summary: "Higher-order functions and common patterns for asynchronous code"
  versionInfo: "2.6.4"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "git+https://github.com/alexindigo/asynckit.git@583a75ed4fe41761b66416bb6e703ebb1f8963bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.6.0"
  copyrightText: "Copyright 2010 LearnBoost <dev@learnboost.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.6.0-vcs"
  copyrightText: "Copyright 2010 LearnBoost <dev@learnboost.com>"
  downloadLocation: "git+https://github.com/mikeal/aws-sign.git@8554bdb41268fa295eb1ee300f4adaa9f7f07fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.6.0-source-artifact"
  copyrightText: "Copyright 2010 LearnBoost <dev@learnboost.com>"
  downloadLocation: "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.12.0"
  copyrightText: "Copyright 2013 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.12.0-vcs"
  copyrightText: "Copyright 2013 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "git+https://github.com/mhart/aws4.git@317c243e311f06b0722ffb3124508e6f55388fe8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.12.0-source-artifact"
  copyrightText: "Copyright 2013 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "https://registry.npmjs.org/aws4/-/aws4-1.12.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-base64-url-1.2.1"
  copyrightText: "Copyright (c) 2014 Joaquim Jose F. Serafim"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/base64-url@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/joaquimserafim/base64-url"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "base64-url"
  summary: "Base64 encode, decode, escape and unescape for URL applications"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-base64-url-1.2.1-vcs"
  copyrightText: "Copyright (c) 2014 Joaquim Jose F. Serafim"
  downloadLocation: "git+https://github.com/joaquimserafim/base64-url.git@a548396819f17b1fb1529791ab8a2c1934d03f3e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/base64-url@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/joaquimserafim/base64-url"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "base64-url"
  summary: "Base64 encode, decode, escape and unescape for URL applications"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-base64-url-1.2.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Joaquim Jose F. Serafim"
  downloadLocation: "https://registry.npmjs.org/base64-url/-/base64-url-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/base64-url@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/joaquimserafim/base64-url"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "base64-url"
  summary: "Base64 encode, decode, escape and unescape for URL applications"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-basic-auth-1.0.4"
  copyrightText: "Copyright (c) 2013 TJ Holowaychuk\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015 Douglas\
    \ Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/basic-auth@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/basic-auth#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "basic-auth"
  summary: "node.js basic auth parser"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-basic-auth-1.0.4-vcs"
  copyrightText: "Copyright (c) 2013 TJ Holowaychuk\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015 Douglas\
    \ Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/basic-auth.git@4682d99600383bad5a266efbaa5055657dd9891d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/basic-auth@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/basic-auth#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "basic-auth"
  summary: "node.js basic auth parser"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-basic-auth-1.0.4-source-artifact"
  copyrightText: "Copyright (c) 2013 TJ Holowaychuk\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2015 Douglas\
    \ Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/basic-auth/-/basic-auth-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/basic-auth@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/basic-auth#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "basic-auth"
  summary: "node.js basic auth parser"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2013 Jonathan Ong me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/basic-auth-connect@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/basic-auth-connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "basic-auth-connect"
  summary: "Basic auth middleware for node and connect"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2013 Jonathan Ong me@jongleberry.com"
  downloadLocation: "git+https://github.com/expressjs/basic-auth-connect.git@7a0b814741446933cf78a303fd269b4f54d74f12"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/basic-auth-connect@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/basic-auth-connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "basic-auth-connect"
  summary: "Basic auth middleware for node and connect"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2013 Jonathan Ong me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/basic-auth-connect/-/basic-auth-connect-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/basic-auth-connect@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/basic-auth-connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "basic-auth-connect"
  summary: "Basic auth middleware for node and connect"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-batch-0.5.3"
  copyrightText: "Copyright (c) 2013 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/batch@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/batch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "batch"
  summary: "Simple async batch"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-batch-0.5.3-vcs"
  copyrightText: "Copyright (c) 2013 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/batch.git@247f3ec041be32bb8ddc0816d2155b2391550084"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/batch@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/batch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "batch"
  summary: "Simple async batch"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-batch-0.5.3-source-artifact"
  copyrightText: "Copyright (c) 2013 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/batch/-/batch-0.5.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/batch@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/batch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "batch"
  summary: "Simple async batch"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "git+https://github.com/joyent/node-bcrypt-pbkdf.git@15fa7399a1090ba70d855764f7ace23003bf45f3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-body-parser-1.13.3"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/body-parser@1.13.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/body-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "body-parser"
  summary: "Node.js body parsing middleware"
  versionInfo: "1.13.3"
- SPDXID: "SPDXRef-Package-NPM-body-parser-1.13.3-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/body-parser.git@79d0972bd18247071326105bfb36539830b61b76"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/body-parser@1.13.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/body-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "body-parser"
  summary: "Node.js body parsing middleware"
  versionInfo: "1.13.3"
- SPDXID: "SPDXRef-Package-NPM-body-parser-1.13.3-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/body-parser/-/body-parser-1.13.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/body-parser@1.13.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/body-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "body-parser"
  summary: "Node.js body parsing middleware"
  versionInfo: "1.13.3"
- SPDXID: "SPDXRef-Package-NPM-boom-2.10.1"
  copyrightText: "Copyright (c) 2012-2014 Walmart and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boom@2.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/boom#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "boom"
  summary: "HTTP-friendly error objects"
  versionInfo: "2.10.1"
- SPDXID: "SPDXRef-Package-NPM-boom-2.10.1-vcs"
  copyrightText: "Copyright (c) 2012-2014 Walmart and other contributors"
  downloadLocation: "git+https://github.com/hapijs/boom.git@ff1a662a86b39426cdd18f4441b112d307a34a6f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boom@2.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/boom#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boom"
  summary: "HTTP-friendly error objects"
  versionInfo: "2.10.1"
- SPDXID: "SPDXRef-Package-NPM-boom-2.10.1-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 Walmart and other contributors"
  downloadLocation: "https://registry.npmjs.org/boom/-/boom-2.10.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boom@2.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/boom#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boom"
  summary: "HTTP-friendly error objects"
  versionInfo: "2.10.1"
- SPDXID: "SPDXRef-Package-NPM-bower-1.8.14"
  copyrightText: "Copyright (c) 2012 Twitter and other contributors\nCopyright (c)\
    \ 2012 present Twitter and other contributors (https://github.com/bower/bower/graphs/contributors)\n\
    Copyright (c) 2012-2013 present Twitter and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bower@1.8.14"
  filesAnalyzed: false
  homepage: "http://bower.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bower"
  summary: "The browser package manager"
  versionInfo: "1.8.14"
- SPDXID: "SPDXRef-Package-NPM-bower-1.8.14-vcs"
  copyrightText: "Copyright (c) 2012 Twitter and other contributors\nCopyright (c)\
    \ 2012 present Twitter and other contributors (https://github.com/bower/bower/graphs/contributors)\n\
    Copyright (c) 2012-2013 present Twitter and other contributors"
  downloadLocation: "git+https://github.com/bower/bower.git@d765b2bb8825db4eb9a25a54fd80e822abe524b0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bower@1.8.14"
  filesAnalyzed: false
  homepage: "http://bower.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bower"
  summary: "The browser package manager"
  versionInfo: "1.8.14"
- SPDXID: "SPDXRef-Package-NPM-bower-1.8.14-source-artifact"
  copyrightText: "Copyright (c) 2012 Twitter and other contributors\nCopyright (c)\
    \ 2012 present Twitter and other contributors (https://github.com/bower/bower/graphs/contributors)\n\
    Copyright (c) 2012-2013 present Twitter and other contributors"
  downloadLocation: "https://registry.npmjs.org/bower/-/bower-1.8.14.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bower@1.8.14"
  filesAnalyzed: false
  homepage: "http://bower.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bower"
  summary: "The browser package manager"
  versionInfo: "1.8.14"
- SPDXID: "SPDXRef-Package-NPM-browserify-zlib-0.1.4"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browserify-zlib@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/devongovett/browserify-zlib"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "browserify-zlib"
  summary: "Full zlib module for browserify"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-browserify-zlib-0.1.4-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/devongovett/browserify-zlib.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browserify-zlib@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/devongovett/browserify-zlib"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "browserify-zlib"
  summary: "Full zlib module for browserify"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-browserify-zlib-0.1.4-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/browserify-zlib/-/browserify-zlib-0.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browserify-zlib@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/devongovett/browserify-zlib"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "browserify-zlib"
  summary: "Full zlib module for browserify"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.2"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.2-vcs"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "git+https://github.com/LinusU/buffer-from.git@fa0c9264a1b7eddf8c1aa1bbd78ce0ac256c485f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.2-source-artifact"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-bytes-2.1.0"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk\nCopyright (c) 2012-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015 Jed Watson\nCopyright\
    \ (c) 2015 Jed Watson <jed.watson@me.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-bytes-2.1.0-vcs"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk\nCopyright (c) 2012-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015 Jed Watson\nCopyright\
    \ (c) 2015 Jed Watson <jed.watson@me.com>"
  downloadLocation: "git+https://github.com/visionmedia/bytes.js.git@86e4520cc369b34866154a53344ca50b2bb5ddcd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-bytes-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk\nCopyright (c) 2012-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015 Jed Watson\nCopyright\
    \ (c) 2015 Jed Watson <jed.watson@me.com>"
  downloadLocation: "https://registry.npmjs.org/bytes/-/bytes-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-bytes-2.4.0"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk\nCopyright (c) 2012-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015 Jed Watson\nCopyright\
    \ (c) 2015 Jed Watson <jed.watson@me.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@2.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-NPM-bytes-2.4.0-vcs"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk\nCopyright (c) 2012-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015 Jed Watson\nCopyright\
    \ (c) 2015 Jed Watson <jed.watson@me.com>"
  downloadLocation: "git+https://github.com/visionmedia/bytes.js.git@2a598442bdfa796df8d01a96cc54495cda550e70"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@2.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-NPM-bytes-2.4.0-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk\nCopyright (c) 2012-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015 Jed Watson\nCopyright\
    \ (c) 2015 Jed Watson <jed.watson@me.com>"
  downloadLocation: "https://registry.npmjs.org/bytes/-/bytes-2.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@2.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-1.2.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-1.2.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase.git@185ba12da723be9c1ee986cc2956bdc4c517a141"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-1.2.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/camelcase/-/camelcase-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-2.1.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-2.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase.git@35c9c8abce5b9cc9defe534ab25823dc6383180f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-2.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase-keys@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase-keys"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase-keys"
  summary: "Convert object keys to camelCase"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase-keys.git@d92dfb3b5eb2985d62839cdd44672f01139d1822"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase-keys@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase-keys"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase-keys"
  summary: "Convert object keys to camelCase"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase-keys@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase-keys"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase-keys"
  summary: "Convert object keys to camelCase"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/caseless.git@af91df7878a8b53cf3dc2e9a086dc57ba8301649"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-center-align-0.1.3"
  copyrightText: "(c) 2015 Jon Schlinkert\nCopyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/center-align@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/center-align"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "center-align"
  summary: "Center-align the text in a string."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-center-align-0.1.3-vcs"
  copyrightText: "(c) 2015 Jon Schlinkert\nCopyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/center-align.git@5c5fab5012fceaa3e21a00162958c0ed11109419"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/center-align@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/center-align"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "center-align"
  summary: "Center-align the text in a string."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-center-align-0.1.3-source-artifact"
  copyrightText: "(c) 2015 Jon Schlinkert\nCopyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/center-align/-/center-align-0.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/center-align@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/center-align"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "center-align"
  summary: "Center-align the text in a string."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-chalk-0.5.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/chalk"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chalk"
  summary: "Terminal string styling done right. Created because the `colors` module\
    \ does some really horrible things."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-chalk-0.5.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/chalk.git@994758f01293f1fdcf63282e9917cb9f2cfbdaac"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/chalk"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right. Created because the `colors` module\
    \ does some really horrible things."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-chalk-0.5.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/chalk/-/chalk-0.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/chalk"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right. Created because the `colors` module\
    \ does some really horrible things."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-chalk-1.1.3"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chalk"
  summary: "Terminal string styling done right. Much color."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-chalk-1.1.3-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/chalk.git@0d8d8c204eb87a4038219131ad4d8369c9f59d24"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right. Much color."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-chalk-1.1.3-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right. Much color."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-cliui-2.1.0"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cliui@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/bcoe/cliui"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "cliui"
  summary: "easily create complex multi-column command-line-interfaces"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-cliui-2.1.0-vcs"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "git+https://github.com/bcoe/cliui.git@5d6ce466b144db62abefc4b2252c8aa70a741695"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cliui@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/bcoe/cliui"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cliui"
  summary: "easily create complex multi-column command-line-interfaces"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-cliui-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "https://registry.npmjs.org/cliui/-/cliui-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cliui@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/bcoe/cliui"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cliui"
  summary: "easily create complex multi-column command-line-interfaces"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-co-4.6.0"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/co@4.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/co#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "co"
  summary: "generator async control flow goodness"
  versionInfo: "4.6.0"
- SPDXID: "SPDXRef-Package-NPM-co-4.6.0-vcs"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/co.git@b54d18f8f472ad1314800e786993c4169a5ff9f8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/co@4.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/co#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "co"
  summary: "generator async control flow goodness"
  versionInfo: "4.6.0"
- SPDXID: "SPDXRef-Package-NPM-co-4.6.0-source-artifact"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/co/-/co-4.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/co@4.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/co#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "co"
  summary: "generator async control flow goodness"
  versionInfo: "4.6.0"
- SPDXID: "SPDXRef-Package-NPM-coffee-script-1.3.3"
  copyrightText: "(c) 2011 Jeremy Ashkenas, DocumentCloud Inc. Underscore\nCopyright\
    \ (c) 2009-2012 Jeremy Ashkenas\nCopyright 2011 Jeremy Ashkenas\nCopyright 2011\
    \ John Resig\nCopyright 2011 The Dojo Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/coffee-script@1.3.3"
  filesAnalyzed: false
  homepage: "http://coffeescript.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "coffee-script"
  summary: "Unfancy JavaScript"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-coffee-script-1.3.3-vcs"
  copyrightText: "(c) 2011 Jeremy Ashkenas, DocumentCloud Inc. Underscore\nCopyright\
    \ (c) 2009-2012 Jeremy Ashkenas\nCopyright 2011 Jeremy Ashkenas\nCopyright 2011\
    \ John Resig\nCopyright 2011 The Dojo Foundation"
  downloadLocation: "git+https://github.com/jashkenas/coffee-script.git@79492aab362e7af0279579d69c6d68525bbb7147"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/coffee-script@1.3.3"
  filesAnalyzed: false
  homepage: "http://coffeescript.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "coffee-script"
  summary: "Unfancy JavaScript"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-coffee-script-1.3.3-source-artifact"
  copyrightText: "(c) 2011 Jeremy Ashkenas, DocumentCloud Inc. Underscore\nCopyright\
    \ (c) 2009-2012 Jeremy Ashkenas\nCopyright 2011 Jeremy Ashkenas\nCopyright 2011\
    \ John Resig\nCopyright 2011 The Dojo Foundation"
  downloadLocation: "https://registry.npmjs.org/coffee-script/-/coffee-script-1.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/coffee-script@1.3.3"
  filesAnalyzed: false
  homepage: "http://coffeescript.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "coffee-script"
  summary: "Unfancy JavaScript"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-colors-0.6.2"
  copyrightText: "Copyright (c) 2010 Marak Squires"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/colors@0.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/Marak/colors.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "colors"
  summary: "get colors in your node.js console like what"
  versionInfo: "0.6.2"
- SPDXID: "SPDXRef-Package-NPM-colors-0.6.2-vcs"
  copyrightText: "Copyright (c) 2010 Marak Squires"
  downloadLocation: "git+https://github.com/Marak/colors.js.git@b895035f4a50b0bac2139f4a8d11fa9c0a7cbf54"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/colors@0.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/Marak/colors.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "colors"
  summary: "get colors in your node.js console like what"
  versionInfo: "0.6.2"
- SPDXID: "SPDXRef-Package-NPM-colors-0.6.2-source-artifact"
  copyrightText: "Copyright (c) 2010 Marak Squires"
  downloadLocation: "https://registry.npmjs.org/colors/-/colors-0.6.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/colors@0.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/Marak/colors.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "colors"
  summary: "get colors in your node.js console like what"
  versionInfo: "0.6.2"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8-vcs"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "git+https://github.com/felixge/node-combined-stream.git@5298bece5aba2cf4d2f5ec84c4fc128572c41cee"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8-source-artifact"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-compressible-2.0.18"
  copyrightText: "Copyright (c) 2013 Jonathan Ong\nCopyright (c) 2013 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014 Jeremiah Senkpiel\nCopyright (c) 2014\
    \ Jeremiah Senkpiel <fishrock123@rocketmail.com>\nCopyright (c) 2015 Douglas Christopher\
    \ Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/compressible@2.0.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/compressible#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "compressible"
  summary: "Compressible Content-Type / mime checking"
  versionInfo: "2.0.18"
- SPDXID: "SPDXRef-Package-NPM-compressible-2.0.18-vcs"
  copyrightText: "Copyright (c) 2013 Jonathan Ong\nCopyright (c) 2013 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014 Jeremiah Senkpiel\nCopyright (c) 2014\
    \ Jeremiah Senkpiel <fishrock123@rocketmail.com>\nCopyright (c) 2015 Douglas Christopher\
    \ Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/compressible.git@f4b72172c155b692c8407730e1bc41d2ca81e000"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/compressible@2.0.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/compressible#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "compressible"
  summary: "Compressible Content-Type / mime checking"
  versionInfo: "2.0.18"
- SPDXID: "SPDXRef-Package-NPM-compressible-2.0.18-source-artifact"
  copyrightText: "Copyright (c) 2013 Jonathan Ong\nCopyright (c) 2013 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014 Jeremiah Senkpiel\nCopyright (c) 2014\
    \ Jeremiah Senkpiel <fishrock123@rocketmail.com>\nCopyright (c) 2015 Douglas Christopher\
    \ Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/compressible/-/compressible-2.0.18.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/compressible@2.0.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/compressible#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "compressible"
  summary: "Compressible Content-Type / mime checking"
  versionInfo: "2.0.18"
- SPDXID: "SPDXRef-Package-NPM-compression-1.5.2"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/compression@1.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/compression"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "compression"
  summary: "Node.js compression middleware"
  versionInfo: "1.5.2"
- SPDXID: "SPDXRef-Package-NPM-compression-1.5.2-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/compression.git@c2af8bd8d5cec3577b40d61859ca3a0467052ded"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/compression@1.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/compression"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "compression"
  summary: "Node.js compression middleware"
  versionInfo: "1.5.2"
- SPDXID: "SPDXRef-Package-NPM-compression-1.5.2-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/compression/-/compression-1.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/compression@1.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/compression"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "compression"
  summary: "Node.js compression middleware"
  versionInfo: "1.5.2"
- SPDXID: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  copyrightText: "Copyright (c) 2013 Max Ogden"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-stream@1.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/maxogden/concat-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "concat-stream"
  summary: "writable stream that concatenates strings or binary data and calls a callback\
    \ with the result"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-NPM-concat-stream-1.6.2-vcs"
  copyrightText: "Copyright (c) 2013 Max Ogden"
  downloadLocation: "git+ssh://github.com/maxogden/concat-stream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-stream@1.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/maxogden/concat-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-stream"
  summary: "writable stream that concatenates strings or binary data and calls a callback\
    \ with the result"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-NPM-concat-stream-1.6.2-source-artifact"
  copyrightText: "Copyright (c) 2013 Max Ogden"
  downloadLocation: "https://registry.npmjs.org/concat-stream/-/concat-stream-1.6.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-stream@1.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/maxogden/concat-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-stream"
  summary: "writable stream that concatenates strings or binary data and calls a callback\
    \ with the result"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-NPM-connect-2.30.2"
  copyrightText: "Copyright (c) 2010-2011 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect@2.30.2"
  filesAnalyzed: false
  homepage: "https://github.com/senchalabs/connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "connect"
  summary: "High performance middleware framework"
  versionInfo: "2.30.2"
- SPDXID: "SPDXRef-Package-NPM-connect-2.30.2-vcs"
  copyrightText: "Copyright (c) 2010-2011 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "git+https://github.com/senchalabs/connect.git@5412f50bba39cc2e1f2448fd4ca125fdeeef1bf9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect@2.30.2"
  filesAnalyzed: false
  homepage: "https://github.com/senchalabs/connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "connect"
  summary: "High performance middleware framework"
  versionInfo: "2.30.2"
- SPDXID: "SPDXRef-Package-NPM-connect-2.30.2-source-artifact"
  copyrightText: "Copyright (c) 2010-2011 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "https://registry.npmjs.org/connect/-/connect-2.30.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect@2.30.2"
  filesAnalyzed: false
  homepage: "https://github.com/senchalabs/connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "connect"
  summary: "High performance middleware framework"
  versionInfo: "2.30.2"
- SPDXID: "SPDXRef-Package-NPM-connect-livereload-0.5.4"
  copyrightText: "Copyright (c) 2013 intesso\nCopyright 2009-2011 by Daniel Johnson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect-livereload@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/intesso/connect-livereload#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "connect-livereload"
  summary: "connect middleware for adding the livereload script to the response"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-connect-livereload-0.5.4-vcs"
  copyrightText: "Copyright (c) 2013 intesso\nCopyright 2009-2011 by Daniel Johnson"
  downloadLocation: "git+https://github.com/intesso/connect-livereload.git@b5f49da7de780aad868e07870b6372c164b45101"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect-livereload@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/intesso/connect-livereload#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "connect-livereload"
  summary: "connect middleware for adding the livereload script to the response"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-connect-livereload-0.5.4-source-artifact"
  copyrightText: "Copyright (c) 2013 intesso\nCopyright 2009-2011 by Daniel Johnson"
  downloadLocation: "https://registry.npmjs.org/connect-livereload/-/connect-livereload-0.5.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect-livereload@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/intesso/connect-livereload#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "connect-livereload"
  summary: "connect middleware for adding the livereload script to the response"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014 Jonathan\
    \ Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect-timeout@1.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/timeout"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "connect-timeout"
  summary: "timeout middleware"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-NPM-connect-timeout-1.6.2-vcs"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014 Jonathan\
    \ Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>"
  downloadLocation: "git+https://github.com/expressjs/timeout.git@f0042a0555ae52f4407be39a7635715234443417"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect-timeout@1.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/timeout"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "connect-timeout"
  summary: "timeout middleware"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-NPM-connect-timeout-1.6.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014 Jonathan\
    \ Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>"
  downloadLocation: "https://registry.npmjs.org/connect-timeout/-/connect-timeout-1.6.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/connect-timeout@1.6.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/timeout"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "connect-timeout"
  summary: "timeout middleware"
  versionInfo: "1.6.2"
- SPDXID: "SPDXRef-Package-NPM-content-type-1.0.5"
  copyrightText: "Copyright (c) 2015 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-type@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-type#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "content-type"
  summary: "Create and parse HTTP Content-Type header"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-content-type-1.0.5-vcs"
  copyrightText: "Copyright (c) 2015 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/content-type.git@6115a4064e4dfd9845241c3f89c233ee2423deeb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-type@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "content-type"
  summary: "Create and parse HTTP Content-Type header"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-content-type-1.0.5-source-artifact"
  copyrightText: "Copyright (c) 2015 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-type@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "content-type"
  summary: "Create and parse HTTP Content-Type header"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-cookie-0.1.3"
  copyrightText: "Copyright (c) 2012-2014 Roman Shtylman\nCopyright (c) 2012-2014\
    \ Roman Shtylman <shtylman@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cookie"
  summary: "cookie parsing and serialization"
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-cookie-0.1.3-vcs"
  copyrightText: "Copyright (c) 2012-2014 Roman Shtylman\nCopyright (c) 2012-2014\
    \ Roman Shtylman <shtylman@gmail.com>"
  downloadLocation: "git+https://github.com/jshttp/cookie.git@f46097723c16f920a7b9759e154c34792e1d1a3b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie"
  summary: "cookie parsing and serialization"
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-cookie-0.1.3-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 Roman Shtylman\nCopyright (c) 2012-2014\
    \ Roman Shtylman <shtylman@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/cookie/-/cookie-0.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie"
  summary: "cookie parsing and serialization"
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-cookie-parser-1.3.5"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-parser@1.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/cookie-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cookie-parser"
  summary: "cookie parsing with signatures"
  versionInfo: "1.3.5"
- SPDXID: "SPDXRef-Package-NPM-cookie-parser-1.3.5-vcs"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/expressjs/cookie-parser.git@8133968c429c3f48eb8e3ed54932c52743ac9034"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-parser@1.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/cookie-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie-parser"
  summary: "cookie parsing with signatures"
  versionInfo: "1.3.5"
- SPDXID: "SPDXRef-Package-NPM-cookie-parser-1.3.5-source-artifact"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/cookie-parser/-/cookie-parser-1.3.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-parser@1.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/cookie-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie-parser"
  summary: "cookie parsing with signatures"
  versionInfo: "1.3.5"
- SPDXID: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
  copyrightText: "Copyright (c) 2012 LearnBoost <tj@learnboost.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-signature@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/node-cookie-signature"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cookie-signature"
  summary: "Sign and unsign cookies"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-cookie-signature-1.0.6-vcs"
  copyrightText: "Copyright (c) 2012 LearnBoost <tj@learnboost.com>"
  downloadLocation: "git+https://github.com/visionmedia/node-cookie-signature.git@391b56cf44d88c493491b7e3fc53208cfb976d2a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-signature@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/node-cookie-signature"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie-signature"
  summary: "Sign and unsign cookies"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-cookie-signature-1.0.6-source-artifact"
  copyrightText: "Copyright (c) 2012 LearnBoost <tj@learnboost.com>"
  downloadLocation: "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-signature@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/node-cookie-signature"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie-signature"
  summary: "Sign and unsign cookies"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/isaacs/core-util-is.git@a177da234df5638b363ddc15fa324619a38577c8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.3"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.3-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/isaacs/core-util-is.git@85f4620829d1b6079fd7b351f040b6ea7e184970"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.3-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-crc-3.3.0"
  copyrightText: "Copyright (c) 2006-2013 Thomas Pircher <tehpeh@gmx.net>\nCopyright\
    \ (c) 2014 Alex Gorbatchev\nCopyright 2014 Alex Gorbatchev"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/crc@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexgorbatchev/node-crc"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "crc"
  summary: "Various CRC JavaScript implementations"
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-crc-3.3.0-vcs"
  copyrightText: "Copyright (c) 2006-2013 Thomas Pircher <tehpeh@gmx.net>\nCopyright\
    \ (c) 2014 Alex Gorbatchev\nCopyright 2014 Alex Gorbatchev"
  downloadLocation: "git+https://github.com/alexgorbatchev/node-crc.git@5ec5f3c74cd5a0315ac428af695743ff447a6723"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/crc@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexgorbatchev/node-crc"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "crc"
  summary: "Various CRC JavaScript implementations"
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-crc-3.3.0-source-artifact"
  copyrightText: "Copyright (c) 2006-2013 Thomas Pircher <tehpeh@gmx.net>\nCopyright\
    \ (c) 2014 Alex Gorbatchev\nCopyright 2014 Alex Gorbatchev"
  downloadLocation: "https://registry.npmjs.org/crc/-/crc-3.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/crc@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexgorbatchev/node-crc"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "crc"
  summary: "Various CRC JavaScript implementations"
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-cryptiles-2.0.5"
  copyrightText: "Copyright (c) 2014 Eran Hammer and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cryptiles@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/cryptiles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "cryptiles"
  summary: "General purpose crypto utilities"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-cryptiles-2.0.5-vcs"
  copyrightText: "Copyright (c) 2014 Eran Hammer and other contributors"
  downloadLocation: "git+https://github.com/hapijs/cryptiles.git@9bc5a852f01cd51e615814e1cb255fe2df810649"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cryptiles@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/cryptiles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cryptiles"
  summary: "General purpose crypto utilities"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-cryptiles-2.0.5-source-artifact"
  copyrightText: "Copyright (c) 2014 Eran Hammer and other contributors"
  downloadLocation: "https://registry.npmjs.org/cryptiles/-/cryptiles-2.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cryptiles@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/cryptiles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cryptiles"
  summary: "General purpose crypto utilities"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-csrf-3.0.6"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/csrf@3.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/csrf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "csrf"
  summary: "primary logic behind csrf tokens"
  versionInfo: "3.0.6"
- SPDXID: "SPDXRef-Package-NPM-csrf-3.0.6-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/pillarjs/csrf.git@018ec746e8ce5dea10dda78a2480a0a9e756f1a8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/csrf@3.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/csrf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "csrf"
  summary: "primary logic behind csrf tokens"
  versionInfo: "3.0.6"
- SPDXID: "SPDXRef-Package-NPM-csrf-3.0.6-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/csrf/-/csrf-3.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/csrf@3.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/csrf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "csrf"
  summary: "primary logic behind csrf tokens"
  versionInfo: "3.0.6"
- SPDXID: "SPDXRef-Package-NPM-csurf-1.8.3"
  copyrightText: "Copyright (c) 2011 Sencha Inc.\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/csurf@1.8.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/csurf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "csurf"
  summary: "CSRF token middleware"
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-NPM-csurf-1.8.3-vcs"
  copyrightText: "Copyright (c) 2011 Sencha Inc.\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/csurf.git@3ebc176634b1a93ee4601a1c1929c0014d65e5ce"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/csurf@1.8.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/csurf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "csurf"
  summary: "CSRF token middleware"
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-NPM-csurf-1.8.3-source-artifact"
  copyrightText: "Copyright (c) 2011 Sencha Inc.\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/csurf/-/csurf-1.8.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/csurf@1.8.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/csurf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "csurf"
  summary: "CSRF token middleware"
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  copyrightText: "(c) James Talmage (http://github.com/jamestalmage)\nCopyright (c)\
    \ James Talmage <james@talmage.io>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/currently-unhandled@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jamestalmage/currently-unhandled#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "currently-unhandled"
  summary: "Track the list of currently unhandled promise rejections."
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-vcs"
  copyrightText: "(c) James Talmage (http://github.com/jamestalmage)\nCopyright (c)\
    \ James Talmage <james@talmage.io>"
  downloadLocation: "git+https://github.com/jamestalmage/currently-unhandled.git@6b998300e8cc2f732d80f99b7ecea37c97ab6ded"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/currently-unhandled@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jamestalmage/currently-unhandled#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "currently-unhandled"
  summary: "Track the list of currently unhandled promise rejections."
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-source-artifact"
  copyrightText: "(c) James Talmage (http://github.com/jamestalmage)\nCopyright (c)\
    \ James Talmage <james@talmage.io>"
  downloadLocation: "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/currently-unhandled@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jamestalmage/currently-unhandled#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "currently-unhandled"
  summary: "Track the list of currently unhandled promise rejections."
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1"
  copyrightText: "Copyright (c) 2013 Joyent Inc.\nCopyright (c) 2013 Trent Mick\n\
    Copyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Joyent, Inc.\nCopyright\
    \ 2012 Mark Cavage\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1-vcs"
  copyrightText: "Copyright (c) 2013 Joyent Inc.\nCopyright (c) 2013 Trent Mick\n\
    Copyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Joyent, Inc.\nCopyright\
    \ 2012 Mark Cavage\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick"
  downloadLocation: "git+https://github.com/trentm/node-dashdash.git@1dd7379640462a21ca6d92502803de830b4acfa2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Joyent Inc.\nCopyright (c) 2013 Trent Mick\n\
    Copyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Joyent, Inc.\nCopyright\
    \ 2012 Mark Cavage\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick"
  downloadLocation: "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3"
  copyrightText: "(c) 2007-2009 Steven Levithan\n(c) 2007-2009 Steven Levithan stevenlevithan.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dateformat@1.0.2-1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-dateformat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dateformat"
  summary: "A node.js package for Steven Levithan's excellent dateFormat() function."
  versionInfo: "1.0.2-1.2.3"
- SPDXID: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3-vcs"
  copyrightText: "(c) 2007-2009 Steven Levithan\n(c) 2007-2009 Steven Levithan stevenlevithan.com"
  downloadLocation: "git+https://github.com/felixge/node-dateformat.git@70097d15411666bd782203f18f681f8e91badb28"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dateformat@1.0.2-1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-dateformat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dateformat"
  summary: "A node.js package for Steven Levithan's excellent dateFormat() function."
  versionInfo: "1.0.2-1.2.3"
- SPDXID: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3-source-artifact"
  copyrightText: "(c) 2007-2009 Steven Levithan\n(c) 2007-2009 Steven Levithan stevenlevithan.com"
  downloadLocation: "https://registry.npmjs.org/dateformat/-/dateformat-1.0.2-1.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dateformat@1.0.2-1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-dateformat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dateformat"
  summary: "A node.js package for Steven Levithan's excellent dateFormat() function."
  versionInfo: "1.0.2-1.2.3"
- SPDXID: "SPDXRef-Package-NPM-debug-0.7.4"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@0.7.4"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "0.7.4"
- SPDXID: "SPDXRef-Package-NPM-debug-0.7.4-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@f877623fce99dba4aed2a94a51b189f40d1e7a9c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@0.7.4"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "0.7.4"
- SPDXID: "SPDXRef-Package-NPM-debug-0.7.4-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-0.7.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@0.7.4"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "0.7.4"
- SPDXID: "SPDXRef-Package-NPM-debug-2.2.0"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-debug-2.2.0-vcs"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@b38458422b5aa8aa6d286b10dfe427e8a67e2b35"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-debug-2.2.0-source-artifact"
  copyrightText: "Copyright (c) 2014 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9"
  copyrightText: "Copyright (c) 2014-2016 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9-vcs"
  copyrightText: "Copyright (c) 2014-2016 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@13abeae468fea297d0dccc50bc55590809241083"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9-source-artifact"
  copyrightText: "Copyright (c) 2014-2016 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/decamelize.git@95980ab6fb44c40eaca7792bdf93aff7c210c805"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "git+https://github.com/felixge/node-delayed-stream.git@07a9dc99fb8f1a488160026b9ad77493f766fb84"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-depd-1.0.1"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-depd-1.0.1-vcs"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/dougwilson/nodejs-depd.git@769e0f8108463c35a6937a9d634ab19fee45100a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-depd-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/depd/-/depd-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-depd-1.1.2"
  copyrightText: "Copyright (c) 2014-2017 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-depd-1.1.2-vcs"
  copyrightText: "Copyright (c) 2014-2017 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/dougwilson/nodejs-depd.git@9a789740084d4f07a3a611432435ae4671f722ff"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-depd-1.1.2-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/depd/-/depd-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-destroy-1.0.4"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/destroy@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/destroy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "destroy"
  summary: "destroy a stream if possible"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-destroy-1.0.4-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "git+https://github.com/stream-utils/destroy.git@86edea01456f5fa1027f6a47250c34c713cbcc3b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/destroy@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/destroy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "destroy"
  summary: "destroy a stream if possible"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-destroy-1.0.4-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/destroy/-/destroy-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/destroy@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/destroy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "destroy"
  summary: "destroy a stream if possible"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  copyrightText: "Copyright (c) 2003-2005 Tom Wu\nCopyright (c) 2014 Jeremie Miller"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-vcs"
  copyrightText: "Copyright (c) 2003-2005 Tom Wu\nCopyright (c) 2014 Jeremie Miller"
  downloadLocation: "git+https://github.com/quartzjer/ecc-jsbn.git@5c5ecfaf451743cabc79d4905f34e5ed4352b579"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2003-2005 Tom Wu\nCopyright (c) 2014 Jeremie Miller"
  downloadLocation: "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ee-first-1.1.1"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ee-first@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonathanong/ee-first"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ee-first"
  summary: "return the first event in a set of ee/event pairs"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-ee-first-1.1.1-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "git+https://github.com/jonathanong/ee-first.git@512e0ce4cc3643f603708f965a97b61b1a9c0441"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ee-first@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonathanong/ee-first"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ee-first"
  summary: "return the first event in a set of ee/event pairs"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-ee-first-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ee-first@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonathanong/ee-first"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ee-first"
  summary: "return the first event in a set of ee/event pairs"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-errno-0.1.8"
  copyrightText: "Copyright (c) 2012-2015 Rod Vagg (https://github.com/rvagg) ( rvagg\
    \ (https://twitter.com/rvagg))"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/errno@0.1.8"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/node-errno#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "errno"
  summary: "libuv errno details exposed"
  versionInfo: "0.1.8"
- SPDXID: "SPDXRef-Package-NPM-errno-0.1.8-vcs"
  copyrightText: "Copyright (c) 2012-2015 Rod Vagg (https://github.com/rvagg) ( rvagg\
    \ (https://twitter.com/rvagg))"
  downloadLocation: "git+https://github.com/rvagg/node-errno.git@2fa64cd0416a869c3d90e5085f008a709e54b2ff"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/errno@0.1.8"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/node-errno#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "errno"
  summary: "libuv errno details exposed"
  versionInfo: "0.1.8"
- SPDXID: "SPDXRef-Package-NPM-errno-0.1.8-source-artifact"
  copyrightText: "Copyright (c) 2012-2015 Rod Vagg (https://github.com/rvagg) ( rvagg\
    \ (https://twitter.com/rvagg))"
  downloadLocation: "https://registry.npmjs.org/errno/-/errno-0.1.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/errno@0.1.8"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/node-errno#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "errno"
  summary: "libuv errno details exposed"
  versionInfo: "0.1.8"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2-vcs"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "git+https://github.com/qix-/node-error-ex.git@3953ebb9e4a33287e67676a70a8ad72bbbe38075"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2-source-artifact"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-errorhandler-1.4.3"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/errorhandler@1.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/errorhandler"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "errorhandler"
  summary: "Development-only error handler middleware"
  versionInfo: "1.4.3"
- SPDXID: "SPDXRef-Package-NPM-errorhandler-1.4.3-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/errorhandler.git@c41e9aaf9a518bcf6132c36f81fe67593eac99e8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/errorhandler@1.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/errorhandler"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "errorhandler"
  summary: "Development-only error handler middleware"
  versionInfo: "1.4.3"
- SPDXID: "SPDXRef-Package-NPM-errorhandler-1.4.3-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/errorhandler/-/errorhandler-1.4.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/errorhandler@1.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/errorhandler"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "errorhandler"
  summary: "Development-only error handler middleware"
  versionInfo: "1.4.3"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.2"
  copyrightText: "Copyright (c) 2012-2013 TJ Holowaychuk"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-html"
  summary: "Escape HTML entities"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.2-vcs"
  copyrightText: "Copyright (c) 2012-2013 TJ Holowaychuk"
  downloadLocation: "git+https://github.com/component/escape-html.git@2477a23ae56f75e0a5622a20b5b55da00de3a23b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-html"
  summary: "Escape HTML entities"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2012-2013 TJ Holowaychuk"
  downloadLocation: "https://registry.npmjs.org/escape-html/-/escape-html-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-html"
  summary: "Escape HTML entities"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.3"
  copyrightText: "Copyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2015 Andreas\
    \ Lubbe\nCopyright (c) 2015 Tiancheng Timothy Gu"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-html"
  summary: "Escape string for use in HTML"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.3-vcs"
  copyrightText: "Copyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2015 Andreas\
    \ Lubbe\nCopyright (c) 2015 Tiancheng Timothy Gu"
  downloadLocation: "git+https://github.com/component/escape-html.git@7ac2ea3977fcac3d4c5be8d2a037812820c65f28"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-html"
  summary: "Escape string for use in HTML"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2015 Andreas\
    \ Lubbe\nCopyright (c) 2015 Tiancheng Timothy Gu"
  downloadLocation: "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-html"
  summary: "Escape string for use in HTML"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/escape-string-regexp.git@db124a3e1aae9d692c4899e42a5c6c3e329eaa20"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-esprima-1.0.4"
  copyrightText: "(c) 2005-2010 Sam Stephenson\n(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2011 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c) 2010 Jeremy\
    \ Ashkenas, DocumentCloud Inc. Backbone\nCopyright (c) 2005-2007 Sam Stephenson\n\
    Copyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright (c) 2006-2009 Ext\
    \ JS, LLC.\nCopyright (c) 2006-2010 Valerio Proietti (http://mad4milk.net/)\n\
    Copyright (c) 2007, 2011 Yahoo! Inc.\nCopyright (c) 2010 Cowboy Ben Alman\nCopyright\
    \ (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2011 Sergey Ilinsky (http://www.ilinsky.com)\n\
    Copyright (c) 2011-2012 Ariya Hidayat (http://ariya.ofilabs.com/about) and other\
    \ contributors\nCopyright (c) 2011-2012 Ariya Hidayat <ariya.hidayat@gmail.com>\n\
    Copyright (c) 2011-2012 Ariya Hidayat and other contributors\nCopyright (c) 2011-2012\
    \ Arpad Borsos <arpad.borsos@googlemail.com>\nCopyright (c) 2011-2012 Yusuke Suzuki\
    \ <utatane.tea@gmail.com>\nCopyright (c) 2012 John Freeman <jfreeman08@gmail.com>\n\
    Copyright (c) 2012 Joost-Wim Boekesteijn <joost-wim@boekesteijn.nl>\nCopyright\
    \ (c) 2012 Kris Kowal <kris.kowal@cixar.com>\nCopyright (c) 2012 Mathias Bynens\
    \ <mathias@qiwi.be>\nCopyright (c) 2012 Michael Ficarra <escodegen.copyright@michael.ficarra.me>\n\
    Copyright (c) 2012 Robert Gust-Bardon <donate@robert.gust-bardon.org>\nCopyright\
    \ 2009, 2011 The Dojo Foundation\nCopyright 2010 (c) Mihai Bazon <mihai.bazon@gmail.com>\n\
    Copyright 2010 AUTHORS.txt (http://jqueryui.com/about)\nCopyright 2010-2012 John-David\
    \ Dalton <http://allyoucanleet.com/>\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\n\
    Copyright 2011 (c) jQuery Project\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@1.0.4"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-esprima-1.0.4-vcs"
  copyrightText: "(c) 2005-2010 Sam Stephenson\n(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2011 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c) 2010 Jeremy\
    \ Ashkenas, DocumentCloud Inc. Backbone\nCopyright (c) 2005-2007 Sam Stephenson\n\
    Copyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright (c) 2006-2009 Ext\
    \ JS, LLC.\nCopyright (c) 2006-2010 Valerio Proietti (http://mad4milk.net/)\n\
    Copyright (c) 2007, 2011 Yahoo! Inc.\nCopyright (c) 2010 Cowboy Ben Alman\nCopyright\
    \ (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2011 Sergey Ilinsky (http://www.ilinsky.com)\n\
    Copyright (c) 2011-2012 Ariya Hidayat (http://ariya.ofilabs.com/about) and other\
    \ contributors\nCopyright (c) 2011-2012 Ariya Hidayat <ariya.hidayat@gmail.com>\n\
    Copyright (c) 2011-2012 Ariya Hidayat and other contributors\nCopyright (c) 2011-2012\
    \ Arpad Borsos <arpad.borsos@googlemail.com>\nCopyright (c) 2011-2012 Yusuke Suzuki\
    \ <utatane.tea@gmail.com>\nCopyright (c) 2012 John Freeman <jfreeman08@gmail.com>\n\
    Copyright (c) 2012 Joost-Wim Boekesteijn <joost-wim@boekesteijn.nl>\nCopyright\
    \ (c) 2012 Kris Kowal <kris.kowal@cixar.com>\nCopyright (c) 2012 Mathias Bynens\
    \ <mathias@qiwi.be>\nCopyright (c) 2012 Michael Ficarra <escodegen.copyright@michael.ficarra.me>\n\
    Copyright (c) 2012 Robert Gust-Bardon <donate@robert.gust-bardon.org>\nCopyright\
    \ 2009, 2011 The Dojo Foundation\nCopyright 2010 (c) Mihai Bazon <mihai.bazon@gmail.com>\n\
    Copyright 2010 AUTHORS.txt (http://jqueryui.com/about)\nCopyright 2010-2012 John-David\
    \ Dalton <http://allyoucanleet.com/>\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\n\
    Copyright 2011 (c) jQuery Project\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/ariya/esprima.git@bf4998a393276dcc68d13452eda53897991e70a9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@1.0.4"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-esprima-1.0.4-source-artifact"
  copyrightText: "(c) 2005-2010 Sam Stephenson\n(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2011 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c) 2010 Jeremy\
    \ Ashkenas, DocumentCloud Inc. Backbone\nCopyright (c) 2005-2007 Sam Stephenson\n\
    Copyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright (c) 2006-2009 Ext\
    \ JS, LLC.\nCopyright (c) 2006-2010 Valerio Proietti (http://mad4milk.net/)\n\
    Copyright (c) 2007, 2011 Yahoo! Inc.\nCopyright (c) 2010 Cowboy Ben Alman\nCopyright\
    \ (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2011 Sergey Ilinsky (http://www.ilinsky.com)\n\
    Copyright (c) 2011-2012 Ariya Hidayat (http://ariya.ofilabs.com/about) and other\
    \ contributors\nCopyright (c) 2011-2012 Ariya Hidayat <ariya.hidayat@gmail.com>\n\
    Copyright (c) 2011-2012 Ariya Hidayat and other contributors\nCopyright (c) 2011-2012\
    \ Arpad Borsos <arpad.borsos@googlemail.com>\nCopyright (c) 2011-2012 Yusuke Suzuki\
    \ <utatane.tea@gmail.com>\nCopyright (c) 2012 John Freeman <jfreeman08@gmail.com>\n\
    Copyright (c) 2012 Joost-Wim Boekesteijn <joost-wim@boekesteijn.nl>\nCopyright\
    \ (c) 2012 Kris Kowal <kris.kowal@cixar.com>\nCopyright (c) 2012 Mathias Bynens\
    \ <mathias@qiwi.be>\nCopyright (c) 2012 Michael Ficarra <escodegen.copyright@michael.ficarra.me>\n\
    Copyright (c) 2012 Robert Gust-Bardon <donate@robert.gust-bardon.org>\nCopyright\
    \ 2009, 2011 The Dojo Foundation\nCopyright 2010 (c) Mihai Bazon <mihai.bazon@gmail.com>\n\
    Copyright 2010 AUTHORS.txt (http://jqueryui.com/about)\nCopyright 2010-2012 John-David\
    \ Dalton <http://allyoucanleet.com/>\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\n\
    Copyright 2011 (c) jQuery Project\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/esprima/-/esprima-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@1.0.4"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-etag-1.7.0"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/etag@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/etag"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "etag"
  summary: "Create simple ETags"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-etag-1.7.0-vcs"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/etag.git@a511f5c8c930fd9546dbd88acb080f96bc788cfc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/etag@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/etag"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "etag"
  summary: "Create simple ETags"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-etag-1.7.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/etag/-/etag-1.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/etag@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/etag"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "etag"
  summary: "Create simple ETags"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-eventemitter2-0.4.14"
  copyrightText: "Copyright (c) 2011 hij1nx <http://www.twitter.com/hij1nx>\nCopyright\
    \ (c) 2013 hij1nx\nCopyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/eventemitter2@0.4.14"
  filesAnalyzed: false
  homepage: "https://github.com/hij1nx/EventEmitter2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "eventemitter2"
  summary: "A Node.js event emitter implementation with namespaces, wildcards, TTL\
    \ and browser support."
  versionInfo: "0.4.14"
- SPDXID: "SPDXRef-Package-NPM-eventemitter2-0.4.14-vcs"
  copyrightText: "Copyright (c) 2011 hij1nx <http://www.twitter.com/hij1nx>\nCopyright\
    \ (c) 2013 hij1nx\nCopyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/hij1nx/EventEmitter2.git@250dd1f843b18f720795bd39795206abccd12a7d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/eventemitter2@0.4.14"
  filesAnalyzed: false
  homepage: "https://github.com/hij1nx/EventEmitter2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "eventemitter2"
  summary: "A Node.js event emitter implementation with namespaces, wildcards, TTL\
    \ and browser support."
  versionInfo: "0.4.14"
- SPDXID: "SPDXRef-Package-NPM-eventemitter2-0.4.14-source-artifact"
  copyrightText: "Copyright (c) 2011 hij1nx <http://www.twitter.com/hij1nx>\nCopyright\
    \ (c) 2013 hij1nx\nCopyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/eventemitter2/-/eventemitter2-0.4.14.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/eventemitter2@0.4.14"
  filesAnalyzed: false
  homepage: "https://github.com/hij1nx/EventEmitter2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "eventemitter2"
  summary: "A Node.js event emitter implementation with namespaces, wildcards, TTL\
    \ and browser support."
  versionInfo: "0.4.14"
- SPDXID: "SPDXRef-Package-NPM-exit-0.1.2"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/exit@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "exit"
  summary: "A replacement for process.exit that ensures stdio are fully drained before\
    \ exiting."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-exit-0.1.2-vcs"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/cowboy/node-exit.git@e0d68ecbef54426f7823f25a0f053e2e67bd0d6b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/exit@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "exit"
  summary: "A replacement for process.exit that ensures stdio are fully drained before\
    \ exiting."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-exit-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/exit/-/exit-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/exit@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "exit"
  summary: "A replacement for process.exit that ensures stdio are fully drained before\
    \ exiting."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-express-session-1.11.3"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/express-session@1.11.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/session"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "express-session"
  summary: "Simple session middleware for Express"
  versionInfo: "1.11.3"
- SPDXID: "SPDXRef-Package-NPM-express-session-1.11.3-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/session.git@64e2e7a2d21da881ea53ab984f9eff4be58d7caf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/express-session@1.11.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/session"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "express-session"
  summary: "Simple session middleware for Express"
  versionInfo: "1.11.3"
- SPDXID: "SPDXRef-Package-NPM-express-session-1.11.3-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/express-session/-/express-session-1.11.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/express-session@1.11.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/session"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "express-session"
  summary: "Simple session middleware for Express"
  versionInfo: "1.11.3"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2"
  copyrightText: "Copyright (c) 2014 Stefan Thomas"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Stefan Thomas"
  downloadLocation: "git+https://github.com/justmoon/node-extend.git@8d106d23931c0802e8b88188b0aac433e13358d9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Stefan Thomas"
  downloadLocation: "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0-vcs"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "git+https://github.com/davepacheco/node-extsprintf.git@accc9f2774189a416f294546ed03b626eec3f80c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0-source-artifact"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-faye-websocket-0.4.4"
  copyrightText: "Copyright (c) 2009-2013 James Coglan"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/faye-websocket@0.4.4"
  filesAnalyzed: false
  homepage: "http://github.com/faye/faye-websocket-node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "faye-websocket"
  summary: "Standards-compliant WebSocket server and client"
  versionInfo: "0.4.4"
- SPDXID: "SPDXRef-Package-NPM-faye-websocket-0.4.4-vcs"
  copyrightText: "Copyright (c) 2009-2013 James Coglan"
  downloadLocation: "git+https://github.com/faye/faye-websocket-node.git@99aacf67a52b1cd83ca83f217fbdaa6e50a57abb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/faye-websocket@0.4.4"
  filesAnalyzed: false
  homepage: "http://github.com/faye/faye-websocket-node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "faye-websocket"
  summary: "Standards-compliant WebSocket server and client"
  versionInfo: "0.4.4"
- SPDXID: "SPDXRef-Package-NPM-faye-websocket-0.4.4-source-artifact"
  copyrightText: "Copyright (c) 2009-2013 James Coglan"
  downloadLocation: "https://registry.npmjs.org/faye-websocket/-/faye-websocket-0.4.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/faye-websocket@0.4.4"
  filesAnalyzed: false
  homepage: "http://github.com/faye/faye-websocket-node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "faye-websocket"
  summary: "Standards-compliant WebSocket server and client"
  versionInfo: "0.4.4"
- SPDXID: "SPDXRef-Package-NPM-figures-1.7.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/figures@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/figures#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "figures"
  summary: "Unicode symbols with Windows CMD fallbacks"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-figures-1.7.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/figures.git@f5f4e3d6cccf84f2ca13d9e6b235def59afc15f7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/figures@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/figures#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "figures"
  summary: "Unicode symbols with Windows CMD fallbacks"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-figures-1.7.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/figures/-/figures-1.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/figures@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/figures#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "figures"
  summary: "Unicode symbols with Windows CMD fallbacks"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1"
  copyrightText: "Copyright (c) 2014 Martin Geisler"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/file-sync-cmp@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/mgeisler/file-sync-cmp/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "file-sync-cmp"
  summary: "Synchronous file comparison"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1-vcs"
  copyrightText: "Copyright (c) 2014 Martin Geisler"
  downloadLocation: "git+https://github.com/mgeisler/file-sync-cmp.git@1cf1e51b84378e702e21330213f5bed7b1e3ab79"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/file-sync-cmp@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/mgeisler/file-sync-cmp/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "file-sync-cmp"
  summary: "Synchronous file comparison"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Martin Geisler"
  downloadLocation: "https://registry.npmjs.org/file-sync-cmp/-/file-sync-cmp-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/file-sync-cmp@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/mgeisler/file-sync-cmp/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "file-sync-cmp"
  summary: "Synchronous file comparison"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c)\
    \ 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/finalhandler@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/finalhandler"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "finalhandler"
  summary: "Node.js final http responder"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-finalhandler-0.4.0-vcs"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c)\
    \ 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/pillarjs/finalhandler.git@fe4e4de9ebb0f3831493ad75119ee6ba40542853"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/finalhandler@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/finalhandler"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "finalhandler"
  summary: "Node.js final http responder"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-finalhandler-0.4.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c)\
    \ 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/finalhandler/-/finalhandler-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/finalhandler@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/finalhandler"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "finalhandler"
  summary: "Node.js final http responder"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-find-up-1.1.2"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "find-up"
  summary: "Find a file by walking up parent directories"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-find-up-1.1.2-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/find-up.git@f2d7c1ff74fbac82b2cff038e311ef4b075d9184"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "find-up"
  summary: "Find a file by walking up parent directories"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-find-up-1.1.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "find-up"
  summary: "Find a file by walking up parent directories"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-findup-sync-0.1.3"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/findup-sync@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-findup-sync"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "findup-sync"
  summary: "Find the first file matching a given pattern in the current directory\
    \ or the nearest ancestor directory."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-findup-sync-0.1.3-vcs"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/cowboy/node-findup-sync.git@8b04f40c95c898471e555f1167f29ede57c1cfc7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/findup-sync@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-findup-sync"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "findup-sync"
  summary: "Find the first file matching a given pattern in the current directory\
    \ or the nearest ancestor directory."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-findup-sync-0.1.3-source-artifact"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/findup-sync/-/findup-sync-0.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/findup-sync@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-findup-sync"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "findup-sync"
  summary: "Find the first file matching a given pattern in the current directory\
    \ or the nearest ancestor directory."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/forever-agent.git@1b3b6163f2b3c2c4122bbfa288c1325c0df9871d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.1.4"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.1.4"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.1.4-vcs"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "git+https://github.com/form-data/form-data.git@d7398c3e7cd81ed12ecc0b84363721bae467db02"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.1.4"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.1.4-source-artifact"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/form-data/-/form-data-2.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.1.4"
- SPDXID: "SPDXRef-Package-NPM-fresh-0.3.0"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fresh@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/fresh"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fresh"
  summary: "HTTP response freshness testing"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-fresh-0.3.0-vcs"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/jshttp/fresh.git@14616c9748368ca08cd6a955dd88ab659b778634"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fresh@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/fresh"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fresh"
  summary: "HTTP response freshness testing"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-fresh-0.3.0-source-artifact"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/fresh/-/fresh-0.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fresh@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/fresh"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fresh"
  summary: "HTTP response freshness testing"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "git+https://github.com/Raynos/function-bind.git@1213f807066d1cb8d39a0592d5118f4b1f03de4a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-gaze-0.5.2"
  copyrightText: "Copyright (c) 2010 Caolan McMahon\nCopyright (c) 2013 Kyle Robinson\
    \ Young\nCopyright 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.\nCopyright 2012-2013\
    \ The Dojo Foundation <http://dojofoundation.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gaze@0.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/shama/gaze"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gaze"
  summary: "A globbing fs.watch wrapper built from the best parts of other fine watch\
    \ libs."
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-gaze-0.5.2-vcs"
  copyrightText: "Copyright (c) 2010 Caolan McMahon\nCopyright (c) 2013 Kyle Robinson\
    \ Young\nCopyright 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.\nCopyright 2012-2013\
    \ The Dojo Foundation <http://dojofoundation.org/>"
  downloadLocation: "git+https://github.com/shama/gaze.git@52007df64a841ccf52b9f9cd617cd24a4e2ddf8b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gaze@0.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/shama/gaze"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gaze"
  summary: "A globbing fs.watch wrapper built from the best parts of other fine watch\
    \ libs."
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-gaze-0.5.2-source-artifact"
  copyrightText: "Copyright (c) 2010 Caolan McMahon\nCopyright (c) 2013 Kyle Robinson\
    \ Young\nCopyright 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.\nCopyright 2012-2013\
    \ The Dojo Foundation <http://dojofoundation.org/>"
  downloadLocation: "https://registry.npmjs.org/gaze/-/gaze-0.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gaze@0.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/shama/gaze"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gaze"
  summary: "A globbing fs.watch wrapper built from the best parts of other fine watch\
    \ libs."
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-get-stdin-4.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stdin@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stdin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "get-stdin"
  summary: "Easier stdin"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-get-stdin-4.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/get-stdin.git@65c744975229b25d6cc5c7546f49b6ad9099553f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stdin@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stdin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stdin"
  summary: "Easier stdin"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-get-stdin-4.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stdin@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stdin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stdin"
  summary: "Easier stdin"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-getobject-0.1.0"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getobject@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-getobject"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "getobject"
  summary: "get.and.set.deep.objects.easily = true"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-getobject-0.1.0-vcs"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/cowboy/node-getobject.git@77982939a7df860032cd3cfd95ac984f9eba4867"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getobject@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-getobject"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getobject"
  summary: "get.and.set.deep.objects.easily = true"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-getobject-0.1.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/getobject/-/getobject-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getobject@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-getobject"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getobject"
  summary: "get.and.set.deep.objects.easily = true"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2014, 2016 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright\
    \ 2011 Joyent, Inc.\nCopyright 2016 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2014, 2016 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright\
    \ 2011 Joyent, Inc.\nCopyright 2016 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "git+https://github.com/arekinath/node-getpass.git@e219fae3a4458a1aa4b84002539265a6a1475267"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2014, 2016 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright\
    \ 2011 Joyent, Inc.\nCopyright 2016 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-glob-3.1.21"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@3.1.21"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "glob"
  summary: "a little globber"
  versionInfo: "3.1.21"
- SPDXID: "SPDXRef-Package-NPM-glob-3.1.21-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@72165b221f09e5419b92950962249ea611ac2c0f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@3.1.21"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "3.1.21"
- SPDXID: "SPDXRef-Package-NPM-glob-3.1.21-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-3.1.21.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@3.1.21"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "3.1.21"
- SPDXID: "SPDXRef-Package-NPM-glob-3.2.11"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@3.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "glob"
  summary: "a little globber"
  versionInfo: "3.2.11"
- SPDXID: "SPDXRef-Package-NPM-glob-3.2.11-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@73f57e99510582b2024b762305970ebcf9b70aa2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@3.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "3.2.11"
- SPDXID: "SPDXRef-Package-NPM-glob-3.2.11-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-3.2.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@3.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "3.2.11"
- SPDXID: "SPDXRef-Package-NPM-globule-0.1.0"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/globule@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-globule"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "globule"
  summary: "An easy-to-use wildcard globbing library."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-globule-0.1.0-vcs"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/cowboy/node-globule.git@542dfa81b9e29182778f281fd6c3c74dfc38d541"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/globule@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-globule"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "globule"
  summary: "An easy-to-use wildcard globbing library."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-globule-0.1.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/globule/-/globule-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/globule@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/cowboy/node-globule"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "globule"
  summary: "An easy-to-use wildcard globbing library."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-1.2.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-1.2.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "git+https://github.com/isaacs/node-graceful-fs.git@d806f663e8f2beebeb688f8763765d8c546cd52b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-1.2.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter 'Author"
  downloadLocation: "https://registry.npmjs.org/graceful-fs/-/graceful-fs-1.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@1.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.11"
  copyrightText: "Copyright (c) 2011-2022 Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.11"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.11-vcs"
  copyrightText: "Copyright (c) 2011-2022 Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-graceful-fs.git@514861c372899df14beb7aaecca4cdbb498d7d11"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.11"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.11-source-artifact"
  copyrightText: "Copyright (c) 2011-2022 Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.11"
- SPDXID: "SPDXRef-Package-NPM-grunt-0.4.5"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt@0.4.5"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt"
  summary: "The JavaScript Task Runner"
  versionInfo: "0.4.5"
- SPDXID: "SPDXRef-Package-NPM-grunt-0.4.5-vcs"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt.git@e6f9cdfd61e35f8dc81649c544b8645621ab103d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt@0.4.5"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt"
  summary: "The JavaScript Task Runner"
  versionInfo: "0.4.5"
- SPDXID: "SPDXRef-Package-NPM-grunt-0.4.5-source-artifact"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt/-/grunt-0.4.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt@0.4.5"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt"
  summary: "The JavaScript Task Runner"
  versionInfo: "0.4.5"
- SPDXID: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
  copyrightText: "Copyright (c) 2012 Tyler Kellen"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-cli@0.1.13"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-cli"
  summary: "The grunt command line interface."
  versionInfo: "0.1.13"
- SPDXID: "SPDXRef-Package-NPM-grunt-cli-0.1.13-vcs"
  copyrightText: "Copyright (c) 2012 Tyler Kellen"
  downloadLocation: "git+https://github.com/gruntjs/grunt-cli.git@7b341f8b55984aac98dc6847ce7adef004bf93fd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-cli@0.1.13"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-cli"
  summary: "The grunt command line interface."
  versionInfo: "0.1.13"
- SPDXID: "SPDXRef-Package-NPM-grunt-cli-0.1.13-source-artifact"
  copyrightText: "Copyright (c) 2012 Tyler Kellen"
  downloadLocation: "https://registry.npmjs.org/grunt-cli/-/grunt-cli-0.1.13.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-cli@0.1.13"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-cli"
  summary: "The grunt command line interface."
  versionInfo: "0.1.13"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1"
  copyrightText: "Copyright (c) 2013-2015 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-concat@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-concat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-contrib-concat"
  summary: "Concatenate files."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1-vcs"
  copyrightText: "Copyright (c) 2013-2015 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-contrib-concat.git@d4d97a6a65404351155c04fff9303f3c20d5c02c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-concat@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-concat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-concat"
  summary: "Concatenate files."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1-source-artifact"
  copyrightText: "Copyright (c) 2013-2015 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-contrib-concat/-/grunt-contrib-concat-0.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-concat@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-concat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-concat"
  summary: "Concatenate files."
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  copyrightText: "Copyright (c) 2014-2015 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-connect@0.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-contrib-connect"
  summary: "Start a connect web server"
  versionInfo: "0.10.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1-vcs"
  copyrightText: "Copyright (c) 2014-2015 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-contrib-connect.git@0bd849152948b5b02f98aa3c79bee2b17060b831"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-connect@0.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-connect"
  summary: "Start a connect web server"
  versionInfo: "0.10.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-contrib-connect/-/grunt-contrib-connect-0.10.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-connect@0.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-connect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-connect"
  summary: "Start a connect web server"
  versionInfo: "0.10.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
  copyrightText: "Copyright (c) 2014-2015 Chris Talkington"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-copy@0.8.2"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-copy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-contrib-copy"
  summary: "Copy files and folders"
  versionInfo: "0.8.2"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2-vcs"
  copyrightText: "Copyright (c) 2014-2015 Chris Talkington"
  downloadLocation: "git+https://github.com/gruntjs/grunt-contrib-copy.git@018be2d7c7f7733858dc7094fbdf562ec25eb48d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-copy@0.8.2"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-copy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-copy"
  summary: "Copy files and folders"
  versionInfo: "0.8.2"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Chris Talkington"
  downloadLocation: "https://registry.npmjs.org/grunt-contrib-copy/-/grunt-contrib-copy-0.8.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-copy@0.8.2"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-copy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-copy"
  summary: "Copy files and folders"
  versionInfo: "0.8.2"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  copyrightText: "Copyright (c) 2016 Tyler Kellen"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-less@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-less#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-contrib-less"
  summary: "Compile LESS files to CSS"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1-vcs"
  copyrightText: "Copyright (c) 2016 Tyler Kellen"
  downloadLocation: "git+https://github.com/gruntjs/grunt-contrib-less.git@c282d0d52c55631bb468e6262fb2fd9de248d5c6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-less@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-less#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-less"
  summary: "Compile LESS files to CSS"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1-source-artifact"
  copyrightText: "Copyright (c) 2016 Tyler Kellen"
  downloadLocation: "https://registry.npmjs.org/grunt-contrib-less/-/grunt-contrib-less-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-less@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-less#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-less"
  summary: "Compile LESS files to CSS"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  copyrightText: "Copyright (c) 2013-2015 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-uglify@0.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-uglify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-contrib-uglify"
  summary: "Minify files with UglifyJS"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2-vcs"
  copyrightText: "Copyright (c) 2013-2015 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-contrib-uglify.git@6e7ff8233562198054d908323f7112fc8e897d8d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-uglify@0.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-uglify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-uglify"
  summary: "Minify files with UglifyJS"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2-source-artifact"
  copyrightText: "Copyright (c) 2013-2015 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-contrib-uglify/-/grunt-contrib-uglify-0.9.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-uglify@0.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-uglify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-uglify"
  summary: "Minify files with UglifyJS"
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  copyrightText: "Copyright (c) 2012, 2014 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-watch@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-watch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-contrib-watch"
  summary: "Run predefined tasks whenever watched file patterns are added, changed\
    \ or deleted."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1-vcs"
  copyrightText: "Copyright (c) 2012, 2014 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-contrib-watch.git@c190351f5262fc6b6c6a1479c990adedb18d629d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-watch@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-watch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-watch"
  summary: "Run predefined tasks whenever watched file patterns are added, changed\
    \ or deleted."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1-source-artifact"
  copyrightText: "Copyright (c) 2012, 2014 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-contrib-watch/-/grunt-contrib-watch-0.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-contrib-watch@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/gruntjs/grunt-contrib-watch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-contrib-watch"
  summary: "Run predefined tasks whenever watched file patterns are added, changed\
    \ or deleted."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-log@0.1.3"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-legacy-log"
  summary: "The Grunt 0.4.x logger."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3-vcs"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-legacy-log.git@acc975558bc5c2c0ee03d091b8e8f551b56f8c54"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-log@0.1.3"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-legacy-log"
  summary: "The Grunt 0.4.x logger."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3-source-artifact"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-legacy-log/-/grunt-legacy-log-0.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-log@0.1.3"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-legacy-log"
  summary: "The Grunt 0.4.x logger."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
  copyrightText: "Copyright (c) 2014-2015 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-log-utils@0.1.1"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-legacy-log-utils"
  summary: "Static methods for the Grunt 0.4.x logger."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1-vcs"
  copyrightText: "Copyright (c) 2014-2015 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-legacy-log-utils.git@3c1b595b6b11c27e7153d95960e64e7a49fe886e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-log-utils@0.1.1"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-legacy-log-utils"
  summary: "Static methods for the Grunt 0.4.x logger."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-legacy-log-utils/-/grunt-legacy-log-utils-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-log-utils@0.1.1"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-legacy-log-utils"
  summary: "Static methods for the Grunt 0.4.x logger."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-util@0.2.0"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "grunt-legacy-util"
  summary: "Some old grunt utils provided for backwards compatibility."
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0-vcs"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/gruntjs/grunt-legacy-util.git@621563dd8f6966af39546991bb8d710146430b79"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-util@0.2.0"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-legacy-util"
  summary: "Some old grunt utils provided for backwards compatibility."
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/grunt-legacy-util/-/grunt-legacy-util-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/grunt-legacy-util@0.2.0"
  filesAnalyzed: false
  homepage: "http://gruntjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "grunt-legacy-util"
  summary: "Some old grunt utils provided for backwards compatibility."
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-gzip-size-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gzip-size@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gzip-size"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gzip-size"
  summary: "Get the gzipped size of a string or buffer"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-gzip-size-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/gzip-size.git@709ef7e7670931e33975837c32b6f786d562342d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gzip-size@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gzip-size"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gzip-size"
  summary: "Get the gzipped size of a string or buffer"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-gzip-size-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/gzip-size/-/gzip-size-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gzip-size@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gzip-size"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gzip-size"
  summary: "Get the gzipped size of a string or buffer"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-schema-1.0.5"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-har-schema-1.0.5-vcs"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "git+https://github.com/ahmadnassri/har-schema.git@7dde6d47c93e82b6d7ef7514766d64c166de14d3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-har-schema-1.0.5-source-artifact"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "https://registry.npmjs.org/har-schema/-/har-schema-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-har-validator-4.2.1"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@4.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-NPM-har-validator-4.2.1-vcs"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "git+https://github.com/ahmadnassri/har-validator.git@06cb69e2da150de1643bfe511f0374f23b7a5b11"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@4.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-NPM-har-validator-4.2.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "https://registry.npmjs.org/har-validator/-/har-validator-4.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@4.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "4.2.1"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-vcs"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "git+https://github.com/tarruda/has.git@4edf96f2dec87ad6b6e68482e8f6d7c8eb7e07e6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-0.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-0.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-ansi.git@a6eff516cf0e36b491fd8a111910efab74d1a624"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-0.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-ansi/-/has-ansi-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-ansi.git@0722275e1bef139fcd09137da6e5550c3cd368b9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-hawk-3.1.3"
  copyrightText: "Copyright (c) 2009-2013 Jeff Mott\nCopyright (c) 2012-2014 Eran\
    \ Hammer <eran@hammer.io>\nCopyright (c) 2012-2014 Eran Hammer and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hawk@3.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hueniverse/hawk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "hawk"
  summary: "HTTP Hawk Authentication Scheme"
  versionInfo: "3.1.3"
- SPDXID: "SPDXRef-Package-NPM-hawk-3.1.3-vcs"
  copyrightText: "Copyright (c) 2009-2013 Jeff Mott\nCopyright (c) 2012-2014 Eran\
    \ Hammer <eran@hammer.io>\nCopyright (c) 2012-2014 Eran Hammer and other contributors"
  downloadLocation: "git+https://github.com/hueniverse/hawk.git@2f0b93b34ed9b0ebc865838ef70c6a4035591430"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hawk@3.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hueniverse/hawk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hawk"
  summary: "HTTP Hawk Authentication Scheme"
  versionInfo: "3.1.3"
- SPDXID: "SPDXRef-Package-NPM-hawk-3.1.3-source-artifact"
  copyrightText: "Copyright (c) 2009-2013 Jeff Mott\nCopyright (c) 2012-2014 Eran\
    \ Hammer <eran@hammer.io>\nCopyright (c) 2012-2014 Eran Hammer and other contributors"
  downloadLocation: "https://registry.npmjs.org/hawk/-/hawk-3.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hawk@3.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hueniverse/hawk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hawk"
  summary: "HTTP Hawk Authentication Scheme"
  versionInfo: "3.1.3"
- SPDXID: "SPDXRef-Package-NPM-hoek-2.16.3"
  copyrightText: "Copyright (c) 2011 Yahoo Inc.\nCopyright (c) 2011-2014 Walmart and\
    \ other contributors\ncopyright (c) 2013 Jake Luer, jake@alogicalparadox.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hoek@2.16.3"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/hoek#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "hoek"
  summary: "General purpose node utilities"
  versionInfo: "2.16.3"
- SPDXID: "SPDXRef-Package-NPM-hoek-2.16.3-vcs"
  copyrightText: "Copyright (c) 2011 Yahoo Inc.\nCopyright (c) 2011-2014 Walmart and\
    \ other contributors\ncopyright (c) 2013 Jake Luer, jake@alogicalparadox.com"
  downloadLocation: "git+https://github.com/hapijs/hoek.git@20f36e85616264d4b73a64a374803175213a9121"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hoek@2.16.3"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/hoek#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hoek"
  summary: "General purpose node utilities"
  versionInfo: "2.16.3"
- SPDXID: "SPDXRef-Package-NPM-hoek-2.16.3-source-artifact"
  copyrightText: "Copyright (c) 2011 Yahoo Inc.\nCopyright (c) 2011-2014 Walmart and\
    \ other contributors\ncopyright (c) 2013 Jake Luer, jake@alogicalparadox.com"
  downloadLocation: "https://registry.npmjs.org/hoek/-/hoek-2.16.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hoek@2.16.3"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/hoek#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hoek"
  summary: "General purpose node utilities"
  versionInfo: "2.16.3"
- SPDXID: "SPDXRef-Package-NPM-hooker-0.2.3"
  copyrightText: "Copyright (c) 2012 Cowboy Ben Alman"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hooker@0.2.3"
  filesAnalyzed: false
  homepage: "http://github.com/cowboy/javascript-hooker"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "hooker"
  summary: "Monkey-patch (hook) functions for debugging and stuff."
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-hooker-0.2.3-vcs"
  copyrightText: "Copyright (c) 2012 Cowboy Ben Alman"
  downloadLocation: "git+https://github.com/cowboy/javascript-hooker.git@0b13af69b8d92c59908f60f98eaea15208ca520c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hooker@0.2.3"
  filesAnalyzed: false
  homepage: "http://github.com/cowboy/javascript-hooker"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hooker"
  summary: "Monkey-patch (hook) functions for debugging and stuff."
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-hooker-0.2.3-source-artifact"
  copyrightText: "Copyright (c) 2012 Cowboy Ben Alman"
  downloadLocation: "https://registry.npmjs.org/hooker/-/hooker-0.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hooker@0.2.3"
  filesAnalyzed: false
  homepage: "http://github.com/cowboy/javascript-hooker"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hooker"
  summary: "Monkey-patch (hook) functions for debugging and stuff."
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.9"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.9"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.9"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.9-vcs"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "git+https://github.com/npm/hosted-git-info.git@8d4b3697d79bcd89cdb36d1db165e3696c783a01"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.9"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.9"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.9-source-artifact"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.9"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.9"
- SPDXID: "SPDXRef-Package-NPM-http-errors-1.3.1"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-errors@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/http-errors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "http-errors"
  summary: "Create HTTP error objects"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-http-errors-1.3.1-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "git+https://github.com/jshttp/http-errors.git@89a8502b40d5dd42da2908f265275e2eeb8d0699"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-errors@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/http-errors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-errors"
  summary: "Create HTTP error objects"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-http-errors-1.3.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/http-errors/-/http-errors-1.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-errors@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/http-errors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-errors"
  summary: "Create HTTP error objects"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-http-signature.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/http-signature/-/http-signature-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.2.11"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.2.11"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.2.11-vcs"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "git+https://github.com/ashtuchkin/iconv-lite.git@f147af93241869b7d1e9cc041ae31e63a53d0331"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.2.11"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.2.11-source-artifact"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.2.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.2.11"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.2.11"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.11"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.11"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.11"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.11-vcs"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "git+https://github.com/ashtuchkin/iconv-lite.git@e285b7c31eb0406cf5a8e3e09bc16fbd2786360f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.11"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.11"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.11-source-artifact"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.11"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.11"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.13"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.13"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.13"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.13-vcs"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "git+https://github.com/ashtuchkin/iconv-lite.git@f5ec51b1e7dd1477a3570824960641eebdc5fbc6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.13"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.13"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.13-source-artifact"
  copyrightText: "(c) 2011 Baidu /duty/' E1OAdegUPECdeg+-OPA http://www.miibeian.gov.cn\n\
    (c) ICPO$?030173oA src http://gimg.baidu.com/img/gs.gif\nCopyright (c) 2011 Alexander\
    \ Shtuchkin"
  downloadLocation: "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.13.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.13"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.13"
- SPDXID: "SPDXRef-Package-NPM-image-size-0.5.5"
  copyrightText: "Copyright (c) 2017 Aditya Yadav, http://netroy.in"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/image-size@0.5.5"
  filesAnalyzed: false
  homepage: "https://github.com/image-size/image-size#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "image-size"
  summary: "get dimensions of any image file"
  versionInfo: "0.5.5"
- SPDXID: "SPDXRef-Package-NPM-image-size-0.5.5-vcs"
  copyrightText: "Copyright (c) 2017 Aditya Yadav, http://netroy.in"
  downloadLocation: "git+https://github.com/image-size/image-size.git@77ff58653f18c2ea3c9e176a6dee663beacb4889"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/image-size@0.5.5"
  filesAnalyzed: false
  homepage: "https://github.com/image-size/image-size#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "image-size"
  summary: "get dimensions of any image file"
  versionInfo: "0.5.5"
- SPDXID: "SPDXRef-Package-NPM-image-size-0.5.5-source-artifact"
  copyrightText: "Copyright (c) 2017 Aditya Yadav, http://netroy.in"
  downloadLocation: "https://registry.npmjs.org/image-size/-/image-size-0.5.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/image-size@0.5.5"
  filesAnalyzed: false
  homepage: "https://github.com/image-size/image-size#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "image-size"
  summary: "get dimensions of any image file"
  versionInfo: "0.5.5"
- SPDXID: "SPDXRef-Package-NPM-indent-string-2.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/indent-string@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/indent-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "indent-string"
  summary: "Indent each line in a string"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-indent-string-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/indent-string.git@649f7560df23a8fd8ea330bead5d7d0058efc6b6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/indent-string@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/indent-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "indent-string"
  summary: "Indent each line in a string"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-indent-string-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/indent-string@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/indent-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "indent-string"
  summary: "Indent each line in a string"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-inherits-1.0.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "A tiny simple way to do classic inheritance in js"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-inherits-1.0.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/inherits.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "A tiny simple way to do classic inheritance in js"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-inherits-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "A tiny simple way to do classic inheritance in js"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/inherits.git@9a2c29400c6d491e0b7beefe0c32efa3b462545d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1-vcs"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "git+https://github.com/qix-/node-is-arrayish.git@53f22aa6ce557d7d31a3d1152a590a2df220df9d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1-source-artifact"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-1.1.6"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@1.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "1.1.6"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-1.1.6-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/is-buffer.git@1e84e7ee31cf6b660b12500f3111a05501da387f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@1.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "1.1.6"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-1.1.6-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@1.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "1.1.6"
- SPDXID: "SPDXRef-Package-NPM-is-core-module-2.11.0"
  copyrightText: "Copyright (c) 2014 Dave Justice"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-core-module@2.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/is-core-module"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-core-module"
  summary: "Is this specifier a node.js core module?"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-NPM-is-core-module-2.11.0-vcs"
  copyrightText: "Copyright (c) 2014 Dave Justice"
  downloadLocation: "git+https://github.com/inspect-js/is-core-module.git@12cfb2d3bcefc3de19264b3a39208d29f5432516"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-core-module@2.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/is-core-module"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-core-module"
  summary: "Is this specifier a node.js core module?"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-NPM-is-core-module-2.11.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Dave Justice"
  downloadLocation: "https://registry.npmjs.org/is-core-module/-/is-core-module-2.11.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-core-module@2.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/is-core-module"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-core-module"
  summary: "Is this specifier a node.js core module?"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-NPM-is-finite-1.1.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-finite@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-finite#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-finite"
  summary: "ES2015 Number.isFinite() ponyfill"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-finite-1.1.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-finite.git@1001187ed027a76051c066408358e769fb61786e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-finite@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-finite#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-finite"
  summary: "ES2015 Number.isFinite() ponyfill"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-finite-1.1.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-finite/-/is-finite-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-finite@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-finite#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-finite"
  summary: "ES2015 Number.isFinite() ponyfill"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/hughsk/is-typedarray.git@0617cfa871686cf541af62b144f130488f44f6fe"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  copyrightText: "Copyright (c) 2014 Wei Fanzhe"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1-vcs"
  copyrightText: "Copyright (c) 2014 Wei Fanzhe"
  downloadLocation: "git+https://github.com/wayfind/is-utf8.git@709df7202f9c3f93cdc2463b352dd80d8de9ce0b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Wei Fanzhe"
  downloadLocation: "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-0.0.1"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-0.0.1-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/isarray.git@69ba56c0890c19aeee26632427109cc7c6716983"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-0.0.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-1.0.0"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-isarray-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/isarray.git@2a23a281f369e9ae06394c0fb4d2381355a6ba33"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-isarray-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2"
  copyrightText: "Copyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2-vcs"
  copyrightText: "Copyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)"
  downloadLocation: "git+https://github.com/rvagg/isstream.git@cd39cba6da939b4fc9110825203adc506422c3dc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)"
  downloadLocation: "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-2.0.5"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011, 2013 by Vitaly Puzrin\nCopyright (c) 2011-2012 Ariya\
    \ Hidayat <ariya.hidayat@gmail.com>\nCopyright (c) 2012 Arpad Borsos <arpad.borsos@googlemail.com>\n\
    Copyright (c) 2012 Joost-Wim Boekesteijn <joost-wim@boekesteijn.nl>\nCopyright\
    \ (c) 2012 Kris Kowal <kris.kowal@cixar.com>\nCopyright (c) 2012 Mathias Bynens\
    \ <mathias@qiwi.be>\nCopyright (c) 2012 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright 2012 Kit Cambridge http://kit.mit-license.org"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-2.0.5-vcs"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011, 2013 by Vitaly Puzrin\nCopyright (c) 2011-2012 Ariya\
    \ Hidayat <ariya.hidayat@gmail.com>\nCopyright (c) 2012 Arpad Borsos <arpad.borsos@googlemail.com>\n\
    Copyright (c) 2012 Joost-Wim Boekesteijn <joost-wim@boekesteijn.nl>\nCopyright\
    \ (c) 2012 Kris Kowal <kris.kowal@cixar.com>\nCopyright (c) 2012 Mathias Bynens\
    \ <mathias@qiwi.be>\nCopyright (c) 2012 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright 2012 Kit Cambridge http://kit.mit-license.org"
  downloadLocation: "git+https://github.com/nodeca/js-yaml.git@683d40c04bccd382528931894a471166b99c4689"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-2.0.5-source-artifact"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011, 2013 by Vitaly Puzrin\nCopyright (c) 2011-2012 Ariya\
    \ Hidayat <ariya.hidayat@gmail.com>\nCopyright (c) 2012 Arpad Borsos <arpad.borsos@googlemail.com>\n\
    Copyright (c) 2012 Joost-Wim Boekesteijn <joost-wim@boekesteijn.nl>\nCopyright\
    \ (c) 2012 Kris Kowal <kris.kowal@cixar.com>\nCopyright (c) 2012 Mathias Bynens\
    \ <mathias@qiwi.be>\nCopyright (c) 2012 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright 2012 Kit Cambridge http://kit.mit-license.org"
  downloadLocation: "https://registry.npmjs.org/js-yaml/-/js-yaml-2.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1"
  copyrightText: "Copyright (c) 2003-2009 Tom Wu"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1-vcs"
  copyrightText: "Copyright (c) 2003-2009 Tom Wu"
  downloadLocation: "git+https://github.com/andyperlitch/jsbn.git@ed7e7ab56bd2b8a4447bc0c1ef08548b6dad89a2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2003-2009 Tom Wu"
  downloadLocation: "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.4.0"
  copyrightText: "Copyright (c) 2003-2004 Lawrence E. Rosen\nCopyright (c) 2005-2015\
    \ The Dojo Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "AFL-2.1 OR BSD-3-Clause"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.4.0-vcs"
  copyrightText: "Copyright (c) 2003-2004 Lawrence E. Rosen\nCopyright (c) 2005-2015\
    \ The Dojo Foundation"
  downloadLocation: "git+ssh://github.com/kriszyp/json-schema.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.4.0-source-artifact"
  copyrightText: "Copyright (c) 2003-2004 Lawrence E. Rosen\nCopyright (c) 2005-2015\
    \ The Dojo Foundation"
  downloadLocation: "https://registry.npmjs.org/json-schema/-/json-schema-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stable-stringify@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "json-stable-stringify"
  summary: "deterministic JSON.stringify() with custom sorting to get deterministic\
    \ hashes from stringified results"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/json-stable-stringify.git@4fdc427435d546aba5c6d272d6edd27411388625"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stable-stringify@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stable-stringify"
  summary: "deterministic JSON.stringify() with custom sorting to get deterministic\
    \ hashes from stringified results"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/json-stable-stringify/-/json-stable-stringify-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stable-stringify@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stable-stringify"
  summary: "deterministic JSON.stringify() with custom sorting to get deterministic\
    \ hashes from stringified results"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/json-stringify-safe.git@3890dceab3ad14f8701e38ca74f38276abc76de5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-jsonify-0.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsonify@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/jsonify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "LicenseRef-scancode-public-domain-disclaimer"
  name: "jsonify"
  summary: "JSON without touching any globals"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-jsonify-0.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/jsonify.git@d26197e6c6357c9f3deec052a97056359f0497ac"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsonify@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/jsonify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsonify"
  summary: "JSON without touching any globals"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-jsonify-0.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/jsonify/-/jsonify-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsonify@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/jsonify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsonify"
  summary: "JSON without touching any globals"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.2"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.2-vcs"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "git+https://github.com/joyent/node-jsprim.git@5c8475fd44567e459b1b73b82f2669c39a0642b8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.2-source-artifact"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/jsprim/-/jsprim-1.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.2"
- SPDXID: "SPDXRef-Package-NPM-kind-of-3.2.2"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/kind-of@3.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/kind-of"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "kind-of"
  summary: "Get the native type of a value."
  versionInfo: "3.2.2"
- SPDXID: "SPDXRef-Package-NPM-kind-of-3.2.2-vcs"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/kind-of.git@0ffe67cf12f5396047c1bacf04232b7deeb24063"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/kind-of@3.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/kind-of"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "kind-of"
  summary: "Get the native type of a value."
  versionInfo: "3.2.2"
- SPDXID: "SPDXRef-Package-NPM-kind-of-3.2.2-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/kind-of/-/kind-of-3.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/kind-of@3.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/kind-of"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "kind-of"
  summary: "Get the native type of a value."
  versionInfo: "3.2.2"
- SPDXID: "SPDXRef-Package-NPM-lazy-cache-1.0.4"
  copyrightText: "Copyright (c) 2015-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lazy-cache@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/lazy-cache"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lazy-cache"
  summary: "Cache requires to be lazy-loaded when needed."
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-lazy-cache-1.0.4-vcs"
  copyrightText: "Copyright (c) 2015-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/lazy-cache.git@d081ffbda147391083a6856fafb1c5d82308f80c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lazy-cache@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/lazy-cache"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lazy-cache"
  summary: "Cache requires to be lazy-loaded when needed."
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-lazy-cache-1.0.4-source-artifact"
  copyrightText: "Copyright (c) 2015-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/lazy-cache/-/lazy-cache-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lazy-cache@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/lazy-cache"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lazy-cache"
  summary: "Cache requires to be lazy-loaded when needed."
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-less-2.7.3"
  copyrightText: "Copyright (c) 2006-2009 Hampton Catlin, Natalie Weizenbaum, and\
    \ Chris Eppstein http://sass-lang.com\nCopyright (c) 2009 < grunt.template.today\
    \ 'yyyy >\nCopyright (c) 2009-2016 Alexis Sellier (http://cloudhead.io) & The\
    \ Core Less Team\nCopyright (c) 2009-2017 Alexis Sellier <self@cloudhead.net>\n\
    Copyright (c) 2011-2014 Ivan De Marino <http://ivandemarino.me>\nCopyright (c)\
    \ 2014 Alex Treppass <http://alextreppass.co.uk>\nCopyright 2011 Mozilla Foundation\
    \ and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/less@2.7.3"
  filesAnalyzed: false
  homepage: "http://lesscss.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "less"
  summary: "Leaner CSS"
  versionInfo: "2.7.3"
- SPDXID: "SPDXRef-Package-NPM-less-2.7.3-vcs"
  copyrightText: "Copyright (c) 2006-2009 Hampton Catlin, Natalie Weizenbaum, and\
    \ Chris Eppstein http://sass-lang.com\nCopyright (c) 2009 < grunt.template.today\
    \ 'yyyy >\nCopyright (c) 2009-2016 Alexis Sellier (http://cloudhead.io) & The\
    \ Core Less Team\nCopyright (c) 2009-2017 Alexis Sellier <self@cloudhead.net>\n\
    Copyright (c) 2011-2014 Ivan De Marino <http://ivandemarino.me>\nCopyright (c)\
    \ 2014 Alex Treppass <http://alextreppass.co.uk>\nCopyright 2011 Mozilla Foundation\
    \ and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "git+https://github.com/less/less.js.git@60a5c3bd1f6807615d017a5019031da47e1f480d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/less@2.7.3"
  filesAnalyzed: false
  homepage: "http://lesscss.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "less"
  summary: "Leaner CSS"
  versionInfo: "2.7.3"
- SPDXID: "SPDXRef-Package-NPM-less-2.7.3-source-artifact"
  copyrightText: "Copyright (c) 2006-2009 Hampton Catlin, Natalie Weizenbaum, and\
    \ Chris Eppstein http://sass-lang.com\nCopyright (c) 2009 < grunt.template.today\
    \ 'yyyy >\nCopyright (c) 2009-2016 Alexis Sellier (http://cloudhead.io) & The\
    \ Core Less Team\nCopyright (c) 2009-2017 Alexis Sellier <self@cloudhead.net>\n\
    Copyright (c) 2011-2014 Ivan De Marino <http://ivandemarino.me>\nCopyright (c)\
    \ 2014 Alex Treppass <http://alextreppass.co.uk>\nCopyright 2011 Mozilla Foundation\
    \ and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "https://registry.npmjs.org/less/-/less-2.7.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/less@2.7.3"
  filesAnalyzed: false
  homepage: "http://lesscss.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "less"
  summary: "Leaner CSS"
  versionInfo: "2.7.3"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-1.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/load-json-file.git@115157a417380d3160da418d4ff25bb33b0051eb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-1.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-lodash-0.9.2"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2009-2012\
    \ Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c) 2010-2012 Jeremy Ashkenas,\
    \ DocumentCloud Inc. Backbone\n(c) 2012 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright (c) 2006 Yahoo! Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c)\
    \ 2008 Ariel Flesler\nCopyright (c) 2009-2012 Jeremy Ashkenas, DocumentCloud\n\
    Copyright (c) 2010-2011 Marcus Westin\nCopyright (c) 2010-2012 The Dojo Foundation\n\
    Copyright (c) 2012 John Resig, Jorn Zaefferer\nCopyright (c) 2012 Kit Cambridge.\
    \ http://kitcambridge.github.com\nCopyright 2009 The Dojo Foundation\nCopyright\
    \ 2010-2012 John-David Dalton <http://allyoucanleet.com/>\nCopyright 2010-2012\
    \ Mathias Bynens <http://mathiasbynens.be/>\nCopyright 2010-2012 Mathias Bynens\
    \ <http://mths.be/>\nCopyright 2011-2012 John-David Dalton\nCopyright 2012 Kit\
    \ Cambridge http://kit.mit-license.org\nCopyright 2012 jQuery Foundation and other\
    \ contributors\nCopyright 2012 jQuery Foundation and other contributors http://jquery.com\n\
    copyright 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. <http://documentcloud.github.com/underscore>\n\
    copyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@0.9.2"
  filesAnalyzed: false
  homepage: "http://lodash.com"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ and extras."
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-0.9.2-vcs"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2009-2012\
    \ Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c) 2010-2012 Jeremy Ashkenas,\
    \ DocumentCloud Inc. Backbone\n(c) 2012 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright (c) 2006 Yahoo! Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c)\
    \ 2008 Ariel Flesler\nCopyright (c) 2009-2012 Jeremy Ashkenas, DocumentCloud\n\
    Copyright (c) 2010-2011 Marcus Westin\nCopyright (c) 2010-2012 The Dojo Foundation\n\
    Copyright (c) 2012 John Resig, Jorn Zaefferer\nCopyright (c) 2012 Kit Cambridge.\
    \ http://kitcambridge.github.com\nCopyright 2009 The Dojo Foundation\nCopyright\
    \ 2010-2012 John-David Dalton <http://allyoucanleet.com/>\nCopyright 2010-2012\
    \ Mathias Bynens <http://mathiasbynens.be/>\nCopyright 2010-2012 Mathias Bynens\
    \ <http://mths.be/>\nCopyright 2011-2012 John-David Dalton\nCopyright 2012 Kit\
    \ Cambridge http://kit.mit-license.org\nCopyright 2012 jQuery Foundation and other\
    \ contributors\nCopyright 2012 jQuery Foundation and other contributors http://jquery.com\n\
    copyright 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. <http://documentcloud.github.com/underscore>\n\
    copyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@c65250ec39a536e1044dfd970dd050144ac647a4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@0.9.2"
  filesAnalyzed: false
  homepage: "http://lodash.com"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ and extras."
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-0.9.2-source-artifact"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2009-2012\
    \ Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c) 2010-2012 Jeremy Ashkenas,\
    \ DocumentCloud Inc. Backbone\n(c) 2012 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright (c) 2006 Yahoo! Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c)\
    \ 2008 Ariel Flesler\nCopyright (c) 2009-2012 Jeremy Ashkenas, DocumentCloud\n\
    Copyright (c) 2010-2011 Marcus Westin\nCopyright (c) 2010-2012 The Dojo Foundation\n\
    Copyright (c) 2012 John Resig, Jorn Zaefferer\nCopyright (c) 2012 Kit Cambridge.\
    \ http://kitcambridge.github.com\nCopyright 2009 The Dojo Foundation\nCopyright\
    \ 2010-2012 John-David Dalton <http://allyoucanleet.com/>\nCopyright 2010-2012\
    \ Mathias Bynens <http://mathiasbynens.be/>\nCopyright 2010-2012 Mathias Bynens\
    \ <http://mths.be/>\nCopyright 2011-2012 John-David Dalton\nCopyright 2012 Kit\
    \ Cambridge http://kit.mit-license.org\nCopyright 2012 jQuery Foundation and other\
    \ contributors\nCopyright 2012 jQuery Foundation and other contributors http://jquery.com\n\
    copyright 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. <http://documentcloud.github.com/underscore>\n\
    copyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-0.9.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@0.9.2"
  filesAnalyzed: false
  homepage: "http://lodash.com"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ and extras."
  versionInfo: "0.9.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-1.0.2"
  copyrightText: "(c) 2009-2013 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010-2012 Jeremy Ashkenas, DocumentCloud Inc. Backbone\nCopyright (c) 2006 Yahoo!\
    \ Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c) 2008 Ariel Flesler\nCopyright\
    \ (c) 2009-2013 Jeremy Ashkenas, DocumentCloud\nCopyright (c) 2010-2011 Marcus\
    \ Westin\nCopyright (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2012 Kit\
    \ Cambridge. http://kitcambridge.github.com\nCopyright 2009 The Dojo Foundation\n\
    Copyright 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.\nCopyright 2010-2013 John-David\
    \ Dalton <http://allyoucanleet.com/>\nCopyright 2010-2013 Mathias Bynens <http://mathiasbynens.be/>\n\
    Copyright 2010-2013 Mathias Bynens <http://mths.be/>\nCopyright 2011-2013 John-David\
    \ Dalton\nCopyright 2012 Kit Cambridge http://kit.mit-license.org\nCopyright 2012\
    \ jQuery Foundation and other contributors\nCopyright 2012 jQuery Foundation and\
    \ other contributors http://jquery.com\nCopyright 2012-2013 The Dojo Foundation\
    \ <http://dojofoundation.org/>\ncopyright 2009-2013 Jeremy Ashkenas, DocumentCloud\
    \ Inc. <http://underscorejs.org/>\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@1.0.2"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ and extras."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-1.0.2-vcs"
  copyrightText: "(c) 2009-2013 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010-2012 Jeremy Ashkenas, DocumentCloud Inc. Backbone\nCopyright (c) 2006 Yahoo!\
    \ Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c) 2008 Ariel Flesler\nCopyright\
    \ (c) 2009-2013 Jeremy Ashkenas, DocumentCloud\nCopyright (c) 2010-2011 Marcus\
    \ Westin\nCopyright (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2012 Kit\
    \ Cambridge. http://kitcambridge.github.com\nCopyright 2009 The Dojo Foundation\n\
    Copyright 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.\nCopyright 2010-2013 John-David\
    \ Dalton <http://allyoucanleet.com/>\nCopyright 2010-2013 Mathias Bynens <http://mathiasbynens.be/>\n\
    Copyright 2010-2013 Mathias Bynens <http://mths.be/>\nCopyright 2011-2013 John-David\
    \ Dalton\nCopyright 2012 Kit Cambridge http://kit.mit-license.org\nCopyright 2012\
    \ jQuery Foundation and other contributors\nCopyright 2012 jQuery Foundation and\
    \ other contributors http://jquery.com\nCopyright 2012-2013 The Dojo Foundation\
    \ <http://dojofoundation.org/>\ncopyright 2009-2013 Jeremy Ashkenas, DocumentCloud\
    \ Inc. <http://underscorejs.org/>\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@7467a2a2eb8493acdba518e25afab3266560240f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@1.0.2"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ and extras."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-1.0.2-source-artifact"
  copyrightText: "(c) 2009-2013 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010-2012 Jeremy Ashkenas, DocumentCloud Inc. Backbone\nCopyright (c) 2006 Yahoo!\
    \ Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c) 2008 Ariel Flesler\nCopyright\
    \ (c) 2009-2013 Jeremy Ashkenas, DocumentCloud\nCopyright (c) 2010-2011 Marcus\
    \ Westin\nCopyright (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2012 Kit\
    \ Cambridge. http://kitcambridge.github.com\nCopyright 2009 The Dojo Foundation\n\
    Copyright 2009-2013 Jeremy Ashkenas, DocumentCloud Inc.\nCopyright 2010-2013 John-David\
    \ Dalton <http://allyoucanleet.com/>\nCopyright 2010-2013 Mathias Bynens <http://mathiasbynens.be/>\n\
    Copyright 2010-2013 Mathias Bynens <http://mths.be/>\nCopyright 2011-2013 John-David\
    \ Dalton\nCopyright 2012 Kit Cambridge http://kit.mit-license.org\nCopyright 2012\
    \ jQuery Foundation and other contributors\nCopyright 2012 jQuery Foundation and\
    \ other contributors http://jquery.com\nCopyright 2012-2013 The Dojo Foundation\
    \ <http://dojofoundation.org/>\ncopyright 2009-2013 Jeremy Ashkenas, DocumentCloud\
    \ Inc. <http://underscorejs.org/>\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@1.0.2"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ and extras."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-2.4.2"
  copyrightText: "(c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c)\
    \ 2011-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Backbone\n(c) copyright 2010-2013 B Cavalier & J Hann\nCopyright (c) 2003-2004\
    \ Lawrence E. Rosen\nCopyright (c) 2005-2013 The Dojo Foundation\nCopyright (c)\
    \ 2006 Yahoo! Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c) 2008 Ariel\
    \ Flesler\nCopyright (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright (c) 2010-2012\
    \ The Dojo Foundation\nCopyright (c) 2010-2013 Brian Cavalier and John Hann\n\
    Copyright (c) 2010-2013 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo\
    \ Foundation\nCopyright 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright 2010-2013 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright 2010-2013 Mathias Bynens <http://mathiasbynens.be/>\nCopyright 2010-2013\
    \ Mathias Bynens <http://mths.be/>\nCopyright 2011-2013 John-David Dalton\nCopyright\
    \ 2012 jQuery Foundation and other contributors\nCopyright 2012-2013 The Dojo\
    \ Foundation <http://dojofoundation.org/>\nCopyright 2012-2013 jQuery Foundation\
    \ and other contributors http://jquery.com\ncopyright 2009-2013 Jeremy Ashkenas,\
    \ DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\
    copyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@2.4.2"
  filesAnalyzed: false
  homepage: "http://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ & extras."
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-2.4.2-vcs"
  copyrightText: "(c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c)\
    \ 2011-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Backbone\n(c) copyright 2010-2013 B Cavalier & J Hann\nCopyright (c) 2003-2004\
    \ Lawrence E. Rosen\nCopyright (c) 2005-2013 The Dojo Foundation\nCopyright (c)\
    \ 2006 Yahoo! Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c) 2008 Ariel\
    \ Flesler\nCopyright (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright (c) 2010-2012\
    \ The Dojo Foundation\nCopyright (c) 2010-2013 Brian Cavalier and John Hann\n\
    Copyright (c) 2010-2013 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo\
    \ Foundation\nCopyright 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright 2010-2013 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright 2010-2013 Mathias Bynens <http://mathiasbynens.be/>\nCopyright 2010-2013\
    \ Mathias Bynens <http://mths.be/>\nCopyright 2011-2013 John-David Dalton\nCopyright\
    \ 2012 jQuery Foundation and other contributors\nCopyright 2012-2013 The Dojo\
    \ Foundation <http://dojofoundation.org/>\nCopyright 2012-2013 jQuery Foundation\
    \ and other contributors http://jquery.com\ncopyright 2009-2013 Jeremy Ashkenas,\
    \ DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\
    copyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@29a7bc4c817cbd87c8f5940fbeff32e879457b89"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@2.4.2"
  filesAnalyzed: false
  homepage: "http://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ & extras."
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-2.4.2-source-artifact"
  copyrightText: "(c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c)\
    \ 2011-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Backbone\n(c) copyright 2010-2013 B Cavalier & J Hann\nCopyright (c) 2003-2004\
    \ Lawrence E. Rosen\nCopyright (c) 2005-2013 The Dojo Foundation\nCopyright (c)\
    \ 2006 Yahoo! Inc.\nCopyright (c) 2007 Parakey Inc.\nCopyright (c) 2008 Ariel\
    \ Flesler\nCopyright (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright (c) 2010-2012\
    \ The Dojo Foundation\nCopyright (c) 2010-2013 Brian Cavalier and John Hann\n\
    Copyright (c) 2010-2013 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo\
    \ Foundation\nCopyright 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright 2010-2013 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright 2010-2013 Mathias Bynens <http://mathiasbynens.be/>\nCopyright 2010-2013\
    \ Mathias Bynens <http://mths.be/>\nCopyright 2011-2013 John-David Dalton\nCopyright\
    \ 2012 jQuery Foundation and other contributors\nCopyright 2012-2013 The Dojo\
    \ Foundation <http://dojofoundation.org/>\nCopyright 2012-2013 jQuery Foundation\
    \ and other contributors http://jquery.com\ncopyright 2009-2013 Jeremy Ashkenas,\
    \ DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>\n\
    copyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-2.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@2.4.2"
  filesAnalyzed: false
  homepage: "http://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "A utility library delivering consistency, customization, performance,\
    \ & extras."
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-lodash-3.10.1"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2015 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2015 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright 2010-2015 Mathias Bynens <http://mathiasbynens.be/>\nCopyright\
    \ 2010-2015 Mathias Bynens <http://mths.be/>\nCopyright 2012-2015 The Dojo Foundation\
    \ <http://dojofoundation.org/>\ncopyright 2009-2015 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors <http://underscorejs.org/>\ncopyright\
    \ Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@3.10.1"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "The modern build of lodash modular utilities."
  versionInfo: "3.10.1"
- SPDXID: "SPDXRef-Package-NPM-lodash-3.10.1-vcs"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2015 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2015 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright 2010-2015 Mathias Bynens <http://mathiasbynens.be/>\nCopyright\
    \ 2010-2015 Mathias Bynens <http://mths.be/>\nCopyright 2012-2015 The Dojo Foundation\
    \ <http://dojofoundation.org/>\ncopyright 2009-2015 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors <http://underscorejs.org/>\ncopyright\
    \ Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@dfbd78f71de0550068fc82ce6e013d443e5037d7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@3.10.1"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "The modern build of lodash modular utilities."
  versionInfo: "3.10.1"
- SPDXID: "SPDXRef-Package-NPM-lodash-3.10.1-source-artifact"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2015 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2015 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright 2010-2015 Mathias Bynens <http://mathiasbynens.be/>\nCopyright\
    \ 2010-2015 Mathias Bynens <http://mths.be/>\nCopyright 2012-2015 The Dojo Foundation\
    \ <http://dojofoundation.org/>\ncopyright 2009-2015 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors <http://underscorejs.org/>\ncopyright\
    \ Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-3.10.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@3.10.1"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "The modern build of lodash modular utilities."
  versionInfo: "3.10.1"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.21"
  copyrightText: "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\n\
    copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ <http://underscorejs.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.21"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.21"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.21-vcs"
  copyrightText: "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\n\
    copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ <http://underscorejs.org/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@c6e281b878b315c7a10d90f9c2af4cdb112d9625"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.21"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.21"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.21-source-artifact"
  copyrightText: "Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright OpenJS Foundation and other contributors <https://openjsf.org/>\n\
    copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ <http://underscorejs.org/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-4.17.21.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.21"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.21"
- SPDXID: "SPDXRef-Package-NPM-longest-1.0.1"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/longest@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/longest"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "longest"
  summary: "Get the longest item in an array."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-longest-1.0.1-vcs"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/longest.git@99d9d8257584500aedaea54427a828197c452b0a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/longest@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/longest"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "longest"
  summary: "Get the longest item in an array."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-longest-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/longest/-/longest-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/longest@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/longest"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "longest"
  summary: "Get the longest item in an array."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/loud-rejection@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/loud-rejection#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "loud-rejection"
  summary: "Make unhandled promise rejections fail loudly instead of the default silent\
    \ fail"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-loud-rejection-1.6.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/loud-rejection.git@174a9b37f0de7ed255526b506f37961f9f74bd4d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/loud-rejection@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/loud-rejection#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "loud-rejection"
  summary: "Make unhandled promise rejections fail loudly instead of the default silent\
    \ fail"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-loud-rejection-1.6.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/loud-rejection@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/loud-rejection#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "loud-rejection"
  summary: "Make unhandled promise rejections fail loudly instead of the default silent\
    \ fail"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-lru-cache-2.7.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lru-cache@2.7.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-lru-cache#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "lru-cache"
  summary: "A cache object that deletes the least-recently-used items."
  versionInfo: "2.7.3"
- SPDXID: "SPDXRef-Package-NPM-lru-cache-2.7.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-lru-cache.git@292048199f6d28b77fbe584279a1898e25e4c714"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lru-cache@2.7.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-lru-cache#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lru-cache"
  summary: "A cache object that deletes the least-recently-used items."
  versionInfo: "2.7.3"
- SPDXID: "SPDXRef-Package-NPM-lru-cache-2.7.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/lru-cache/-/lru-cache-2.7.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lru-cache@2.7.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-lru-cache#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lru-cache"
  summary: "A cache object that deletes the least-recently-used items."
  versionInfo: "2.7.3"
- SPDXID: "SPDXRef-Package-NPM-map-obj-1.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/map-obj"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "map-obj"
  summary: "Map object keys and values into a new object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-map-obj-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/map-obj.git@a4f2d49ae6b5f7c0e55130b49ab0412298b797bc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/map-obj"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-obj"
  summary: "Map object keys and values into a new object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-map-obj-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/map-obj"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-obj"
  summary: "Map object keys and values into a new object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-maxmin-1.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/maxmin@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/maxmin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "maxmin"
  summary: "Get a pretty output of the original, minified, gzipped size of a string\
    \ or buffer: 130 B → 91 B → 53 B (gzip)"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-maxmin-1.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/maxmin.git@140c69cd34e5ce3b44db5f7df5cdd7f621220c87"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/maxmin@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/maxmin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maxmin"
  summary: "Get a pretty output of the original, minified, gzipped size of a string\
    \ or buffer: 130 B → 91 B → 53 B (gzip)"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-maxmin-1.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/maxmin/-/maxmin-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/maxmin@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/maxmin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "maxmin"
  summary: "Get a pretty output of the original, minified, gzipped size of a string\
    \ or buffer: 130 B → 91 B → 53 B (gzip)"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-media-typer-0.3.0"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/media-typer@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/media-typer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "media-typer"
  summary: "Simple RFC 6838 media type parser and formatter"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-media-typer-0.3.0-vcs"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/media-typer.git@d49d41ffd0bb5a0655fa44a59df2ec0bfc835b16"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/media-typer@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/media-typer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "media-typer"
  summary: "Simple RFC 6838 media type parser and formatter"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-media-typer-0.3.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/media-typer@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/media-typer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "media-typer"
  summary: "Simple RFC 6838 media type parser and formatter"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-meow-3.7.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/meow@3.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/meow#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "meow"
  summary: "CLI app helper"
  versionInfo: "3.7.0"
- SPDXID: "SPDXRef-Package-NPM-meow-3.7.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/meow.git@9a5c90af79fb8f5f29c97e6b92b63f41e2df4f34"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/meow@3.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/meow#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "meow"
  summary: "CLI app helper"
  versionInfo: "3.7.0"
- SPDXID: "SPDXRef-Package-NPM-meow-3.7.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/meow@3.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/meow#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "meow"
  summary: "CLI app helper"
  versionInfo: "3.7.0"
- SPDXID: "SPDXRef-Package-NPM-method-override-2.3.10"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014 Douglas Christopher\
    \ Wilson <doug@somethingdoug.com>\nCopyright (c) 2014 Jonathan Ong\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/method-override@2.3.10"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/method-override#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "method-override"
  summary: "Override HTTP verbs"
  versionInfo: "2.3.10"
- SPDXID: "SPDXRef-Package-NPM-method-override-2.3.10-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014 Douglas Christopher\
    \ Wilson <doug@somethingdoug.com>\nCopyright (c) 2014 Jonathan Ong\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>"
  downloadLocation: "git+https://github.com/expressjs/method-override.git@ddfc7ccd42c468bfef54b7698d1c4acb85cce758"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/method-override@2.3.10"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/method-override#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "method-override"
  summary: "Override HTTP verbs"
  versionInfo: "2.3.10"
- SPDXID: "SPDXRef-Package-NPM-method-override-2.3.10-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014 Douglas Christopher\
    \ Wilson <doug@somethingdoug.com>\nCopyright (c) 2014 Jonathan Ong\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>"
  downloadLocation: "https://registry.npmjs.org/method-override/-/method-override-2.3.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/method-override@2.3.10"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/method-override#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "method-override"
  summary: "Override HTTP verbs"
  versionInfo: "2.3.10"
- SPDXID: "SPDXRef-Package-NPM-methods-1.1.2"
  copyrightText: "Copyright (c) 2013-2014 TJ Holowaychuk\nCopyright (c) 2013-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015-2016 Douglas Christopher\
    \ Wilson\nCopyright (c) 2015-2016 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/methods@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/methods"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "methods"
  summary: "HTTP methods that node supports"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-methods-1.1.2-vcs"
  copyrightText: "Copyright (c) 2013-2014 TJ Holowaychuk\nCopyright (c) 2013-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015-2016 Douglas Christopher\
    \ Wilson\nCopyright (c) 2015-2016 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/methods.git@25d257d913f1b94bd2d73581521ff72c81469140"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/methods@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/methods"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "methods"
  summary: "HTTP methods that node supports"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-methods-1.1.2-source-artifact"
  copyrightText: "Copyright (c) 2013-2014 TJ Holowaychuk\nCopyright (c) 2013-2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2015-2016 Douglas Christopher\
    \ Wilson\nCopyright (c) 2015-2016 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/methods@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/methods"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "methods"
  summary: "HTTP methods that node supports"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-mime-1.3.4"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.3.4"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.3.4"
- SPDXID: "SPDXRef-Package-NPM-mime-1.3.4-vcs"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "git+https://github.com/broofa/node-mime.git@1628f6e0187095009dcef4805c3a49706f137974"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.3.4"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.3.4"
- SPDXID: "SPDXRef-Package-NPM-mime-1.3.4-source-artifact"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "https://registry.npmjs.org/mime/-/mime-1.3.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.3.4"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.3.4"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0-vcs"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "git+https://github.com/broofa/node-mime.git@87b396e859aad0cea0845e706613d333c2b0bfdc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0-source-artifact"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.52.0"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015-2022 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015-2022 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.52.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.52.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.52.0-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015-2022 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015-2022 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/mime-db.git@ebb6bf92ea39d3168a50942295d5edfdcdce641a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.52.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.52.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.52.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015-2022 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015-2022 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.52.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.52.0"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.35"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.35"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.35"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.35-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/mime-types.git@ef932231c20e716ec27ea159c082322c3c485b66"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.35"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.35"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.35-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.35"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.35"
- SPDXID: "SPDXRef-Package-NPM-minimatch-0.2.14"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@0.2.14"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "0.2.14"
- SPDXID: "SPDXRef-Package-NPM-minimatch-0.2.14-vcs"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/minimatch.git@72845fa0454d03adf2bb551af35c36835878ff34"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@0.2.14"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "0.2.14"
- SPDXID: "SPDXRef-Package-NPM-minimatch-0.2.14-source-artifact"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/minimatch/-/minimatch-0.2.14.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@0.2.14"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "0.2.14"
- SPDXID: "SPDXRef-Package-NPM-minimatch-0.3.0"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-minimatch-0.3.0-vcs"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/minimatch.git@8970f0f8e07f7cd2f20b09c1c9340f4ffbed573c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-minimatch-0.3.0-source-artifact"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/minimatch/-/minimatch-0.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.8"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/minimistjs/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.8"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.8-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/minimistjs/minimist.git@6901ee286bc4c16da6830b48b46ce1574703cea1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/minimistjs/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.8"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.8-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/minimist/-/minimist-1.2.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/minimistjs/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.8"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.6"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.6"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.6-vcs"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "git+https://github.com/substack/node-mkdirp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.6"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.6-source-artifact"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.6"
- SPDXID: "SPDXRef-Package-NPM-morgan-1.6.1"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/morgan@1.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/morgan"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "morgan"
  summary: "HTTP request logger middleware for node.js"
  versionInfo: "1.6.1"
- SPDXID: "SPDXRef-Package-NPM-morgan-1.6.1-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/morgan.git@300286d1472928b10f723e8ea138533dfbd3b521"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/morgan@1.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/morgan"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "morgan"
  summary: "HTTP request logger middleware for node.js"
  versionInfo: "1.6.1"
- SPDXID: "SPDXRef-Package-NPM-morgan-1.6.1-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 TJ Holowaychuk\n\
    Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/morgan/-/morgan-1.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/morgan@1.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/morgan"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "morgan"
  summary: "HTTP request logger middleware for node.js"
  versionInfo: "1.6.1"
- SPDXID: "SPDXRef-Package-NPM-ms-0.7.1"
  copyrightText: "Copyright (c) 2014 Guillermo Rauch <rauchg@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@0.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/guille/ms.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny ms conversion utility"
  versionInfo: "0.7.1"
- SPDXID: "SPDXRef-Package-NPM-ms-0.7.1-vcs"
  copyrightText: "Copyright (c) 2014 Guillermo Rauch <rauchg@gmail.com>"
  downloadLocation: "git+https://github.com/guille/ms.js.git@713dcf26d9e6fd9dbc95affe7eff9783b7f1b909"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@0.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/guille/ms.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny ms conversion utility"
  versionInfo: "0.7.1"
- SPDXID: "SPDXRef-Package-NPM-ms-0.7.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Guillermo Rauch <rauchg@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-0.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@0.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/guille/ms.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny ms conversion utility"
  versionInfo: "0.7.1"
- SPDXID: "SPDXRef-Package-NPM-ms-0.7.2"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@0.7.2"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "0.7.2"
- SPDXID: "SPDXRef-Package-NPM-ms-0.7.2-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@ac92a7e0790ba2622a74d9d60690ca0d2c070a45"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@0.7.2"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "0.7.2"
- SPDXID: "SPDXRef-Package-NPM-ms-0.7.2-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-0.7.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@0.7.2"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "0.7.2"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@9b88d1568a52ec9bb67ecc8d2aa224fa38fd41f4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-multiparty-3.3.2"
  copyrightText: "Copyright (c) 2011-2013 Felix Geisendorfer, Andrew Kelley"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/multiparty@3.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/andrewrk/node-multiparty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "multiparty"
  summary: "multipart/form-data parser which supports streaming"
  versionInfo: "3.3.2"
- SPDXID: "SPDXRef-Package-NPM-multiparty-3.3.2-vcs"
  copyrightText: "Copyright (c) 2011-2013 Felix Geisendorfer, Andrew Kelley"
  downloadLocation: "git+ssh://github.com/andrewrk/node-multiparty.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/multiparty@3.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/andrewrk/node-multiparty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "multiparty"
  summary: "multipart/form-data parser which supports streaming"
  versionInfo: "3.3.2"
- SPDXID: "SPDXRef-Package-NPM-multiparty-3.3.2-source-artifact"
  copyrightText: "Copyright (c) 2011-2013 Felix Geisendorfer, Andrew Kelley"
  downloadLocation: "https://registry.npmjs.org/multiparty/-/multiparty-3.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/multiparty@3.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/andrewrk/node-multiparty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "multiparty"
  summary: "multipart/form-data parser which supports streaming"
  versionInfo: "3.3.2"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.5.3"
  copyrightText: "Copyright (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014\
    \ Isaac Z. Schlueter\nCopyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.5.3-vcs"
  copyrightText: "Copyright (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014\
    \ Isaac Z. Schlueter\nCopyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/negotiator.git@cbb717b3f164f25820f90b160cda6d0166b9d922"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.5.3-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014\
    \ Isaac Z. Schlueter\nCopyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/negotiator/-/negotiator-0.5.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.6.3"
  copyrightText: "Copyright (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014\
    \ Isaac Z. Schlueter\nCopyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.6.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.6.3-vcs"
  copyrightText: "Copyright (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014\
    \ Isaac Z. Schlueter\nCopyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/negotiator.git@40a5acb0c878cca951bc44d1d9e2ab1f90ae813e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.6.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.6.3-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014\
    \ Isaac Z. Schlueter\nCopyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.6.3"
- SPDXID: "SPDXRef-Package-NPM-nopt-1.0.10"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-nopt-1.0.10-vcs"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/nopt.git@51b18696abcac5c071fe4d706f2b7fd02b9f5ed1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-nopt-1.0.10-source-artifact"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/nopt/-/nopt-1.0.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-nopt-2.0.0"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-nopt-2.0.0-vcs"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/nopt.git@23134fcf17c4c0b72014e95d96c8112327e1f8be"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-nopt-2.0.0-source-artifact"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/nopt/-/nopt-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-noptify-0.0.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/noptify@0.0.3"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "noptify"
  summary: "nopt wrapper with commander-like API"
  versionInfo: "0.0.3"
- SPDXID: "SPDXRef-Package-NPM-noptify-0.0.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mklabs/noptify.git@127711d057987ad5aa7961f898448965be54af62"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/noptify@0.0.3"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "noptify"
  summary: "nopt wrapper with commander-like API"
  versionInfo: "0.0.3"
- SPDXID: "SPDXRef-Package-NPM-noptify-0.0.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/noptify/-/noptify-0.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/noptify@0.0.3"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "noptify"
  summary: "nopt wrapper with commander-like API"
  versionInfo: "0.0.3"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  copyrightText: "Copyright (c) 2013 Meryn Stol\nCopyright (c) Meryn Stol 'Author"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-vcs"
  copyrightText: "Copyright (c) 2013 Meryn Stol\nCopyright (c) Meryn Stol 'Author"
  downloadLocation: "git+https://github.com/npm/normalize-package-data.git@dedb606de22fa4bdf21c3679dece5fd07b4a0b1a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Meryn Stol\nCopyright (c) Meryn Stol 'Author"
  downloadLocation: "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.8.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.8.2"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.8.2"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.8.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/oauth-sign.git@0b034206316132f57e26970152c2fb18e71bddd5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.8.2"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.8.2"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.8.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.8.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.8.2"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.8.2"
- SPDXID: "SPDXRef-Package-NPM-object-assign-4.1.1"
  copyrightText: "(c) Sindre Sorhus\n(c) Sindre Sorhus (https://sindresorhus.com)\n\
    Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-assign@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/object-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object-assign"
  summary: "ES2015 `Object.assign()` ponyfill"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-object-assign-4.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus\n(c) Sindre Sorhus (https://sindresorhus.com)\n\
    Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/object-assign.git@a89774b252c91612203876984bbd6addbe3b5a0e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-assign@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/object-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-assign"
  summary: "ES2015 `Object.assign()` ponyfill"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-object-assign-4.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus\n(c) Sindre Sorhus (https://sindresorhus.com)\n\
    Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-assign@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/object-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-assign"
  summary: "ES2015 `Object.assign()` ponyfill"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-on-finished-2.3.0"
  copyrightText: "Copyright (c) 2013 Jonathan Ong\nCopyright (c) 2013 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-finished@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-finished"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "on-finished"
  summary: "Execute a callback when a request closes, finishes, or errors"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-on-finished-2.3.0-vcs"
  copyrightText: "Copyright (c) 2013 Jonathan Ong\nCopyright (c) 2013 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/on-finished.git@34babcb58126a416fcf5205768204f2e12699dda"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-finished@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-finished"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "on-finished"
  summary: "Execute a callback when a request closes, finishes, or errors"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-on-finished-2.3.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Jonathan Ong\nCopyright (c) 2013 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/on-finished/-/on-finished-2.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-finished@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-finished"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "on-finished"
  summary: "Execute a callback when a request closes, finishes, or errors"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-on-headers-1.0.2"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-headers@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-headers#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "on-headers"
  summary: "Execute a listener when a response is about to write headers"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-on-headers-1.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/on-headers.git@c05140cde9bbce2127926752433271c6f3fe8787"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-headers@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-headers#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "on-headers"
  summary: "Execute a listener when a response is about to write headers"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-on-headers-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/on-headers/-/on-headers-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-headers@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-headers#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "on-headers"
  summary: "Execute a listener when a response is about to write headers"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-opn-1.0.2"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com>\nCopyright 2006 Jeremy White <jwhite@codeweavers.com>\n\
    Copyright 2006 Kevin Krammer <kevin.krammer@gmx.at>\nCopyright 2009-2010 Fathi\
    \ Boudra <fabo@freedesktop.org>\nCopyright 2009-2010 Rex Dieter <rdieter@fedoraproject.org>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/opn@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/opn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "opn"
  summary: "A better node-open. Opens stuff like websites, files, executables. Cross-platform."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-opn-1.0.2-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com>\nCopyright 2006 Jeremy White <jwhite@codeweavers.com>\n\
    Copyright 2006 Kevin Krammer <kevin.krammer@gmx.at>\nCopyright 2009-2010 Fathi\
    \ Boudra <fabo@freedesktop.org>\nCopyright 2009-2010 Rex Dieter <rdieter@fedoraproject.org>"
  downloadLocation: "git+https://github.com/sindresorhus/opn.git@9e4d37d526da034defa1d6856b2efad382945bc1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/opn@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/opn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "opn"
  summary: "A better node-open. Opens stuff like websites, files, executables. Cross-platform."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-opn-1.0.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com>\nCopyright 2006 Jeremy White <jwhite@codeweavers.com>\n\
    Copyright 2006 Kevin Krammer <kevin.krammer@gmx.at>\nCopyright 2009-2010 Fathi\
    \ Boudra <fabo@freedesktop.org>\nCopyright 2009-2010 Rex Dieter <rdieter@fedoraproject.org>"
  downloadLocation: "https://registry.npmjs.org/opn/-/opn-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/opn@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/opn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "opn"
  summary: "A better node-open. Opens stuff like websites, files, executables. Cross-platform."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-pako-0.2.9"
  copyrightText: "Copyright (c) 1999 Masanao Izumo <iz@onicos.co.jp>\nCopyright (c)\
    \ 2013 Gildas Lormeau\nCopyright (c) 2014-2016 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pako@0.2.9"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/pako"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pako"
  summary: "zlib port to javascript - fast, modularized, with browser support"
  versionInfo: "0.2.9"
- SPDXID: "SPDXRef-Package-NPM-pako-0.2.9-vcs"
  copyrightText: "Copyright (c) 1999 Masanao Izumo <iz@onicos.co.jp>\nCopyright (c)\
    \ 2013 Gildas Lormeau\nCopyright (c) 2014-2016 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/pako.git@85d145e616967f3720382f416da530c23c02ad13"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pako@0.2.9"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/pako"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pako"
  summary: "zlib port to javascript - fast, modularized, with browser support"
  versionInfo: "0.2.9"
- SPDXID: "SPDXRef-Package-NPM-pako-0.2.9-source-artifact"
  copyrightText: "Copyright (c) 1999 Masanao Izumo <iz@onicos.co.jp>\nCopyright (c)\
    \ 2013 Gildas Lormeau\nCopyright (c) 2014-2016 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/pako/-/pako-0.2.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pako@0.2.9"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/pako"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pako"
  summary: "zlib port to javascript - fast, modularized, with browser support"
  versionInfo: "0.2.9"
- SPDXID: "SPDXRef-Package-NPM-parse-json-2.2.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-parse-json-2.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/parse-json.git@419b0cbb83e67af53f9fd3f7ff98605ea2020eb6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-parse-json-2.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-parseurl-1.3.3"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2017 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2017 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parseurl@1.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/parseurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parseurl"
  summary: "parse a url with memoization"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-parseurl-1.3.3-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2017 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2017 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/pillarjs/parseurl.git@0a5323370b02f4eff4069472d1e96a0094aef621"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parseurl@1.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/parseurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parseurl"
  summary: "parse a url with memoization"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-parseurl-1.3.3-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2017 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2017 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parseurl@1.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/parseurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parseurl"
  summary: "parse a url with memoization"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-path-exists-2.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-exists.git@3af423661e78466764f87c5712263c5d7a1ce5b7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.7"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.7-vcs"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "git+https://github.com/jbgutierrez/path-parse.git@9f1db2802ffbc572e6b447f66126697e33b0055e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.7-source-artifact"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "https://registry.npmjs.org/path-parse/-/path-parse-1.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-path-type-1.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-type-1.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-type.git@dff5c2a62f89efe7e0cce600bf38e76196d8b4b2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-type-1.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-pause-0.1.0"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk\nCopyright (c) 2012 TJ Holowaychuk\
    \ <tj@vision-media.ca>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pause@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/pause"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pause"
  summary: "Pause a stream's data events"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-pause-0.1.0-vcs"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk\nCopyright (c) 2012 TJ Holowaychuk\
    \ <tj@vision-media.ca>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/stream-utils/pause.git@ad2d6924b4f90e79511a07a058899172acd3e59b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pause@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/pause"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pause"
  summary: "Pause a stream's data events"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-pause-0.1.0-source-artifact"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk\nCopyright (c) 2012 TJ Holowaychuk\
    \ <tj@vision-media.ca>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/pause/-/pause-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pause@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/pause"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pause"
  summary: "Pause a stream's data events"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-0.2.0"
  copyrightText: "Copyright (c) 2013 Meryn Stol"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/meryn/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-0.2.0-vcs"
  copyrightText: "Copyright (c) 2013 Meryn Stol"
  downloadLocation: "git+https://github.com/meryn/performance-now.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/meryn/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-0.2.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Meryn Stol"
  downloadLocation: "https://registry.npmjs.org/performance-now/-/performance-now-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/meryn/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-pify-2.3.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-pify-2.3.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/pify.git@2dd0d8b880e4ebcc5cc33ae126b02647418e4440"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-pify-2.3.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-pinkie-2.0.4"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie@2.0.4"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pinkie"
  summary: "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-pinkie-2.0.4-vcs"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "git+https://github.com/floatdrop/pinkie.git@8d4a92447a5c62bff9f89756caeb4c9c8770579b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie@2.0.4"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie"
  summary: "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-pinkie-2.0.4-source-artifact"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie@2.0.4"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie"
  summary: "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie-promise@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/pinkie-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pinkie-promise"
  summary: "ES2015 Promise ponyfill"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-vcs"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "git+https://github.com/floatdrop/pinkie-promise.git@4a936c09c34ad591a25db93f1216d242de0d6184"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie-promise@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/pinkie-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie-promise"
  summary: "ES2015 Promise ponyfill"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-source-artifact"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie-promise@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/pinkie-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie-promise"
  summary: "ES2015 Promise ponyfill"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-portscanner-1.2.0"
  copyrightText: "Copyright (c) 2011 Brandon Ace Alexander"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/portscanner@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/baalexander/node-portscanner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "portscanner"
  summary: "Asynchronous port scanner for Node.js"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-portscanner-1.2.0-vcs"
  copyrightText: "Copyright (c) 2011 Brandon Ace Alexander"
  downloadLocation: "git+https://github.com/baalexander/node-portscanner.git@3f6190551f88ad90be3c9edfab1152965db6eb12"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/portscanner@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/baalexander/node-portscanner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "portscanner"
  summary: "Asynchronous port scanner for Node.js"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-portscanner-1.2.0-source-artifact"
  copyrightText: "Copyright (c) 2011 Brandon Ace Alexander"
  downloadLocation: "https://registry.npmjs.org/portscanner/-/portscanner-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/portscanner@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/baalexander/node-portscanner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "portscanner"
  summary: "Asynchronous port scanner for Node.js"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-pretty-bytes-1.0.4"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pretty-bytes@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pretty-bytes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pretty-bytes"
  summary: "Convert bytes to a human readable string: 1337 → 1.34 kB"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-pretty-bytes-1.0.4-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/pretty-bytes.git@a1028d746f5aa51cdd6a22f1cae2b2e9ecc5b6df"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pretty-bytes@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pretty-bytes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pretty-bytes"
  summary: "Convert bytes to a human readable string: 1337 → 1.34 kB"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-pretty-bytes-1.0.4-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/pretty-bytes/-/pretty-bytes-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pretty-bytes@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pretty-bytes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pretty-bytes"
  summary: "Convert bytes to a human readable string: 1337 → 1.34 kB"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-process-nextick-args-2.0.1"
  copyrightText: "Copyright (c) 2015 Calvin Metcalf"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/process-nextick-args@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/calvinmetcalf/process-nextick-args"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "process-nextick-args"
  summary: "process.nextTick but always with args"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-process-nextick-args-2.0.1-vcs"
  copyrightText: "Copyright (c) 2015 Calvin Metcalf"
  downloadLocation: "git+https://github.com/calvinmetcalf/process-nextick-args.git@b96d59913025441b00c4fd40e6894ddfa8e1c398"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/process-nextick-args@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/calvinmetcalf/process-nextick-args"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "process-nextick-args"
  summary: "process.nextTick but always with args"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-process-nextick-args-2.0.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Calvin Metcalf"
  downloadLocation: "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/process-nextick-args@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/calvinmetcalf/process-nextick-args"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "process-nextick-args"
  summary: "process.nextTick but always with args"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-promise-7.3.1"
  copyrightText: "Copyright (c) 2014 Forbes Lindesay"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/promise@7.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/then/promise#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "promise"
  summary: "Bare bones Promises/A+ implementation"
  versionInfo: "7.3.1"
- SPDXID: "SPDXRef-Package-NPM-promise-7.3.1-vcs"
  copyrightText: "Copyright (c) 2014 Forbes Lindesay"
  downloadLocation: "git+https://github.com/then/promise.git@cebfa6049cc08843f428c6fc92dde918f8687e6d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/promise@7.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/then/promise#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "promise"
  summary: "Bare bones Promises/A+ implementation"
  versionInfo: "7.3.1"
- SPDXID: "SPDXRef-Package-NPM-promise-7.3.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Forbes Lindesay"
  downloadLocation: "https://registry.npmjs.org/promise/-/promise-7.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/promise@7.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/then/promise#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "promise"
  summary: "Bare bones Promises/A+ implementation"
  versionInfo: "7.3.1"
- SPDXID: "SPDXRef-Package-NPM-prr-1.0.1"
  copyrightText: "(c) 2013 Rod Vagg <rod@vagg.org> https://github.com/rvagg/prr\n\
    Copyright (c) 2013 Rod Vagg rvagg (https://twitter.com/rvagg)\nCopyright (c) 2014\
    \ Rod Vagg"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/prr@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/prr"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "prr"
  summary: "A better Object.defineProperty()"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-prr-1.0.1-vcs"
  copyrightText: "(c) 2013 Rod Vagg <rod@vagg.org> https://github.com/rvagg/prr\n\
    Copyright (c) 2013 Rod Vagg rvagg (https://twitter.com/rvagg)\nCopyright (c) 2014\
    \ Rod Vagg"
  downloadLocation: "git+https://github.com/rvagg/prr.git@b69ba0edc7aacbda0c98d550579e452b8597c126"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/prr@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/prr"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "prr"
  summary: "A better Object.defineProperty()"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-prr-1.0.1-source-artifact"
  copyrightText: "(c) 2013 Rod Vagg <rod@vagg.org> https://github.com/rvagg/prr\n\
    Copyright (c) 2013 Rod Vagg rvagg (https://twitter.com/rvagg)\nCopyright (c) 2014\
    \ Rod Vagg"
  downloadLocation: "https://registry.npmjs.org/prr/-/prr-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/prr@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/prr"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "prr"
  summary: "A better Object.defineProperty()"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/bestiejs/punycode.js.git@0fbadd6e81f3a0ce06c38998040d6db6bdfbc5c9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-qs-0.5.6"
  copyrightText: "Copyright (c) 2010-2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ 2011 John Resig\nCopyright 2011 The Dojo Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@0.5.6"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "querystring parser"
  versionInfo: "0.5.6"
- SPDXID: "SPDXRef-Package-NPM-qs-0.5.6-vcs"
  copyrightText: "Copyright (c) 2010-2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ 2011 John Resig\nCopyright 2011 The Dojo Foundation"
  downloadLocation: "git+https://github.com/visionmedia/node-querystring.git@d06075cf67f1e5351628389c0c6046f7c39b5bae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@0.5.6"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "querystring parser"
  versionInfo: "0.5.6"
- SPDXID: "SPDXRef-Package-NPM-qs-0.5.6-source-artifact"
  copyrightText: "Copyright (c) 2010-2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ 2011 John Resig\nCopyright 2011 The Dojo Foundation"
  downloadLocation: "https://registry.npmjs.org/qs/-/qs-0.5.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@0.5.6"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "querystring parser"
  versionInfo: "0.5.6"
- SPDXID: "SPDXRef-Package-NPM-qs-4.0.0"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-qs-4.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors"
  downloadLocation: "git+https://github.com/hapijs/qs.git@e573dd08eae6cce30d2202704691a102dfa3782a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-qs-4.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors"
  downloadLocation: "https://registry.npmjs.org/qs/-/qs-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hapijs/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-qs-6.4.1"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors (https://github.com/ljharb/qs/graphs/contributors)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.4.1"
- SPDXID: "SPDXRef-Package-NPM-qs-6.4.1-vcs"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors (https://github.com/ljharb/qs/graphs/contributors)"
  downloadLocation: "git+https://github.com/ljharb/qs.git@486aa46547b4e878d6e87183de95dd26d46fb020"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.4.1"
- SPDXID: "SPDXRef-Package-NPM-qs-6.4.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors (https://github.com/ljharb/qs/graphs/contributors)"
  downloadLocation: "https://registry.npmjs.org/qs/-/qs-6.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.4.1"
- SPDXID: "SPDXRef-Package-NPM-random-bytes-1.0.0"
  copyrightText: "Copyright (c) 2016 Douglas Christopher Wilson\nCopyright (c) 2016\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/random-bytes@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/random-bytes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "random-bytes"
  summary: "URL and cookie safe UIDs"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-random-bytes-1.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Douglas Christopher Wilson\nCopyright (c) 2016\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/crypto-utils/random-bytes.git@3dcd47425a3dfe858ee8debcd4db0c1222110bc3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/random-bytes@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/random-bytes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "random-bytes"
  summary: "URL and cookie safe UIDs"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-random-bytes-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Douglas Christopher Wilson\nCopyright (c) 2016\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/random-bytes/-/random-bytes-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/random-bytes@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/random-bytes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "random-bytes"
  summary: "URL and cookie safe UIDs"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-range-parser-1.0.3"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/range-parser@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/range-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "range-parser"
  summary: "Range header field string parser"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-range-parser-1.0.3-vcs"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk"
  downloadLocation: "git+https://github.com/jshttp/range-parser.git@18e46a3de74afff9f4e22717f11ddd6e9aa6d845"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/range-parser@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/range-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "range-parser"
  summary: "Range header field string parser"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-range-parser-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 TJ Holowaychuk"
  downloadLocation: "https://registry.npmjs.org/range-parser/-/range-parser-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/range-parser@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/range-parser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "range-parser"
  summary: "Range header field string parser"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-raw-body-2.1.7"
  copyrightText: "Copyright (c) 2013-2014 Jonathan Ong\nCopyright (c) 2013-2014 Jonathan\
    \ Ong <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/raw-body@2.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/raw-body#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "raw-body"
  summary: "Get and validate the raw body of a readable stream."
  versionInfo: "2.1.7"
- SPDXID: "SPDXRef-Package-NPM-raw-body-2.1.7-vcs"
  copyrightText: "Copyright (c) 2013-2014 Jonathan Ong\nCopyright (c) 2013-2014 Jonathan\
    \ Ong <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/stream-utils/raw-body.git@9d13a27048cc97958fc14fc12418c6aa76f0b1f9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/raw-body@2.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/raw-body#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "raw-body"
  summary: "Get and validate the raw body of a readable stream."
  versionInfo: "2.1.7"
- SPDXID: "SPDXRef-Package-NPM-raw-body-2.1.7-source-artifact"
  copyrightText: "Copyright (c) 2013-2014 Jonathan Ong\nCopyright (c) 2013-2014 Jonathan\
    \ Ong <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\n\
    Copyright (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/raw-body/-/raw-body-2.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/raw-body@2.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/raw-body#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "raw-body"
  summary: "Get and validate the raw body of a readable stream."
  versionInfo: "2.1.7"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-1.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/read-pkg.git@9448d32b2ebcd65fc0547def3cfe5b28ef522e68"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-1.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg-up@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "read-pkg-up"
  summary: "Read the closest package.json file"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/read-pkg-up.git@27ec7c844b495a39eea7859c5f4d4721ebf60e8e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg-up@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg-up"
  summary: "Read the closest package.json file"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg-up@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg-up"
  summary: "Read the closest package.json file"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@1.1.14"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js v0.11.x"
  versionInfo: "1.1.14"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-1.1.14-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/isaacs/readable-stream.git@52550840cb1d6e8a98ef9a909a4bea360bc6f7da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@1.1.14"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js v0.11.x"
  versionInfo: "1.1.14"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-1.1.14-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/readable-stream/-/readable-stream-1.1.14.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@1.1.14"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js v0.11.x"
  versionInfo: "1.1.14"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@2.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "2.3.8"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-2.3.8-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/readable-stream.git@c85db76d4c41f64fd082c9263c3a918bec6f38a0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@2.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "2.3.8"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-2.3.8-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@2.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "2.3.8"
- SPDXID: "SPDXRef-Package-NPM-redent-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/redent@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/redent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "redent"
  summary: "Strip redundant indentation and indent the string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-redent-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/redent.git@97d9db1dbd5894fe1b14e01040da283b8d53409d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/redent@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/redent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "redent"
  summary: "Strip redundant indentation and indent the string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-redent-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/redent@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/redent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "redent"
  summary: "Strip redundant indentation and indent the string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-repeat-string-1.6.1"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (http://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeat-string@1.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/repeat-string"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "repeat-string"
  summary: "Repeat the given string n times. Fastest implementation for repeating\
    \ a string."
  versionInfo: "1.6.1"
- SPDXID: "SPDXRef-Package-NPM-repeat-string-1.6.1-vcs"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (http://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/repeat-string.git@1a95c5d99a02999ccd2cf4663959a18bd2def7b8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeat-string@1.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/repeat-string"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "repeat-string"
  summary: "Repeat the given string n times. Fastest implementation for repeating\
    \ a string."
  versionInfo: "1.6.1"
- SPDXID: "SPDXRef-Package-NPM-repeat-string-1.6.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (http://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/repeat-string/-/repeat-string-1.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeat-string@1.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/repeat-string"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "repeat-string"
  summary: "Repeat the given string n times. Fastest implementation for repeating\
    \ a string."
  versionInfo: "1.6.1"
- SPDXID: "SPDXRef-Package-NPM-repeating-2.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeating@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/repeating#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "repeating"
  summary: "Repeat a string - fast"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-repeating-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/repeating.git@be02bcaf9a674b3c155477b3bf282136bcf44770"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeating@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/repeating#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "repeating"
  summary: "Repeat a string - fast"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-repeating-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeating@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/repeating#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "repeating"
  summary: "Repeat a string - fast"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-request-2.81.0"
  copyrightText: "Copyright 2010-2012 Mikeal Rogers"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.81.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.81.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.81.0-vcs"
  copyrightText: "Copyright 2010-2012 Mikeal Rogers"
  downloadLocation: "git+https://github.com/request/request.git@a0cdc704c19e63e6f1740e173bb003c51eef524c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.81.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.81.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.81.0-source-artifact"
  copyrightText: "Copyright 2010-2012 Mikeal Rogers"
  downloadLocation: "https://registry.npmjs.org/request/-/request-2.81.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.81.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.81.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-0.3.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@0.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "0.3.1"
- SPDXID: "SPDXRef-Package-NPM-resolve-0.3.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/node-resolve.git@790cdf5ab7c92bb146e8ace05ba0b26c5f51ffb3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@0.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "0.3.1"
- SPDXID: "SPDXRef-Package-NPM-resolve-0.3.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/resolve/-/resolve-0.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@0.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "0.3.1"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.22.2"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.22.2"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.22.2"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.22.2-vcs"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "git+https://github.com/browserify/resolve.git@c2f9ce254f0157b5e2e53e9aee0403c510909f7d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.22.2"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.22.2"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.22.2-source-artifact"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "https://registry.npmjs.org/resolve/-/resolve-1.22.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.22.2"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.22.2"
- SPDXID: "SPDXRef-Package-NPM-response-time-2.3.2"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/response-time@2.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/response-time"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "response-time"
  summary: "Response time for Node.js servers"
  versionInfo: "2.3.2"
- SPDXID: "SPDXRef-Package-NPM-response-time-2.3.2-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/expressjs/response-time.git@34c40bc97bcd7e54e13b33f77ee231ca2032de6c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/response-time@2.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/response-time"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "response-time"
  summary: "Response time for Node.js servers"
  versionInfo: "2.3.2"
- SPDXID: "SPDXRef-Package-NPM-response-time-2.3.2-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014 Jonathan Ong\n\
    Copyright (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014-2015\
    \ Douglas Christopher Wilson\nCopyright (c) 2014-2015 Douglas Christopher Wilson\
    \ <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/response-time/-/response-time-2.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/response-time@2.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/response-time"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "response-time"
  summary: "Response time for Node.js servers"
  versionInfo: "2.3.2"
- SPDXID: "SPDXRef-Package-NPM-right-align-0.1.3"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/right-align@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/right-align"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "right-align"
  summary: "Right-align the text in a string."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-right-align-0.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/right-align.git@23ee38d6eedbcbfed241ace6587ce5730684dd18"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/right-align@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/right-align"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "right-align"
  summary: "Right-align the text in a string."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-right-align-0.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/right-align/-/right-align-0.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/right-align@0.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/right-align"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "right-align"
  summary: "Right-align the text in a string."
  versionInfo: "0.1.3"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.2.8"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.2.8"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.2.8-vcs"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/rimraf.git@6c9968c26e5cd90d3e14803c87aebbc94a6730e2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.2.8"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.2.8-source-artifact"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/rimraf/-/rimraf-2.2.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.2.8"
- SPDXID: "SPDXRef-Package-NPM-rndm-1.2.0"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rndm@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/rndm#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "rndm"
  summary: "random string generator"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-rndm-1.2.0-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "git+https://github.com/crypto-utils/rndm.git@9d566c844a4c83487f3b2621be5b6588d5a2b617"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rndm@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/rndm#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rndm"
  summary: "random string generator"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-rndm-1.2.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/rndm/-/rndm-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rndm@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/rndm#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rndm"
  summary: "random string generator"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.1.2"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.1.2-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/safe-buffer.git@649435cc8e2d1f3ecdc7caf323f1cb1187307a16"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.1.2"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.1.2-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "git+https://github.com/ChALkeR/safer-buffer.git@e8ac214944eda30e1e6c6b7d7e7f6a21cf7dce7c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/node-semver.git@c83c18cf84f9ccaea3431c929bb285fd168c01e4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-send-0.13.2"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/send@0.13.2"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/send"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "send"
  summary: "Better streaming static file server with Range and conditional-GET support"
  versionInfo: "0.13.2"
- SPDXID: "SPDXRef-Package-NPM-send-0.13.2-vcs"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson"
  downloadLocation: "git+https://github.com/pillarjs/send.git@5a089701b1c49d96084716bdb5465edefa08c906"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/send@0.13.2"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/send"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "send"
  summary: "Better streaming static file server with Range and conditional-GET support"
  versionInfo: "0.13.2"
- SPDXID: "SPDXRef-Package-NPM-send-0.13.2-source-artifact"
  copyrightText: "Copyright (c) 2012 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/send/-/send-0.13.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/send@0.13.2"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/send"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "send"
  summary: "Better streaming static file server with Range and conditional-GET support"
  versionInfo: "0.13.2"
- SPDXID: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-favicon@2.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-favicon"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "serve-favicon"
  summary: "favicon serving middleware with caching"
  versionInfo: "2.3.2"
- SPDXID: "SPDXRef-Package-NPM-serve-favicon-2.3.2-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "git+https://github.com/expressjs/serve-favicon.git@4dafcef8a2ddd26731ed12bfc8c958312889eb7e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-favicon@2.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-favicon"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-favicon"
  summary: "favicon serving middleware with caching"
  versionInfo: "2.3.2"
- SPDXID: "SPDXRef-Package-NPM-serve-favicon-2.3.2-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "https://registry.npmjs.org/serve-favicon/-/serve-favicon-2.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-favicon@2.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-favicon"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-favicon"
  summary: "favicon serving middleware with caching"
  versionInfo: "2.3.2"
- SPDXID: "SPDXRef-Package-NPM-serve-index-1.7.3"
  copyrightText: "Copyright (c) 2010-2011 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-index@1.7.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "serve-index"
  summary: "Serve directory listings"
  versionInfo: "1.7.3"
- SPDXID: "SPDXRef-Package-NPM-serve-index-1.7.3-vcs"
  copyrightText: "Copyright (c) 2010-2011 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "git+https://github.com/expressjs/serve-index.git@fc9db6b56a5bd6ae37f635a7cc7230ab83343fc1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-index@1.7.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-index"
  summary: "Serve directory listings"
  versionInfo: "1.7.3"
- SPDXID: "SPDXRef-Package-NPM-serve-index-1.7.3-source-artifact"
  copyrightText: "Copyright (c) 2010-2011 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "https://registry.npmjs.org/serve-index/-/serve-index-1.7.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-index@1.7.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-index"
  summary: "Serve directory listings"
  versionInfo: "1.7.3"
- SPDXID: "SPDXRef-Package-NPM-serve-static-1.10.3"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-static@1.10.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-static#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "serve-static"
  summary: "Serve static files"
  versionInfo: "1.10.3"
- SPDXID: "SPDXRef-Package-NPM-serve-static-1.10.3-vcs"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "git+https://github.com/expressjs/serve-static.git@8be028d005967471832109d777daa4b45bd1948b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-static@1.10.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-static#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-static"
  summary: "Serve static files"
  versionInfo: "1.10.3"
- SPDXID: "SPDXRef-Package-NPM-serve-static-1.10.3-source-artifact"
  copyrightText: "Copyright (c) 2010 Sencha Inc.\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 TJ Holowaychuk\nCopyright (c) 2014-2015 Douglas Christopher\
    \ Wilson"
  downloadLocation: "https://registry.npmjs.org/serve-static/-/serve-static-1.10.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-static@1.10.3"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-static#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-static"
  summary: "Serve static files"
  versionInfo: "1.10.3"
- SPDXID: "SPDXRef-Package-NPM-sigmund-1.0.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sigmund@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/sigmund#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "sigmund"
  summary: "Quick and dirty signatures for Objects."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-sigmund-1.0.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/sigmund.git@527f97aa5bb253d927348698c0cd3bb267d098c6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sigmund@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/sigmund#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sigmund"
  summary: "Quick and dirty signatures for Objects."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-sigmund-1.0.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/sigmund/-/sigmund-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sigmund@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/sigmund#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sigmund"
  summary: "Quick and dirty signatures for Objects."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.7"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.7-vcs"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "git+https://github.com/tapjs/signal-exit.git@03dd77a96caa309c6a02c59274d58c812a2dce45"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.7-source-artifact"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.7"
- SPDXID: "SPDXRef-Package-NPM-sntp-1.0.9"
  copyrightText: "Copyright (c) 2012-2014 Eran Hammer and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sntp@1.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/hueniverse/sntp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "sntp"
  summary: "SNTP Client"
  versionInfo: "1.0.9"
- SPDXID: "SPDXRef-Package-NPM-sntp-1.0.9-vcs"
  copyrightText: "Copyright (c) 2012-2014 Eran Hammer and other contributors"
  downloadLocation: "git+https://github.com/hueniverse/sntp.git@ee2e35284f684609990681734d39010cd356d7da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sntp@1.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/hueniverse/sntp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sntp"
  summary: "SNTP Client"
  versionInfo: "1.0.9"
- SPDXID: "SPDXRef-Package-NPM-sntp-1.0.9-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 Eran Hammer and other contributors"
  downloadLocation: "https://registry.npmjs.org/sntp/-/sntp-1.0.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sntp@1.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/hueniverse/sntp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sntp"
  summary: "SNTP Client"
  versionInfo: "1.0.9"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.3.0"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2012, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.3.0-vcs"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2012, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "git+https://github.com/mozilla/source-map.git@b9a3db6c1f293b759d831ea85af5f68c79f86299"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.3.0-source-artifact"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2012, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "https://registry.npmjs.org/source-map/-/source-map-0.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.5.7"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2011, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.5.7"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.5.7"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.5.7-vcs"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2011, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "git+ssh://github.com/mozilla/source-map.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.5.7"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.5.7"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.5.7-source-artifact"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2011, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "https://registry.npmjs.org/source-map/-/source-map-0.5.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.5.7"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.5.7"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.2.0"
  copyrightText: "(c) 2014 WTFPL\nCopyright (c) 2013 Michael\nCopyright (c) 2015 Austin\n\
    Copyright 2014 uh-sem-blee, Co.' AGPL-3.0-or-later', AGPL-3' AGPL-3.0-or-later',\
    \ AGPL3 AGPL-3.0-or-later\nCopyright First Rally\nCopyright spdx-correct.js contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.2.0-vcs"
  copyrightText: "(c) 2014 WTFPL\nCopyright (c) 2013 Michael\nCopyright (c) 2015 Austin\n\
    Copyright 2014 uh-sem-blee, Co.' AGPL-3.0-or-later', AGPL-3' AGPL-3.0-or-later',\
    \ AGPL3 AGPL-3.0-or-later\nCopyright First Rally\nCopyright spdx-correct.js contributors"
  downloadLocation: "git+https://github.com/jslicense/spdx-correct.js.git@433b5d567d9fd395d6a9f8341d5f20bb500e0b14"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.2.0-source-artifact"
  copyrightText: "(c) 2014 WTFPL\nCopyright (c) 2013 Michael\nCopyright (c) 2015 Austin\n\
    Copyright 2014 uh-sem-blee, Co.' AGPL-3.0-or-later', AGPL-3' AGPL-3.0-or-later',\
    \ AGPL3 AGPL-3.0-or-later\nCopyright First Rally\nCopyright spdx-correct.js contributors"
  downloadLocation: "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0"
  copyrightText: "Copyright (c) 2010-2015 Linux Foundation and its Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC-BY-3.0"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0-vcs"
  copyrightText: "Copyright (c) 2010-2015 Linux Foundation and its Contributors"
  downloadLocation: "git+https://github.com/kemitchell/spdx-exceptions.json.git@b1405b421074aae250f5cfefc1adff1c6085b293"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0-source-artifact"
  copyrightText: "Copyright (c) 2010-2015 Linux Foundation and its Contributors"
  downloadLocation: "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
  copyrightText: "Copyright (c) 2015 Kyle E. Mitchell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1-vcs"
  copyrightText: "Copyright (c) 2015 Kyle E. Mitchell"
  downloadLocation: "git+https://github.com/jslicense/spdx-expression-parse.js.git@d7daff468ce455f636838a8375d8699cf36be64d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Kyle E. Mitchell"
  downloadLocation: "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.13"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC0-1.0"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.13"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jslicense/spdx-license-ids.git@0f64b9dcf0f60166cd75f9d47c812e94f76b6288"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.13"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.13"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.13.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.13"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.13"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.17.0"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011,\
    \ 2015-2018 Joyent, Inc.\nCopyright 2017 Joyent, Inc.\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.17.0"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.17.0"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.17.0-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011,\
    \ 2015-2018 Joyent, Inc.\nCopyright 2017 Joyent, Inc.\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "git+https://github.com/joyent/node-sshpk.git@3e8366433e9c2ef688e7b14935bd4d4fa264229d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.17.0"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.17.0"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.17.0-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011,\
    \ 2015-2018 Joyent, Inc.\nCopyright 2017 Joyent, Inc.\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "https://registry.npmjs.org/sshpk/-/sshpk-1.17.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.17.0"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.17.0"
- SPDXID: "SPDXRef-Package-NPM-statuses-1.2.1"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-statuses-1.2.1-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "git+https://github.com/jshttp/statuses.git@49e6ac7ae4c63ee8186f56cb52112a7eeda28ed7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-statuses-1.2.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/statuses/-/statuses-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-statuses-1.5.0"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2016 Douglas Christopher Wilson\nCopyright\
    \ (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@1.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "1.5.0"
- SPDXID: "SPDXRef-Package-NPM-statuses-1.5.0-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2016 Douglas Christopher Wilson\nCopyright\
    \ (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/statuses.git@4fcf6fb80ef50e8f0603b87946b0fa7868c815e7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@1.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "1.5.0"
- SPDXID: "SPDXRef-Package-NPM-statuses-1.5.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2016 Douglas Christopher Wilson\nCopyright\
    \ (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/statuses/-/statuses-1.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@1.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "1.5.0"
- SPDXID: "SPDXRef-Package-NPM-stream-counter-0.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-counter@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/superjoe30/node-stream-counter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "stream-counter"
  summary: "keeps track of how many bytes have been written to a stream"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-stream-counter-0.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/superjoe30/node-stream-counter.git@458b7ee8f4eef25f9cbc12629fb5552d79d4dcb3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-counter@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/superjoe30/node-stream-counter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-counter"
  summary: "keeps track of how many bytes have been written to a stream"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-stream-counter-0.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/stream-counter/-/stream-counter-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-counter@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/superjoe30/node-stream-counter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-counter"
  summary: "keeps track of how many bytes have been written to a stream"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-0.10.31"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@0.10.31"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/string_decoder"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "0.10.31"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-0.10.31-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/rvagg/string_decoder.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@0.10.31"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "0.10.31"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-0.10.31-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@0.10.31"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "0.10.31"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.1.1-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/string_decoder.git@18c7f89c894ced5f610505bb006dfde9a3d1ac5e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.1.1-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-stringstream-0.0.6"
  copyrightText: "Copyright (c) 2012 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stringstream@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/StringStream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stringstream"
  summary: "Encode and decode streams into string streams"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-stringstream-0.0.6-vcs"
  copyrightText: "Copyright (c) 2012 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "git+https://github.com/mhart/StringStream.git@fee31c5c4a5efc7c7cc2fde4aee633dedefd6d67"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stringstream@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/StringStream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stringstream"
  summary: "Encode and decode streams into string streams"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-stringstream-0.0.6-source-artifact"
  copyrightText: "Copyright (c) 2012 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "https://registry.npmjs.org/stringstream/-/stringstream-0.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stringstream@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/StringStream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stringstream"
  summary: "Encode and decode streams into string streams"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-0.3.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-0.3.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-ansi.git@eb43aefe65a2e1d3ab35e69c75f155785e1d980b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-0.3.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-ansi/-/strip-ansi-0.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-3.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/strip-ansi.git@8270705c704956da865623e564eba4875c3ea17f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-3.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string/buffer"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-bom.git@851b9c126dba9561cc14ef3dc2634dcc11df4d11"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string/buffer"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string/buffer"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-indent@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-indent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-indent"
  summary: "Strip leading whitespace from every line in a string"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-indent-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-indent.git@addcf90a56001ea122e9f1254987016bc87e5b5f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-indent@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-indent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-indent"
  summary: "Strip leading whitespace from every line in a string"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-indent-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-indent@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-indent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-indent"
  summary: "Strip leading whitespace from every line in a string"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-supports-color-0.2.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-0.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/supports-color.git@422bf4ed63478fc215efedb9ab767faadc8c146b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-0.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-2.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@8400d98ade32b2adffd50902c06d9e725a5c6588"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0"
  copyrightText: "Copyright (c) 2022 Inspect JS"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-preserve-symlinks-flag"
  summary: "Determine if the current node version supports the `--preserve-symlinks`\
    \ flag."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0-vcs"
  copyrightText: "Copyright (c) 2022 Inspect JS"
  downloadLocation: "git+https://github.com/inspect-js/node-supports-preserve-symlinks-flag.git@1f7cac19c0c298cf40b3f2f3c735477ad579ac61"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-preserve-symlinks-flag"
  summary: "Determine if the current node version supports the `--preserve-symlinks`\
    \ flag."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2022 Inspect JS"
  downloadLocation: "https://registry.npmjs.org/supports-preserve-symlinks-flag/-/supports-preserve-symlinks-flag-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-preserve-symlinks-flag@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/node-supports-preserve-symlinks-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-preserve-symlinks-flag"
  summary: "Determine if the current node version supports the `--preserve-symlinks`\
    \ flag."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  copyrightText: "Copyright (c) 2012-2013 Mickael Daniel"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tiny-lr-fork@0.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/mklabs/tiny-lr"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tiny-lr-fork"
  summary: "Tiny LiveReload server, background-friendly"
  versionInfo: "0.0.5"
- SPDXID: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5-vcs"
  copyrightText: "Copyright (c) 2012-2013 Mickael Daniel"
  downloadLocation: "git+https://github.com/mklabs/tiny-lr.git@00c2ced37b02c695ff920e5736c2ef50db7f4540"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tiny-lr-fork@0.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/mklabs/tiny-lr"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tiny-lr-fork"
  summary: "Tiny LiveReload server, background-friendly"
  versionInfo: "0.0.5"
- SPDXID: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5-source-artifact"
  copyrightText: "Copyright (c) 2012-2013 Mickael Daniel"
  downloadLocation: "https://registry.npmjs.org/tiny-lr-fork/-/tiny-lr-fork-0.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tiny-lr-fork@0.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/mklabs/tiny-lr"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tiny-lr-fork"
  summary: "Tiny LiveReload server, background-friendly"
  versionInfo: "0.0.5"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.3.4"
  copyrightText: "(c) assert.equal c.domain, foonet.net\n(c) assert.equal c.domain,\
    \ kyoto.jp\n(c) assert.equal c.domain, www.example.com\n(c) assert.equal c.domain,\
    \ www.foonet.net\nCopyright (c) 2015 Salesforce.com, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.3.4"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.3.4"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.3.4-vcs"
  copyrightText: "(c) assert.equal c.domain, foonet.net\n(c) assert.equal c.domain,\
    \ kyoto.jp\n(c) assert.equal c.domain, www.example.com\n(c) assert.equal c.domain,\
    \ www.foonet.net\nCopyright (c) 2015 Salesforce.com, Inc."
  downloadLocation: "git+https://github.com/salesforce/tough-cookie.git@e4dfb0aec5d25e9e982805417a5d936071badc17"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.3.4"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.3.4"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.3.4-source-artifact"
  copyrightText: "(c) assert.equal c.domain, foonet.net\n(c) assert.equal c.domain,\
    \ kyoto.jp\n(c) assert.equal c.domain, www.example.com\n(c) assert.equal c.domain,\
    \ www.foonet.net\nCopyright (c) 2015 Salesforce.com, Inc."
  downloadLocation: "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.3.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.3.4"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.3.4"
- SPDXID: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/trim-newlines@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/trim-newlines"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "trim-newlines"
  summary: "Trim newlines from the start and/or end of a string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-trim-newlines-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/trim-newlines.git@f651a2d4cbf382c2936e6e53edee9316602e4ce7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/trim-newlines@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/trim-newlines"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "trim-newlines"
  summary: "Trim newlines from the start and/or end of a string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-trim-newlines-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/trim-newlines@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/trim-newlines"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "trim-newlines"
  summary: "Trim newlines from the start and/or end of a string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-tsscmp-1.0.5"
  copyrightText: "Copyright (c) 2016 Permission"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsscmp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/suryagh/tsscmp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tsscmp"
  summary: "Timing safe string compare using double HMAC"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-tsscmp-1.0.5-vcs"
  copyrightText: "Copyright (c) 2016 Permission"
  downloadLocation: "git+https://github.com/suryagh/tsscmp.git@095fb02b3e6102cbd1d2bdc9613e3da54e782f59"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsscmp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/suryagh/tsscmp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tsscmp"
  summary: "Timing safe string compare using double HMAC"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-tsscmp-1.0.5-source-artifact"
  copyrightText: "Copyright (c) 2016 Permission"
  downloadLocation: "https://registry.npmjs.org/tsscmp/-/tsscmp-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsscmp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/suryagh/tsscmp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tsscmp"
  summary: "Timing safe string compare using double HMAC"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/tunnel-agent.git@67df643033258e7cb1388f648ee5f141cd66101b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "Unlicense"
  licenseDeclared: "Unlicense"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dchest/tweetnacl-js.git@cce829e473b1ae299a9373b5140c713ee88f577f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-type-is-1.6.18"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-is@1.6.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/type-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "type-is"
  summary: "Infer the content-type of a request."
  versionInfo: "1.6.18"
- SPDXID: "SPDXRef-Package-NPM-type-is-1.6.18-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/type-is.git@bfebe3d4ac312debccb7dbbc79242e2581dea5f0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-is@1.6.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/type-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "type-is"
  summary: "Infer the content-type of a request."
  versionInfo: "1.6.18"
- SPDXID: "SPDXRef-Package-NPM-type-is-1.6.18-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2014-2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-is@1.6.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/type-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "type-is"
  summary: "Infer the content-type of a request."
  versionInfo: "1.6.18"
- SPDXID: "SPDXRef-Package-NPM-typedarray-0.0.6"
  copyrightText: "Copyright (c) 2010 Linden Research, Inc.\nCopyright (c) 2012 Joshua\
    \ Bell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typedarray@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "typedarray"
  summary: "TypedArray polyfill for old browsers"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-typedarray-0.0.6-vcs"
  copyrightText: "Copyright (c) 2010 Linden Research, Inc.\nCopyright (c) 2012 Joshua\
    \ Bell"
  downloadLocation: "git+https://github.com/substack/typedarray.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typedarray@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typedarray"
  summary: "TypedArray polyfill for old browsers"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-typedarray-0.0.6-source-artifact"
  copyrightText: "Copyright (c) 2010 Linden Research, Inc.\nCopyright (c) 2012 Joshua\
    \ Bell"
  downloadLocation: "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typedarray@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typedarray"
  summary: "TypedArray polyfill for old browsers"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-uglify-js-2.8.29"
  copyrightText: "Copyright 2012-2013 (c) Mihai Bazon <mihai.bazon@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uglify-js@2.8.29"
  filesAnalyzed: false
  homepage: "http://lisperator.net/uglifyjs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "uglify-js"
  summary: "JavaScript parser, mangler/compressor and beautifier toolkit"
  versionInfo: "2.8.29"
- SPDXID: "SPDXRef-Package-NPM-uglify-js-2.8.29-vcs"
  copyrightText: "Copyright 2012-2013 (c) Mihai Bazon <mihai.bazon@gmail.com>"
  downloadLocation: "git+https://github.com/mishoo/UglifyJS2.git@23876a84a51835ca791afa12931e747df048178f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uglify-js@2.8.29"
  filesAnalyzed: false
  homepage: "http://lisperator.net/uglifyjs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uglify-js"
  summary: "JavaScript parser, mangler/compressor and beautifier toolkit"
  versionInfo: "2.8.29"
- SPDXID: "SPDXRef-Package-NPM-uglify-js-2.8.29-source-artifact"
  copyrightText: "Copyright 2012-2013 (c) Mihai Bazon <mihai.bazon@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/uglify-js/-/uglify-js-2.8.29.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uglify-js@2.8.29"
  filesAnalyzed: false
  homepage: "http://lisperator.net/uglifyjs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uglify-js"
  summary: "JavaScript parser, mangler/compressor and beautifier toolkit"
  versionInfo: "2.8.29"
- SPDXID: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2"
  copyrightText: "Copyright (c) 2013 Forbes Lindesay"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uglify-to-browserify@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ForbesLindesay/uglify-to-browserify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "uglify-to-browserify"
  summary: "A transform to make UglifyJS work in browserify."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2-vcs"
  copyrightText: "Copyright (c) 2013 Forbes Lindesay"
  downloadLocation: "git+https://github.com/ForbesLindesay/uglify-to-browserify.git@2507da346e77defefdc5f3a048709751ec9a4915"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uglify-to-browserify@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ForbesLindesay/uglify-to-browserify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uglify-to-browserify"
  summary: "A transform to make UglifyJS work in browserify."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2013 Forbes Lindesay"
  downloadLocation: "https://registry.npmjs.org/uglify-to-browserify/-/uglify-to-browserify-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uglify-to-browserify@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ForbesLindesay/uglify-to-browserify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uglify-to-browserify"
  summary: "A transform to make UglifyJS work in browserify."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-uid-safe-2.0.0"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uid-safe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/uid-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "uid-safe"
  summary: "URL and cookie safe UIDs"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-uid-safe-2.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/crypto-utils/uid-safe.git@bf6e105748aec52992efc6da50964378984f49e9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uid-safe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/uid-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uid-safe"
  summary: "URL and cookie safe UIDs"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-uid-safe-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/uid-safe/-/uid-safe-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uid-safe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/uid-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uid-safe"
  summary: "URL and cookie safe UIDs"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-uid-safe-2.1.4"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015-2017 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015-2017 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uid-safe@2.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/uid-safe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "uid-safe"
  summary: "URL and cookie safe UIDs"
  versionInfo: "2.1.4"
- SPDXID: "SPDXRef-Package-NPM-uid-safe-2.1.4-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015-2017 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015-2017 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/crypto-utils/uid-safe.git@4964cfbf8aa89e1988e30f26e2ecaa4ba239222d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uid-safe@2.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/uid-safe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uid-safe"
  summary: "URL and cookie safe UIDs"
  versionInfo: "2.1.4"
- SPDXID: "SPDXRef-Package-NPM-uid-safe-2.1.4-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015-2017 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015-2017 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/uid-safe/-/uid-safe-2.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uid-safe@2.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/crypto-utils/uid-safe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uid-safe"
  summary: "URL and cookie safe UIDs"
  versionInfo: "2.1.4"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.7.0"
  copyrightText: "(c) 2009-2014 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) Vasily Polovnyov <vast@whiteants.net>\nCopyright (c)\
    \ 2008 Ariel Flesler\nCopyright (c) 2009-2014 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright 2011 by Jan Tonellato\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.7.0"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.7.0-vcs"
  copyrightText: "(c) 2009-2014 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) Vasily Polovnyov <vast@whiteants.net>\nCopyright (c)\
    \ 2008 Ariel Flesler\nCopyright (c) 2009-2014 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright 2011 by Jan Tonellato\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors"
  downloadLocation: "git+https://github.com/jashkenas/underscore.git@da996e665deb0b69b257e80e3e257c04fde4191c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.7.0"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.7.0-source-artifact"
  copyrightText: "(c) 2009-2014 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) Vasily Polovnyov <vast@whiteants.net>\nCopyright (c)\
    \ 2008 Ariel Flesler\nCopyright (c) 2009-2014 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright 2011 by Jan Tonellato\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors"
  downloadLocation: "https://registry.npmjs.org/underscore/-/underscore-1.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.7.0"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.2.1"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2009 John Resig\nCopyright (c) 2009 John Resig,\
    \ Jorn Zaefferer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2009 The Dojo Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.2.1"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.2.1-vcs"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2009 John Resig\nCopyright (c) 2009 John Resig,\
    \ Jorn Zaefferer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2009 The Dojo Foundation"
  downloadLocation: "git+https://github.com/epeli/underscore.string.git@36c97e3accee57f3947ecb98732b12027705d3f0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.2.1"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.2.1-source-artifact"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2009 John Resig\nCopyright (c) 2009 John Resig,\
    \ Jorn Zaefferer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2009 The Dojo Foundation"
  downloadLocation: "https://registry.npmjs.org/underscore.string/-/underscore.string-2.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.2.1"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.3.3"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2011 John Resig\nCopyright 2011\
    \ The Dojo Foundation\nCopyright 2012 jQuery Foundation and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.3.3"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.3.3-vcs"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2011 John Resig\nCopyright 2011\
    \ The Dojo Foundation\nCopyright 2012 jQuery Foundation and other contributors"
  downloadLocation: "git+https://github.com/epeli/underscore.string.git@b4b40b9428be2ee41f4f1b7d9df08274c94aeedb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.3.3"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.3.3-source-artifact"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2011 John Resig\nCopyright 2011\
    \ The Dojo Foundation\nCopyright 2012 jQuery Foundation and other contributors"
  downloadLocation: "https://registry.npmjs.org/underscore.string/-/underscore.string-2.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.3.3"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.4.0"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2011 John Resig\nCopyright 2011\
    \ The Dojo Foundation\nCopyright 2012 jQuery Foundation and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.4.0"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.4.0-vcs"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2011 John Resig\nCopyright 2011\
    \ The Dojo Foundation\nCopyright 2012 jQuery Foundation and other contributors"
  downloadLocation: "git+https://github.com/epeli/underscore.string.git@ee72fe2e73ae5399664ef611e9f5607856180477"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.4.0"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-NPM-underscore.string-2.4.0-source-artifact"
  copyrightText: "(c) 2009-2012 Jeremy Ashkenas, DocumentCloud Inc. Underscore\n(c)\
    \ 2010 Esa-Matti Suuronen\nCopyright (c) 2008 Ariel Flesler\nCopyright (c) 2008-2009\
    \ Robert Kieffer\nCopyright (c) 2011 Esa-Matti Suuronen esa-matti@suuronen.org\n\
    Copyright (c) Alexandru Marasteanu\nCopyright 2011 John Resig\nCopyright 2011\
    \ The Dojo Foundation\nCopyright 2012 jQuery Foundation and other contributors"
  downloadLocation: "https://registry.npmjs.org/underscore.string/-/underscore.string-2.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore.string@2.4.0"
  filesAnalyzed: false
  homepage: "http://epeli.github.com/underscore.string/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore.string"
  summary: "String manipulation extensions for Underscore.js javascript library."
  versionInfo: "2.4.0"
- SPDXID: "SPDXRef-Package-NPM-unpipe-1.0.0"
  copyrightText: "Copyright (c) 2015 Douglas Christopher Wilson\nCopyright (c) 2015\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unpipe@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/unpipe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "unpipe"
  summary: "Unpipe a stream from all destinations"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unpipe-1.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Douglas Christopher Wilson\nCopyright (c) 2015\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/stream-utils/unpipe.git@d2df901c06487430e78dca62b6edb8bb2fc5e99d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unpipe@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/unpipe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unpipe"
  summary: "Unpipe a stream from all destinations"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unpipe-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Douglas Christopher Wilson\nCopyright (c) 2015\
    \ Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unpipe@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/unpipe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unpipe"
  summary: "Unpipe a stream from all destinations"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-uri-path-0.0.2"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-path@0.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/UltCombo/uri-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "WTFPL"
  name: "uri-path"
  summary: "Convert relative file system paths into safe URI paths"
  versionInfo: "0.0.2"
- SPDXID: "SPDXRef-Package-NPM-uri-path-0.0.2-vcs"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>"
  downloadLocation: "git+https://github.com/UltCombo/uri-path.git@1c9b1663f12d75e8290c189863e78701dbdb9e98"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-path@0.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/UltCombo/uri-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uri-path"
  summary: "Convert relative file system paths into safe URI paths"
  versionInfo: "0.0.2"
- SPDXID: "SPDXRef-Package-NPM-uri-path-0.0.2-source-artifact"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>"
  downloadLocation: "https://registry.npmjs.org/uri-path/-/uri-path-0.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-path@0.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/UltCombo/uri-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uri-path"
  summary: "Convert relative file system paths into safe URI paths"
  versionInfo: "0.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "git+https://github.com/TooTallNate/util-deprecate.git@475fb6857cd23fafff20c1be846c1350abf8e6d4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-utils-merge-1.0.0"
  copyrightText: "Copyright (c) 2013 Jared Hanson\nCopyright (c) 2013 Jared Hanson\
    \ < http://jaredhanson.net/ (http://jaredhanson.net/)>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/utils-merge@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jaredhanson/utils-merge#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "utils-merge"
  summary: "merge() utility function"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-utils-merge-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Jared Hanson\nCopyright (c) 2013 Jared Hanson\
    \ < http://jaredhanson.net/ (http://jaredhanson.net/)>"
  downloadLocation: "git+https://github.com/jaredhanson/utils-merge.git@80f8533cde3039ff68efead269c41fb5f1a0e59b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/utils-merge@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jaredhanson/utils-merge#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "utils-merge"
  summary: "merge() utility function"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-utils-merge-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Jared Hanson\nCopyright (c) 2013 Jared Hanson\
    \ < http://jaredhanson.net/ (http://jaredhanson.net/)>"
  downloadLocation: "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/utils-merge@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jaredhanson/utils-merge#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "utils-merge"
  summary: "merge() utility function"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.4.0"
  copyrightText: "Copyright (c) 1999-2009 Paul Johnston Other contributors Greg Holt,\
    \ Andrew Kepert, Ydnar, Lostinet\nCopyright (c) 2010-2016 Robert Kieffer and other\
    \ contributors\nCopyright 2011 Sebastian Tschan https://blueimp.net"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/uuidjs/uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.4.0"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.4.0-vcs"
  copyrightText: "Copyright (c) 1999-2009 Paul Johnston Other contributors Greg Holt,\
    \ Andrew Kepert, Ydnar, Lostinet\nCopyright (c) 2010-2016 Robert Kieffer and other\
    \ contributors\nCopyright 2011 Sebastian Tschan https://blueimp.net"
  downloadLocation: "git+https://github.com/uuidjs/uuid.git@3df73a98f07c0a38a94bcaf1ecde0e384dc3b126"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/uuidjs/uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.4.0"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.4.0-source-artifact"
  copyrightText: "Copyright (c) 1999-2009 Paul Johnston Other contributors Greg Holt,\
    \ Andrew Kepert, Ydnar, Lostinet\nCopyright (c) 2010-2016 Robert Kieffer and other\
    \ contributors\nCopyright 2011 Sebastian Tschan https://blueimp.net"
  downloadLocation: "https://registry.npmjs.org/uuid/-/uuid-3.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/uuidjs/uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.4.0"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/kemitchell/validate-npm-package-license.js.git@6bbe26201fa7e5c7281516b04b9f3f4cc6db145c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-vary-1.0.1"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-vary-1.0.1-vcs"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/vary.git@650282ff8e614731837040a23e10f51c20728392"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-vary-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/vary/-/vary-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-vary-1.1.2"
  copyrightText: "Copyright (c) 2014-2017 Douglas Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vary-1.1.2-vcs"
  copyrightText: "Copyright (c) 2014-2017 Douglas Christopher Wilson"
  downloadLocation: "git+https://github.com/jshttp/vary.git@4067e646233fbc8ec9e7a9cd78d6f063c6fdc17e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vary-1.1.2-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Douglas Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0"
  copyrightText: "Copyright (c) 2014 Joyent, Inc.\nCopyright (c) 2016 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0-vcs"
  copyrightText: "Copyright (c) 2014 Joyent, Inc.\nCopyright (c) 2016 Joyent, Inc."
  downloadLocation: "git+https://github.com/davepacheco/node-verror.git@ecddeda07827742bd2c598033a02f4c42a6fdc26"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Joyent, Inc.\nCopyright (c) 2016 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-vhost-3.0.2"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vhost@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/vhost"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vhost"
  summary: "virtual domain hosting"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-vhost-3.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson"
  downloadLocation: "git+https://github.com/expressjs/vhost.git@2dff3f358265380328067d1ffc91e342b665f586"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vhost@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/vhost"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vhost"
  summary: "virtual domain hosting"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-vhost-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson"
  downloadLocation: "https://registry.npmjs.org/vhost/-/vhost-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vhost@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/vhost"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vhost"
  summary: "virtual domain hosting"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-which-1.0.9"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.0.9"
- SPDXID: "SPDXRef-Package-NPM-which-1.0.9-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-which.git@df3d52a0ecd5f366d550e0f14d67ca4d5e621bad"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.0.9"
- SPDXID: "SPDXRef-Package-NPM-which-1.0.9-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/which/-/which-1.0.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.0.9"
- SPDXID: "SPDXRef-Package-NPM-window-size-0.1.0"
  copyrightText: "Copyright (c) 2014 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/window-size@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/window-size"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "window-size"
  summary: "Reliable way to to get the height and width of the terminal/console in\
    \ a node.js environment."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-window-size-0.1.0-vcs"
  copyrightText: "Copyright (c) 2014 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/window-size.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/window-size@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/window-size"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "window-size"
  summary: "Reliable way to to get the height and width of the terminal/console in\
    \ a node.js environment."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-window-size-0.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/window-size/-/window-size-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/window-size@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/window-size"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "window-size"
  summary: "Reliable way to to get the height and width of the terminal/console in\
    \ a node.js environment."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-wordwrap-0.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wordwrap@0.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-wordwrap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT OR X11"
  name: "wordwrap"
  summary: "Wrap those words. Show them at what columns to start and stop."
  versionInfo: "0.0.2"
- SPDXID: "SPDXRef-Package-NPM-wordwrap-0.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/node-wordwrap.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wordwrap@0.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-wordwrap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wordwrap"
  summary: "Wrap those words. Show them at what columns to start and stop."
  versionInfo: "0.0.2"
- SPDXID: "SPDXRef-Package-NPM-wordwrap-0.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/wordwrap/-/wordwrap-0.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wordwrap@0.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-wordwrap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wordwrap"
  summary: "Wrap those words. Show them at what columns to start and stop."
  versionInfo: "0.0.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-3.10.0"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)\ncopyright 2015\
    \ Missing"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs@3.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/bcoe/yargs#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "yargs"
  summary: "Light-weight option parsing with an argv hash. No optstrings attached."
  versionInfo: "3.10.0"
- SPDXID: "SPDXRef-Package-NPM-yargs-3.10.0-vcs"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)\ncopyright 2015\
    \ Missing"
  downloadLocation: "git+ssh://github.com/bcoe/yargs.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs@3.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/bcoe/yargs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs"
  summary: "Light-weight option parsing with an argv hash. No optstrings attached."
  versionInfo: "3.10.0"
- SPDXID: "SPDXRef-Package-NPM-yargs-3.10.0-source-artifact"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)\ncopyright 2015\
    \ Missing"
  downloadLocation: "https://registry.npmjs.org/yargs/-/yargs-3.10.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs@3.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/bcoe/yargs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs"
  summary: "Light-weight option parsing with an argv hash. No optstrings attached."
  versionInfo: "3.10.0"
relationships:
- spdxElementId: "SPDXRef-Package-NPM-abbrev-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-abbrev-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.2.13"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.2.13"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.5.3"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.2.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.2.13-vcs"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.2.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.2.13-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.6.3"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.3.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.3.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ajv-4.11.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-co-4.6.0"
- spdxElementId: "SPDXRef-Package-NPM-ajv-4.11.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-ajv-4.11.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-4.11.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ajv-4.11.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-4.11.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-align-text-0.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-kind-of-3.2.2"
- spdxElementId: "SPDXRef-Package-NPM-align-text-0.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-longest-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-align-text-0.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeat-string-1.6.1"
- spdxElementId: "SPDXRef-Package-NPM-align-text-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-align-text-0.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-align-text-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-align-text-0.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-amdefine-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-amdefine-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-amdefine-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-amdefine-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-2.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-2.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-argparse-0.1.16"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.7.0"
- spdxElementId: "SPDXRef-Package-NPM-argparse-0.1.16"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.4.0"
- spdxElementId: "SPDXRef-Package-NPM-argparse-0.1.16"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-0.1.16-vcs"
- spdxElementId: "SPDXRef-Package-NPM-argparse-0.1.16"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-0.1.16-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-find-index-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-find-index-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-find-index-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-find-index-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asap-2.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asap-2.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asap-2.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asap-2.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-0.1.22"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.1.22-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-0.1.22"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.1.22-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-0.2.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.2.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-0.2.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.2.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.9.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-1.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-1.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-1.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-1.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-2.6.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.21"
- spdxElementId: "SPDXRef-Package-NPM-async-2.6.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-2.6.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-2.6.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-2.6.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-aws-sign2-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-aws-sign2-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-aws4-1.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.12.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-aws4-1.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-base64-url-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-base64-url-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-base64-url-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-base64-url-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-basic-auth-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-basic-auth-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-basic-auth-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-basic-auth-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-batch-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-batch-0.5.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-batch-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-batch-0.5.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.11"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-raw-body-2.1.7"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-body-parser-1.13.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.13.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-body-parser-1.13.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-boom-2.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hoek-2.16.3"
- spdxElementId: "SPDXRef-Package-NPM-boom-2.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-boom-2.10.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-boom-2.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-boom-2.10.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bower-1.8.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bower-1.8.14-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bower-1.8.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bower-1.8.14-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-browserify-zlib-0.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pako-0.2.9"
- spdxElementId: "SPDXRef-Package-NPM-browserify-zlib-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-browserify-zlib-0.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-browserify-zlib-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-browserify-zlib-0.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-buffer-from-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-buffer-from-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bytes-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bytes-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bytes-2.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bytes-2.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-caseless-0.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-caseless-0.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-center-align-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-align-text-0.1.4"
- spdxElementId: "SPDXRef-Package-NPM-center-align-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lazy-cache-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-center-align-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-center-align-0.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-center-align-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-center-align-0.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-0.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chalk-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-0.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cliui-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-center-align-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-cliui-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-right-align-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-cliui-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wordwrap-0.0.2"
- spdxElementId: "SPDXRef-Package-NPM-cliui-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cliui-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cliui-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cliui-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-co-4.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-co-4.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-co-4.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-co-4.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-coffee-script-1.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-coffee-script-1.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-coffee-script-1.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-coffee-script-1.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-colors-0.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-colors-0.6.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-colors-0.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-colors-0.6.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-compressible-2.0.18"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0"
- spdxElementId: "SPDXRef-Package-NPM-compressible-2.0.18"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-compressible-2.0.18-vcs"
- spdxElementId: "SPDXRef-Package-NPM-compressible-2.0.18"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-compressible-2.0.18-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.2.13"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-compressible-2.0.18"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-compression-1.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-compression-1.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-compression-1.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-typedarray-0.0.6"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-stream-1.6.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-1.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-stream-1.6.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-basic-auth-connect-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-body-parser-1.13.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-parser-1.3.5"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-compression-1.5.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-csurf-1.8.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-errorhandler-1.4.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-express-session-1.11.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-finalhandler-0.4.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-method-override-2.3.10"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-morgan-1.6.1"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-multiparty-3.3.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-response-time-2.3.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-index-1.7.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-static-1.10.3"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vhost-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-2.30.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-connect-2.30.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-2.30.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-connect-livereload-0.5.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-livereload-0.5.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-connect-livereload-0.5.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-livereload-0.5.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.1"
- spdxElementId: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-timeout-1.6.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-connect-timeout-1.6.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-timeout-1.6.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-content-type-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-content-type-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cookie-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cookie-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cookie-parser-1.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-cookie-parser-1.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-cookie-parser-1.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-parser-1.3.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cookie-parser-1.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-parser-1.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-crc-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-crc-3.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-crc-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-crc-3.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cryptiles-2.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-boom-2.10.1"
- spdxElementId: "SPDXRef-Package-NPM-cryptiles-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cryptiles-2.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cryptiles-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cryptiles-2.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-csrf-3.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rndm-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-csrf-3.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsscmp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-csrf-3.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uid-safe-2.1.4"
- spdxElementId: "SPDXRef-Package-NPM-csrf-3.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-csrf-3.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-csrf-3.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-csrf-3.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-csurf-1.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-csurf-1.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-csurf-1.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-csurf-1.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-csrf-3.0.6"
- spdxElementId: "SPDXRef-Package-NPM-csurf-1.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-csurf-1.8.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-csurf-1.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-csurf-1.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-find-index-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-0.7.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-0.7.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-0.7.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-0.7.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.1"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-decamelize-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-decamelize-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-depd-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-depd-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-depd-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-depd-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-destroy-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-destroy-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ee-first-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ee-first-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ee-first-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ee-first-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-errno-0.1.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-prr-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-errno-0.1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-errno-0.1.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-errno-0.1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-errno-0.1.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-errorhandler-1.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.3.8"
- spdxElementId: "SPDXRef-Package-NPM-errorhandler-1.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-errorhandler-1.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-errorhandler-1.4.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-errorhandler-1.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-errorhandler-1.4.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-html-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-html-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-html-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-html-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-esprima-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-esprima-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-etag-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-etag-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-eventemitter2-0.4.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-eventemitter2-0.4.14-vcs"
- spdxElementId: "SPDXRef-Package-NPM-eventemitter2-0.4.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-eventemitter2-0.4.14-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-exit-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-exit-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-exit-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-exit-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-crc-3.3.0"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uid-safe-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-express-session-1.11.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-express-session-1.11.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-express-session-1.11.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extend-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extend-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-faye-websocket-0.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-faye-websocket-0.4.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-faye-websocket-0.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-faye-websocket-0.4.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-figures-1.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-figures-1.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1"
- spdxElementId: "SPDXRef-Package-NPM-figures-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-figures-1.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-figures-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-figures-1.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-finalhandler-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-finalhandler-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-findup-sync-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.2.11"
- spdxElementId: "SPDXRef-Package-NPM-findup-sync-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-findup-sync-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-findup-sync-0.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-findup-sync-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-findup-sync-0.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fresh-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fresh-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gaze-0.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-globule-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-gaze-0.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gaze-0.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gaze-0.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gaze-0.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-get-stdin-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-get-stdin-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-getobject-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getobject-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-getobject-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getobject-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.1.21"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.2.14"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.1.21"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-1.2.3"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.1.21"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.1.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.1.21-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.1.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.1.21-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.2.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.2.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.2.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.2.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-3.2.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.2.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-globule-0.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-globule-0.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.1.21"
- spdxElementId: "SPDXRef-Package-NPM-globule-0.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.2.14"
- spdxElementId: "SPDXRef-Package-NPM-globule-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-globule-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-globule-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-globule-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-1.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-1.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.2.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.2.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-findup-sync-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-3.1.21"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.2.14"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.1.22"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-coffee-script-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-colors-0.6.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dateformat-1.0.2-1.2.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-eventemitter2-0.4.14"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hooker-0.2.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.2.11"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.2.8"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-0.9.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.2.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.0.9"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-exit-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-getobject-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-0.4.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-0.4.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-0.4.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10"
- spdxElementId: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-findup-sync-0.1.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-0.3.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-cli-0.1.13-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-cli-0.1.13-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-0.5.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.9.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-2.30.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-connect-livereload-0.5.4"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-opn-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-portscanner-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-file-sync-cmp-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-2.6.4"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.21"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-less-2.7.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-3.10.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-maxmin-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uglify-js-2.8.29"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-path-0.0.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gaze-0.5.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.2.10"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-colors-0.6.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hooker-0.2.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.3.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-log-0.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-colors-0.6.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.3.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-log-utils-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-0.1.22"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hooker-0.2.3"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-0.9.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.2.1"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.0.9"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-exit-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-getobject-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-legacy-util-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gzip-size-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-stream-1.6.2"
- spdxElementId: "SPDXRef-Package-NPM-gzip-size-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-browserify-zlib-0.1.4"
- spdxElementId: "SPDXRef-Package-NPM-gzip-size-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gzip-size-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gzip-size-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gzip-size-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-har-schema-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-har-schema-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-4.11.8"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-4.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-4.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-4.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-4.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-4.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-0.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-hawk-3.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hoek-2.16.3"
- spdxElementId: "SPDXRef-Package-NPM-hawk-3.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-boom-2.10.1"
- spdxElementId: "SPDXRef-Package-NPM-hawk-3.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cryptiles-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-hawk-3.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sntp-1.0.9"
- spdxElementId: "SPDXRef-Package-NPM-hawk-3.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hawk-3.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-hawk-3.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hawk-3.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-hoek-2.16.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hoek-2.16.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-hoek-2.16.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hoek-2.16.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-hooker-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hooker-0.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-hooker-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hooker-0.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-hosted-git-info-2.8.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-hosted-git-info-2.8.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-1.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-1.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-1.5.0"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.2"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.17.0"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.2.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.2.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.2.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.2.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.13-vcs"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.13-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-image-size-0.5.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-image-size-0.5.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-image-size-0.5.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-image-size-0.5.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-indent-string-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeating-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-indent-string-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-indent-string-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-indent-string-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-indent-string-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-buffer-1.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-1.1.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-buffer-1.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-1.1.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-core-module-2.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-is-core-module-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-core-module-2.11.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-core-module-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-core-module-2.11.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-finite-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-finite-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-finite-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-finite-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isarray-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isarray-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isstream-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isstream-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-2.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-0.1.16"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-2.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-2.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-2.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsbn-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsbn-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsonify-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stable-stringify-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsonify-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsonify-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsonify-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsonify-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.4.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-kind-of-3.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-1.1.6"
- spdxElementId: "SPDXRef-Package-NPM-kind-of-3.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-kind-of-3.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-kind-of-3.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-kind-of-3.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lazy-cache-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lazy-cache-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lazy-cache-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lazy-cache-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-errno-0.1.8"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.11"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-image-size-0.5.5"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.6"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-promise-7.3.1"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.5.7"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.81.0"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-less-2.7.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-less-2.7.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-less-2.7.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.11"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-0.9.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-0.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-0.9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-2.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-2.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-3.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-3.10.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-3.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-3.10.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.21-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.21-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-longest-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-longest-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-longest-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-longest-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.7"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-loud-rejection-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-loud-rejection-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lru-cache-2.7.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-2.7.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lru-cache-2.7.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-2.7.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-map-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-map-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-maxmin-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-maxmin-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-figures-1.7.0"
- spdxElementId: "SPDXRef-Package-NPM-maxmin-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gzip-size-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-maxmin-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pretty-bytes-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-maxmin-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-maxmin-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-maxmin-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-maxmin-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-media-typer-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-media-typer-0.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-media-typer-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-media-typer-0.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.8"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-redent-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-meow-3.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-meow-3.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-method-override-2.3.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-method-override-2.3.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9"
- spdxElementId: "SPDXRef-Package-NPM-method-override-2.3.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-methods-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-method-override-2.3.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-method-override-2.3.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-method-override-2.3.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-method-override-2.3.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-method-override-2.3.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-methods-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-methods-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-methods-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-methods-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.3.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.3.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.52.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.52.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.35"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.35"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.35"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.2.14"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-2.7.3"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.2.14"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sigmund-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.2.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.2.14-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.2.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.2.14-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-2.7.3"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sigmund-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-0.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.8"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-basic-auth-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-morgan-1.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-morgan-1.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-morgan-1.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-0.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-0.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-0.7.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-0.7.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-multiparty-3.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.1.14"
- spdxElementId: "SPDXRef-Package-NPM-multiparty-3.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-counter-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-multiparty-3.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-multiparty-3.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-multiparty-3.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-multiparty-3.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-negotiator-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.5.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-negotiator-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.5.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-negotiator-0.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.6.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-negotiator-0.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-nopt-1.0.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-nopt-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-nopt-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-nopt-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-nopt-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-nopt-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-noptify-0.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-noptify-0.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-noptify-0.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-noptify-0.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-noptify-0.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.9"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.22.2"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-oauth-sign-0.8.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.8.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-oauth-sign-0.8.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.8.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object-assign-4.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object-assign-4.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-on-finished-2.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ee-first-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-on-finished-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-on-finished-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-on-headers-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-on-headers-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-opn-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-opn-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-opn-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-opn-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pako-0.2.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pako-0.2.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pako-0.2.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pako-0.2.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parseurl-1.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parseurl-1.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.11"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pause-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pause-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-performance-now-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-performance-now-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pify-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pify-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-portscanner-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-1.5.2"
- spdxElementId: "SPDXRef-Package-NPM-portscanner-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-portscanner-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-portscanner-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-portscanner-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pretty-bytes-1.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-pretty-bytes-1.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-meow-3.7.0"
- spdxElementId: "SPDXRef-Package-NPM-pretty-bytes-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pretty-bytes-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pretty-bytes-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pretty-bytes-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-process-nextick-args-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-process-nextick-args-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-promise-7.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asap-2.0.6"
- spdxElementId: "SPDXRef-Package-NPM-promise-7.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-promise-7.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-promise-7.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-promise-7.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-prr-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-prr-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-prr-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-prr-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-punycode-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-punycode-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-qs-0.5.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-0.5.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-qs-0.5.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-0.5.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-qs-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-qs-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-random-bytes-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-random-bytes-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-random-bytes-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-random-bytes-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-range-parser-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-range-parser-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.1.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-2.4.0"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.1.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.13"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.1.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-raw-body-2.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-raw-body-2.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-0.10.31"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.1.14-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.1.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.1.14-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-indent-string-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-indent-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-redent-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-redent-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-repeat-string-1.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeat-string-1.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-repeat-string-1.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeat-string-1.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-repeating-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-finite-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-repeating-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeating-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-repeating-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeating-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.6.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.12.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.1.4"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-4.2.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hawk-3.1.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.8.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.4.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stringstream-0.0.6"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.3.4"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.4.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.81.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-request-2.81.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.81.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-resolve-0.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-0.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-resolve-0.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-0.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.22.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-core-module-2.11.0"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.22.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.7"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.22.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.22.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.22.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.22.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.22.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-response-time-2.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-headers-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-response-time-2.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-response-time-2.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-response-time-2.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-response-time-2.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-response-time-2.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-right-align-0.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-align-text-0.1.4"
- spdxElementId: "SPDXRef-Package-NPM-right-align-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-right-align-0.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-right-align-0.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-right-align-0.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.2.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.2.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-rndm-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rndm-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-rndm-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rndm-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.7.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.3.4"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.13.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-send-0.13.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.13.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.7.0"
- spdxElementId: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-0.7.2"
- spdxElementId: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-favicon-2.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-serve-favicon-2.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-favicon-2.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.2.13"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-batch-0.5.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-index-1.7.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-serve-index-1.7.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-index-1.7.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.10.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.10.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.10.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.13.2"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.10.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-static-1.10.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.10.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-static-1.10.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sigmund-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sigmund-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sigmund-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sigmund-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-signal-exit-3.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-signal-exit-3.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sntp-1.0.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hoek-2.16.3"
- spdxElementId: "SPDXRef-Package-NPM-sntp-1.0.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sntp-1.0.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sntp-1.0.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sntp-1.0.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-amdefine-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.5.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.5.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.5.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.5.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.13-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.6"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.17.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.17.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.17.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-statuses-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-statuses-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-statuses-1.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-1.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-statuses-1.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-1.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stream-counter-0.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.1.14"
- spdxElementId: "SPDXRef-Package-NPM-stream-counter-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-counter-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stream-counter-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-counter-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-0.10.31"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-0.10.31-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-0.10.31"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-0.10.31-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stringstream-0.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stringstream-0.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stringstream-0.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stringstream-0.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-0.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-0.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-0.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-3.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-3.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-indent-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-indent-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-preserve-symlinks-flag-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-0.5.6"
- spdxElementId: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-faye-websocket-0.4.4"
- spdxElementId: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-noptify-0.0.3"
- spdxElementId: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-0.7.4"
- spdxElementId: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tiny-lr-fork-0.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.3.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.3.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-trim-newlines-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-trim-newlines-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tsscmp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsscmp-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tsscmp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsscmp-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-media-typer-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18-vcs"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-typedarray-0.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typedarray-0.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-typedarray-0.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typedarray-0.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uglify-js-2.8.29"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.5.7"
- spdxElementId: "SPDXRef-Package-NPM-uglify-js-2.8.29"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-3.10.0"
- spdxElementId: "SPDXRef-Package-NPM-uglify-js-2.8.29"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-uglify-js-2.8.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uglify-js-2.8.29-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uglify-js-2.8.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uglify-js-2.8.29-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uglify-to-browserify-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uid-safe-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-base64-url-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-uid-safe-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uid-safe-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uid-safe-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uid-safe-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uid-safe-2.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-random-bytes-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-uid-safe-2.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uid-safe-2.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uid-safe-2.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uid-safe-2.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-underscore-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-underscore-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-underscore.string-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-underscore.string-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-underscore.string-2.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-underscore.string-2.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-underscore.string-2.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-underscore.string-2.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore.string-2.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-unpipe-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-unpipe-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uri-path-0.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-path-0.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uri-path-0.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-path-0.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-utils-merge-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-utils-merge-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uuid-3.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uuid-3.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.2.0"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.1"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vary-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vary-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vary-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vary-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vhost-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vhost-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vhost-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vhost-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-which-1.0.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.0.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-which-1.0.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.0.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-window-size-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-window-size-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-window-size-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-window-size-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-wordwrap-0.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wordwrap-0.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-wordwrap-0.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wordwrap-0.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yargs-3.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-3.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-yargs-3.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cliui-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-3.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-window-size-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-3.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-3.10.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yargs-3.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-3.10.0-source-artifact"
- spdxElementId: "SPDXRef-Project-NPM-app4mc-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bower-1.8.14"
- spdxElementId: "SPDXRef-Project-NPM-app4mc-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
- spdxElementId: "SPDXRef-Project-NPM-app4mc-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-connect-0.10.1"
- spdxElementId: "SPDXRef-Project-NPM-app4mc-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
- spdxElementId: "SPDXRef-Project-NPM-app4mc-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bower-1.8.14"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-cli-0.1.13"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-concat-0.5.1"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-copy-0.8.2"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-less-1.4.1"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-uglify-0.9.2"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-contrib-watch-0.6.1"
- spdxElementId: "SPDXRef-Project-NPM-solstice-0.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-grunt-0.4.5"
