---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-04-02T20:22:59Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://e043f6d5-c46b-4e96-bc1f-6350602761fc"
documentDescribes:
- "SPDXRef-Project-GoMod-Filewatcherd-Go.src.codewind.go.mod"
- "SPDXRef-Project-Maven-FilewatcherTestDriver-FilewatcherTestDriver-1.0.0"
- "SPDXRef-Project-Maven-MockCwctlSync-MockCwctlSync-0.0.1-SNAPSHOT"
- "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
- "SPDXRef-Project-Unmanaged-codewind-filewatchers-be2ce95e233882ba164e66851f83359e593eba8a"
packages:
- SPDXID: "SPDXRef-Project-GoMod-Filewatcherd-Go.src.codewind.go.mod"
  copyrightText: "Copyright (c) 2019-2020 IBM Corporation and others"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "Filewatcherd-Go/src/codewind/go.mod"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-Maven-FilewatcherTestDriver-FilewatcherTestDriver-1.0.0"
  copyrightText: "Copyright (c) 2019-2020 IBM Corporation"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "FilewatcherTestDriver"
  summary: "NONE"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Project-Maven-MockCwctlSync-MockCwctlSync-0.0.1-SNAPSHOT"
  copyrightText: "Copyright (c) 2019-2020 IBM Corporation"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "MockCwctlSync"
  summary: "NONE"
  versionInfo: "0.0.1-SNAPSHOT"
- SPDXID: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  copyrightText: "Copyright (c) 2019-2020 IBM Corporation and others"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "codewind-filewatcher"
  summary: "NONE"
  versionInfo: "0.11.0"
- SPDXID: "SPDXRef-Project-Unmanaged-codewind-filewatchers-be2ce95e233882ba164e66851f83359e593eba8a"
  copyrightText: "Copyright (c) 2002 Cynthia Brewer Mark Harrower and The Pennsylvania\
    \ State\nCopyright (c) 2003-2005 Tom Wu\nCopyright (c) 2003-2009 Tom Wu\nCopyright\
    \ (c) 2006 Kirill Simonov\nCopyright (c) 2006, 2009-2014 Google Inc.\nCopyright\
    \ (c) 2006, 2010, 2012 Google Inc.\nCopyright (c) 2007 Eclipse Foundation Inc.\n\
    Copyright (c) 2007 Free Software Foundation Inc.\nCopyright (c) 2007 Kris Zyp\
    \ SitePen (www.sitepen.com)\nCopyright (c) 2007-2014 Alexandru Marasteanu\nCopyright\
    \ (c) 2008 Ariel Flesler\nCopyright (c) 2008 Fair Oaks Labs Inc.\nCopyright (c)\
    \ 2008 Matsuza\nCopyright (c) 2008-2012 Charles Karney\nCopyright (c) 2008-2013\
    \ Pivotal Labs\nCopyright (c) 2009 John Resig Jorn Zaefferer\nCopyright (c) 2009\
    \ The Go Authors\nCopyright (c) 2009, 2012 The Go Authors\nCopyright (c) 2009,\
    \ 2012-2014 IBM Corp.\nCopyright (c) 2009, 2012-2014 James Halliday <mail@substack.net>\
    \ Thomas Robinson <280north.com>\nCopyright (c) 2009, 2012-2015, 2017 IBM Corp.\n\
    Copyright (c) 2009-2011 TJ Holowaychuk < tj@vision-media.ca>\nCopyright (c) 2009-2014\
    \ Stuart Knightley David Duponchel Franz Buchinger Antonio Afonso\nCopyright (c)\
    \ 2009-2014 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2009-2016 Stuart\
    \ Knightley David Duponchel Franz Buchinger Antonio Afonso\nCopyright (c) 2009-2017\
    \ TJ Holowaychuk < tj@vision-media.ca>\nCopyright (c) 2009-2020 Jeremy Ashkenas\
    \ DocumentCloud and Investigative\nCopyright (c) 2010 Benjamin Thomas Robert Kieffer\n\
    Copyright (c) 2010 Jeremy Faivre\nCopyright (c) 2010 Linden Research Inc.\nCopyright\
    \ (c) 2010 Ryan McGrath\nCopyright (c) 2010 Sencha Inc.\nCopyright (c) 2010 Yahoo!\
    \ Inc.\nCopyright (c) 2010 passive.ly LLC\nCopyright (c) 2010, 2015 Yahoo! Inc.\n\
    Copyright (c) 2010-2012 Robert Kieffer\nCopyright (c) 2010-2013 Raymond Hill\n\
    Copyright (c) 2010-2016 Charlie Robbins Jarrett Cruger & the Contributors\nCopyright\
    \ (c) 2010-2016 Robert Kieffer and other contributors\nCopyright (c) 2010-2018\
    \ Caolan McMahon\nCopyright (c) 2010-2018 Michael Bostock\nCopyright (c) 2010-2019\
    \ by Philipp Dunkel Ben Noordhuis Elan Shankar Paul Miller\nCopyright (c) 2011\
    \ Alexander Shtuchkin\nCopyright (c) 2011 Andrei Mackenzie\nCopyright (c) 2011\
    \ Debuggable Limited <felix@debuggable.com>\nCopyright (c) 2011 Einar Otto Stangvik\
    \ <einaros@gmail.com>\nCopyright (c) 2011 Felix Geisendorfer (felix@debuggable.com)\n\
    Copyright (c) 2011 Konstantin Kafer <kkaefer@gmail.com>\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 Troy Goode <troygoode@gmail.com>\nCopyright (c) 2011 by Maciej\
    \ Malecki\nCopyright (c) 2011, 2013 Troy Goode <troygoode@gmail.com>\nCopyright\
    \ (c) 2011-2012 Mark Cavage\nCopyright (c) 2011-2013 Phillip Clark\nCopyright\
    \ (c) 2011-2013 TJ Holowaychuk\nCopyright (c) 2011-2013, 2016 Joyent Inc.\nCopyright\
    \ (c) 2011-2014 Raynos\nCopyright (c) 2011-2016 by Vitaly Puzrin\nCopyright (c)\
    \ 2011-2017 JP Richardson\nCopyright (c) 2011-2017 whitequark <whitequark@whitequark.org>\n\
    Copyright (c) 2011-2019 Mariusz Nowak medikoo medikoo.com\nCopyright (c) 2011-2019\
    \ Stefan Goessner Subbu Allamaraju Mike Brevoort\nCopyright (c) 2012 Alex Ogier\n\
    Copyright (c) 2012 Artur Adib\nCopyright (c) 2012 Artur Adib <arturadib@gmail.com>\n\
    Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and contributors\n\
    Copyright (c) 2012 Google Inc.\nCopyright (c) 2012 James Halliday Josh Duff and\
    \ other contributors\nCopyright (c) 2012 Joshua Bell\nCopyright (c) 2012 LearnBoost\
    \ < tj@learnboost.com>\nCopyright (c) 2012 Nathan Cartwright <fshost@yahoo.com>\n\
    Copyright (c) 2012 Niklas von Hertzen\nCopyright (c) 2012 Peter Suranyi\nCopyright\
    \ (c) 2012 TJ Holowaychuk < tj@vision-media.ca>\nCopyright (c) 2012 The Chromium\
    \ Authors\nCopyright (c) 2012 The Go Authors\nCopyright (c) 2012 Vitaly Puzrin\n\
    Copyright (c) 2012 by Vitaly Puzrin\nCopyright (c) 2012, 2014 Ben Noordhuis <info@bnoordhuis.nl>\n\
    Copyright (c) 2012, 2014 Nathan Rajlich <nathan@tootallnate.net>\nCopyright (c)\
    \ 2012-2013 James Halliday\nCopyright (c) 2012-2014 Andris Reinman\nCopyright\
    \ (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014 Isaac Z. Schlueter\n\
    Copyright (c) 2012-2014 Raynos\nCopyright (c) 2012-2014 Roman Shtylman <shtylman@gmail.com>\n\
    Copyright (c) 2012-2015 JP Richardson <jprichardson@gmail.com>\nCopyright (c)\
    \ 2012-2016 Kristian Faeldt <faeldt_kristian@cyberagent.co.jp>\nCopyright (c)\
    \ 2012-2016 Mariusz Nowak\nCopyright (c) 2012-2018 Zongmin Lei Lei Zong Min\n\
    Copyright (c) 2012-2019 Paul Miller\nCopyright (c) 2012-2019 Thorsten Lorenz Paul\
    \ Miller\nCopyright (c) 2013 Alex Fernandez\nCopyright (c) 2013 Dario Castane\n\
    Copyright (c) 2013 Deoxxa Development\nCopyright (c) 2013 Dominic Tarr\nCopyright\
    \ (c) 2013 Gareth Jones\nCopyright (c) 2013 GoInstant Inc. a salesforce.com company\n\
    Copyright (c) 2013 Julian Gruber\nCopyright (c) 2013 Julian Gruber <julian@juliangruber.com>\n\
    Copyright (c) 2013 Masayuki Tanaka\nCopyright (c) 2013 Max Ogden\nCopyright (c)\
    \ 2013 Nathan Rajlich\nCopyright (c) 2013 Raynos\nCopyright (c) 2013 Roman Shtylman\
    \ <shtylman@gmail.com>\nCopyright (c) 2013 Sergio Garcia <sgmonda@gmail.com>\n\
    Copyright (c) 2013 Steve King\nCopyright (c) 2013 Ted Unangst <tedu@openbsd.org>\n\
    Copyright (c) 2013 Thiago de Arruda\nCopyright (c) 2013 Trent Mick\nCopyright\
    \ (c) 2013 Troy Goode <troygoode@gmail.com>\nCopyright (c) 2013 present Facebook\
    \ Inc.\nCopyright (c) 2013, 2017 Braveg1rl\nCopyright (c) 2013-2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2013-2014 Rase\nCopyright (c) 2013-2014\
    \ Roman Shtylman <shtylman+expressjs@gmail.com>\nCopyright (c) 2013-2014 present\
    \ Facebook Inc.\nCopyright (c) 2013-2015 Brian J. Brennan\nCopyright (c) 2013-2015\
    \ Facebook Inc.\nCopyright (c) 2013-2016 Brian J. Brennan\nCopyright (c) 2013-2016\
    \ Forrest L Norvell <ogd@aoaioxxysz.net>\nCopyright (c) 2013-2017 Jared Hanson\n\
    Copyright (c) 2013-2017 Mariusz Nowak (www.medikoo.com)\nCopyright (c) 2013-2017\
    \ by Andrea Giammarchi\nCopyright (c) 2013-2017, 2019-2020 Jordan Harband\nCopyright\
    \ (c) 2013-2019 Alex Fernandez <alexfernandeznpm@gmail.com>\nCopyright (c) 2013-2019\
    \ Forrest L Norvell\nCopyright (c) 2013-2019 Mariusz Nowak medikoo medikoo.com\n\
    Copyright (c) 2013-2019 bl contributors\nCopyright (c) 2014 Adam Paszke\nCopyright\
    \ (c) 2014 Arnout Kazemier\nCopyright (c) 2014 Automattic Inc.\nCopyright (c)\
    \ 2014 Blake Embrey (hello@blakeembrey.com)\nCopyright (c) 2014 Component\nCopyright\
    \ (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014 Evan Wallace\nCopyright\
    \ (c) 2014 Gabriel Llamas\nCopyright (c) 2014 Guillermo Rauch <guillermo@learnboost.com>\n\
    Copyright (c) 2014 Jameson Little\nCopyright (c) 2014 Jeremie Miller\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com\nCopyright (c) 2014 Kevin Roark\nCopyright (c) 2014 Krishna\
    \ Raman <kraman@gmail.com>\nCopyright (c) 2014 Mathias Buus\nCopyright (c) 2014\
    \ Matthew Conlen\nCopyright (c) 2014 Mike Hall Digital Design Labs\nCopyright\
    \ (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) 2014 Stefan\
    \ Thomas\nCopyright (c) 2014 StrongLoop Inc.\nCopyright (c) 2014 Yehuda Katz Tom\
    \ Dale Stefan Penner and contributors\nCopyright (c) 2014 object-hash contributors\n\
    Copyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2014 present Sebastian\
    \ McKenzie and other contributors\nCopyright (c) 2014, 2016 Guillermo Rauch\n\
    Copyright (c) 2014, 2016-2017 Jon Schlinkert\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014-2015 Gal Koren\n\
    Copyright (c) 2014-2015 Rebecca Turner <me@re-becca.org>\nCopyright (c) 2014-2015,\
    \ 2017 present Jon Schlinkert\nCopyright (c) 2014-2015, 2017-2018 Mathias Buus\n\
    Copyright (c) 2014-2016 Douglas Christopher Wilson\nCopyright (c) 2014-2016 Jonathan\
    \ Ong me@jongleberry.com and Contributors\nCopyright (c) 2014-2016 Michael Bostock\n\
    Copyright (c) 2014-2016 by Vitaly Puzrin\nCopyright (c) 2014-2017 Chen Yi-Cyuan\n\
    Copyright (c) 2014-2017 Douglas Christopher Wilson\nCopyright (c) 2014-2017 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014-2018 Automattic\
    \ <dev@cloudup.com>\nCopyright (c) 2014-2018 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2014-2018 Simon Lydell\nCopyright\
    \ (c) 2014-2018 Tyler Kellen <tyler@sleekcode.net> Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ and Eric Schoffstall <yo@contra.io>\nCopyright (c) 2015 Andreas Lubbe\nCopyright\
    \ (c) 2015 Andres Suarez <zertosh@gmail.com>\nCopyright (c) 2015 Auth0 Inc. <support@auth0.com>\n\
    Copyright (c) 2015 Calvin Metcalf\nCopyright (c) 2015 Dmitry Ivanov\nCopyright\
    \ (c) 2015 Gal Koren\nCopyright (c) 2015 Inaki Baz Castillo <ibc@aliax.net>\n\
    Copyright (c) 2015 Jason Quense\nCopyright (c) 2015 Javier Blanco\nCopyright (c)\
    \ 2015 Jed Watson <jed.watson@me.com>\nCopyright (c) 2015 Jose F. Romaniello\n\
    Copyright (c) 2015 Lao Lei\nCopyright (c) 2015 Rebecca Turner\nCopyright (c) 2015\
    \ Rebecca Turner <me@re-becca.org>\nCopyright (c) 2015 Rod Vagg\nCopyright (c)\
    \ 2015 Scott Motte\nCopyright (c) 2015 Tiancheng Timothy Gu\nCopyright (c) 2015\
    \ Tyler Kellen\nCopyright (c) 2015 Unshift.io Arnout Kazemier\nCopyright (c) 2015\
    \ Wes Todd\nCopyright (c) 2015 Yahoo! Inc.\nCopyright (c) 2015 present Dan Abramov\n\
    Copyright (c) 2015, 2017 IBM Corp.\nCopyright (c) 2015, 2018 Ahmad Nassri <ahmad@ahmadnassri.com>\n\
    Copyright (c) 2015, 2018 Salesforce.com Inc.\nCopyright (c) 2015, 2019 Elan Shanker\n\
    Copyright (c) 2015, 2020 Filip Skokan\nCopyright (c) 2015-2016 Contributors\n\
    Copyright (c) 2015-2016 David Clark\nCopyright (c) 2015-2016 Douglas Christopher\
    \ Wilson <doug@somethingdoug.com>\nCopyright (c) 2015-2016 Zongmin Lei Lei Zong\
    \ Min\nCopyright (c) 2015-2016, 2018, 2020 Filip Skokan\nCopyright (c) 2015-2016,\
    \ 2019 Jordan Harband\nCopyright (c) 2015-2017 Evgeny Poberezkin\nCopyright (c)\
    \ 2016 Alex Indigo\nCopyright (c) 2016 Ben Noordhuis <info@bnoordhuis.nl>\nCopyright\
    \ (c) 2016 David Frank\nCopyright (c) 2016 Diego Rodriguez Baquero\nCopyright\
    \ (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright (c)\
    \ 2016 Eugene Rodionov\nCopyright (c) 2016 Filip Skokan\nCopyright (c) 2016 GoDaddy\
    \ Operating Company LLC.\nCopyright (c) 2016 Joyent Inc.\nCopyright (c) 2016 Rogier\
    \ Schouten <github@workingcode.ninja>\nCopyright (c) 2016 json-iterator\nCopyright\
    \ (c) 2016, 2018 Linus Unneback\nCopyright (c) 2016, 2019 Jordan Harband\nCopyright\
    \ (c) 2016-2017 ZEIT Inc.\nCopyright (c) 2017 Evgeny Poberezkin\nCopyright (c)\
    \ 2017 Gregory Petrosyan\nCopyright (c) 2017 Jed Watson\nCopyright (c) 2017 Khaled\
    \ Al-Ansari\nCopyright (c) 2017 Luke Childs\nCopyright (c) 2017 Lupo Montero <lupomontero@gmail.com>\n\
    Copyright (c) 2017 Mathias Buus\nCopyright (c) 2017 NAN contributors\nCopyright\
    \ (c) 2017 PayPal\nCopyright (c) 2017 Samuel Reed <samuel.trace.reed@gmail.com>\n\
    Copyright (c) 2017 present Jon Schlinkert\nCopyright (c) 2017, 2020 Ryan Zimmerman\
    \ <opensrc@ryanzim.com>\nCopyright (c) 2017-2018 Fredrik Nicol\nCopyright (c)\
    \ 2017-2019 James Kyle <me@thejameskyle.com>\nCopyright (c) 2018 Andrea Giammarchi\n\
    Copyright (c) 2018 NAN WG Members Collaborators\nCopyright (c) 2018 NAN contributors\n\
    Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>\nCopyright (c) 2018 React\
    \ Community\nCopyright (c) 2018 Silas Boyd-Wickizer\nCopyright (c) 2018 Zejin\
    \ Zhuang <heineiuo@gmail.com>\nCopyright (c) 2018-2019 Szymon Marczak\nCopyright\
    \ (c) 2019 Alexander Reardon\nCopyright (c) 2019 Elan Shanker Paul Miller\nCopyright\
    \ (c) 2019 IBM Corporation and others\nCopyright (c) 2019 Inspect JS\nCopyright\
    \ (c) 2019 Jordan Harband\nCopyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com>\n\
    Copyright (c) 2019 present StringEpsilon <StringEpsilon@gmail.com>\nCopyright\
    \ (c) 2019-2020 IBM Corporation\nCopyright (c) 2019-2020 IBM Corporation and others\n\
    Copyright (c) 2020 James Halliday (mail@substack.net) and Mathias Buus\nCopyright\
    \ (c) 2020 Ryan Zimmerman <opensrc@ryanzim.com>\nCopyright (c) 2020 i18next\n\
    Copyright (c) Ben Lesh <ben@benlesh.com>\nCopyright (c) Facebook Inc. and its\
    \ affiliates\nCopyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ and other contributors\nCopyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac\
    \ Z. Schlueter Ben Noordhuis and Contributors\nCopyright (c) Isaac Z. Schlueter\
    \ and Contributors\nCopyright (c) JS Foundation and other contributors\nCopyright\
    \ (c) Kevin Martensson <kevinmartensson@gmail.com> github.com\nCopyright (c) Microsoft\
    \ Corporation\nCopyright (c) Purpose Industries\nCopyright (c) Sam Verschueren\
    \ <sam.verschueren@gmail.com> github.com\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com>\n\
    Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\nCopyright\
    \ (c) npm Inc. and Contributors\nCopyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>\n\
    Copyright 2001 Robert Penner\nCopyright 2006-2011 the V8 project authors\nCopyright\
    \ 2007-2017 IBM Corp.\nCopyright 2007-2018 IBM Corp.\nCopyright 2008 Fair Oaks\
    \ Labs Inc.\nCopyright 2009 The Go Authors\nCopyright 2009-2013, 2015-2016, 2018\
    \ The Go Authors\nCopyright 2009-2016 Jeremy Ashkenas DocumentCloud and Investigative\
    \ Reporters & Editors\nCopyright 2010 James Halliday (mail@substack.net)\nCopyright\
    \ 2010 LearnBoost <dev@learnboost.com>\nCopyright 2010-2012 Mikeal Rogers\nCopyright\
    \ 2010-2013, 2015-2016, 2018 The Go Authors\nCopyright 2010-2015 Brian McKelvey\n\
    Copyright 2010-2016 Mike Bostock\nCopyright 2010-2018 Mike Bostock\nCopyright\
    \ 2011 Gary Court\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\nCopyright 2011\
    \ Sebastian Tschan\nCopyright 2011-2016 Canonical Ltd.\nCopyright 2011-2019 The\
    \ Bootstrap Authors\nCopyright 2011-2019 Twitter Inc.\nCopyright 2012, 2015-2018\
    \ Joyent Inc\nCopyright 2012-2016 JP Richardson <jprichardson@gmail.com>\nCopyright\
    \ 2012-2016 The Dojo Foundation\nCopyright 2013 Michael Hart (michael.hart.au@gmail.com)\n\
    Copyright 2013 The Chromium Authors\nCopyright 2013-2014 Dario Castane\nCopyright\
    \ 2013-2014 Google Inc.\nCopyright 2013-2014, 2017 Google Inc.\nCopyright 2013-2015\
    \ Facebook Inc.\nCopyright 2014 Brian White\nCopyright 2014 Contributors (ben@npmjs.com)\n\
    Copyright 2014 Julien Fontanet\nCopyright 2014 StrongLoop Inc.\nCopyright 2014\
    \ present Olivier Lalonde <olalonde@gmail.com> James Talmage <james@talmage.io>\
    \ Ruben Verborgh\nCopyright 2014, 2016 Red Hat Inc.\nCopyright 2014, 2016-2017\
    \ Red Hat Inc.\nCopyright 2014, 2017 Google Inc.\nCopyright 2014-2015 Facebook\
    \ Inc.\nCopyright 2014-2017 The Kubernetes Authors\nCopyright 2014-2018 Simon\
    \ Lydell\nCopyright 2015 Calvin Metcalf\nCopyright 2015 D2L Corporation\nCopyright\
    \ 2015 Gareth Jones\nCopyright 2015 Yahoo! Inc.\nCopyright 2015, 2017 IBM Corp.\n\
    Copyright 2016 Copyright (c) Josef Frohle\nCopyright 2016 Joyent Inc\nCopyright\
    \ 2016 Joyent Inc.\nCopyright 2016 Trent Mick\nCopyright 2016 omr-agent contributors\n\
    Copyright 2016-2018 Kornel Lesinski\nCopyright 2017 Brett Epps\nCopyright 2017\
    \ IBM\nCopyright 2017 Refael Ackermann\nCopyright 2017 The Kubernetes Authors\n\
    Copyright 2018 Santeri Hiltunen\nCopyright 2018 Stefan Penner\nCopyright 2019\
    \ David Mark Clements <david.mark.clements@gmail.com>\nPortions Copyright (c)\
    \ 2009 The Go\ncopyright 2009-2016 Jeremy Ashkenas"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "codewind-filewatchers"
  summary: "NONE"
  versionInfo: "be2ce95e233882ba164e66851f83359e593eba8a"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.15.0-rc2/jackson-annotations-2.15.0-rc2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2-vcs"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-annotations.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2-source-artifact"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.15.0-rc2/jackson-annotations-2.15.0-rc2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright\
    \ 2018-2020 Raffaello Giulietti"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.15.0-rc2/jackson-core-2.15.0-rc2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2-vcs"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright\
    \ 2018-2020 Raffaello Giulietti"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2-source-artifact"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright\
    \ 2018-2020 Raffaello Giulietti"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.15.0-rc2/jackson-core-2.15.0-rc2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright\
    \ 2010-2011 Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.15.0-rc2/jackson-databind-2.15.0-rc2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2-vcs"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright\
    \ 2010-2011 Google Inc."
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-databind.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2-source-artifact"
  copyrightText: "Copyright 2007 Tatu Saloranta (tatu.saloranta@iki.fi)\nCopyright\
    \ 2010-2011 Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.15.0-rc2/jackson-databind-2.15.0-rc2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.15.0-rc2"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.15.0-rc2"
- SPDXID: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011-2013, 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2013,\
    \ 2016-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2018 http://www.oracle.com'\
    \ Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/jakarta/json/jakarta.json-api/1.1.5/jakarta.json-api-1.1.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/jakarta.json/jakarta.json-api@1.1.5"
  filesAnalyzed: false
  homepage: "https://javaee.github.io/jsonp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "jakarta.json-api"
  summary: "API module of JSR 374:Java API for Processing JSON"
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011-2013, 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2013,\
    \ 2016-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2018 http://www.oracle.com'\
    \ Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse-ee4j/jsonp.git@d0a11bb3a55a081c0680386debce46947261b332"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/jakarta.json/jakarta.json-api@1.1.5"
  filesAnalyzed: false
  homepage: "https://javaee.github.io/jsonp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jakarta.json-api"
  summary: "API module of JSR 374:Java API for Processing JSON"
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011-2013, 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2013,\
    \ 2016-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2018 http://www.oracle.com'\
    \ Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/jakarta/json/jakarta.json-api/1.1.5/jakarta.json-api-1.1.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/jakarta.json/jakarta.json-api@1.1.5"
  filesAnalyzed: false
  homepage: "https://javaee.github.io/jsonp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jakarta.json-api"
  summary: "API module of JSR 374:Java API for Processing JSON"
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011, 2015-2019 Oracle and/or its affiliates\nCopyright (c) YYYY Oracle\
    \ and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/jakarta/json/bind/jakarta.json.bind-api/1.0.1/jakarta.json.bind-api-1.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.1"
  filesAnalyzed: false
  homepage: "http://json-b.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "jakarta.json.bind-api"
  summary: "JSON Binding (JSON-B) is a standard binding layer for converting Java\
    \ objects to/from JSON documents."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011, 2015-2019 Oracle and/or its affiliates\nCopyright (c) YYYY Oracle\
    \ and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse-ee4j/jsonb-api.git@0529f55f87c44ebaf8ec3069bda29f69fcb44d7e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.1"
  filesAnalyzed: false
  homepage: "http://json-b.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jakarta.json.bind-api"
  summary: "JSON Binding (JSON-B) is a standard binding layer for converting Java\
    \ objects to/from JSON documents."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011, 2015-2019 Oracle and/or its affiliates\nCopyright (c) YYYY Oracle\
    \ and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/jakarta/json/bind/jakarta.json.bind-api/1.0.1/jakarta.json.bind-api-1.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/jakarta.json.bind/jakarta.json.bind-api@1.0.1"
  filesAnalyzed: false
  homepage: "http://json-b.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jakarta.json.bind-api"
  summary: "JSON Binding (JSON-B) is a standard binding layer for converting Java\
    \ objects to/from JSON documents."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1997-2013 Oracle and/or its affiliates\nCopyright 2004 The Apache Software\
    \ Foundation\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.servlet/javax.servlet-api@3.1.0"
  filesAnalyzed: false
  homepage: "http://servlet-spec.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.servlet-api"
  summary: "Java.net - The Source for Java Technology Collaboration"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1997-2013 Oracle and/or its affiliates\nCopyright 2004 The Apache Software\
    \ Foundation\ncopyrighted by the Free Software Foundation"
  downloadLocation: "svn+https://svn.java.net/svn/glassfish~svn"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.servlet/javax.servlet-api@3.1.0"
  filesAnalyzed: false
  homepage: "http://servlet-spec.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.servlet-api"
  summary: "Java.net - The Source for Java Technology Collaboration"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1997-2013 Oracle and/or its affiliates\nCopyright 2004 The Apache Software\
    \ Foundation\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/servlet/javax.servlet-api/3.1.0/javax.servlet-api-3.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.servlet/javax.servlet-api@3.1.0"
  filesAnalyzed: false
  homepage: "http://servlet-spec.java.net"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.servlet-api"
  summary: "Java.net - The Source for Java Technology Collaboration"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.12"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.12/junit-4.12.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.12"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "EPL-1.0"
  licenseDeclared: "EPL-1.0"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.12"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.12-vcs"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "git+https://github.com/junit-team/junit.git@64155f8a9babcfcf4263cf4d08253a1556e75481"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.12"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.12"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.12-source-artifact"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.12/junit-4.12-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.12"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.12"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3"
  copyrightText: "Copyright (c) 2007 Eclipse Foundation, Inc.\nCopyright (c) 2015-2018\
    \ Oracle and/or its affiliates"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/yasson/1.0.3/yasson-1.0.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse/yasson@1.0.3"
  filesAnalyzed: false
  homepage: "https://projects.eclipse.org/projects/ee4j.yasson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "yasson"
  summary: "Eclipse Yasson. Reference implementation of JSR-367 (JSON-B)."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3-vcs"
  copyrightText: "Copyright (c) 2007 Eclipse Foundation, Inc.\nCopyright (c) 2015-2018\
    \ Oracle and/or its affiliates"
  downloadLocation: "git+ssh://github.com/eclipse-ee4j/yasson.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse/yasson@1.0.3"
  filesAnalyzed: false
  homepage: "https://projects.eclipse.org/projects/ee4j.yasson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yasson"
  summary: "Eclipse Yasson. Reference implementation of JSR-367 (JSON-B)."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2007 Eclipse Foundation, Inc.\nCopyright (c) 2015-2018\
    \ Oracle and/or its affiliates"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/yasson/1.0.3/yasson-1.0.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse/yasson@1.0.3"
  filesAnalyzed: false
  homepage: "https://projects.eclipse.org/projects/ee4j.yasson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yasson"
  summary: "Eclipse Yasson. Reference implementation of JSR-367 (JSON-B)."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-client/9.4.18.v20190429/jetty-client-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-client@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-client"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-client@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-client"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-client/9.4.18.v20190429/jetty-client-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-client@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-client"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-http/9.4.18.v20190429/jetty-http-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-http@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-http"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-http@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-http"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-http/9.4.18.v20190429/jetty-http-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-http@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-http"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-io/9.4.18.v20190429/jetty-io-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-io@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-io"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-io@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-io"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-io/9.4.18.v20190429/jetty-io-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-io@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-io"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-security/9.4.18.v20190429/jetty-security-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-security@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-security"
  summary: "Jetty security infrastructure"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-security@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-security"
  summary: "Jetty security infrastructure"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-security/9.4.18.v20190429/jetty-security-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-security@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-security"
  summary: "Jetty security infrastructure"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-server/9.4.18.v20190429/jetty-server-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-server@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-server"
  summary: "The core jetty server artifact."
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-server@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-server"
  summary: "The core jetty server artifact."
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-server/9.4.18.v20190429/jetty-server-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-server@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-server"
  summary: "The core jetty server artifact."
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-servlet/9.4.18.v20190429/jetty-servlet-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-servlet"
  summary: "Jetty Servlet Container"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-servlet"
  summary: "Jetty Servlet Container"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-servlet/9.4.18.v20190429/jetty-servlet-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-servlet@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-servlet"
  summary: "Jetty Servlet Container"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-util/9.4.18.v20190429/jetty-util-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-util@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-util"
  summary: "Utility classes for Jetty"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-util@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-util"
  summary: "Utility classes for Jetty"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-util/9.4.18.v20190429/jetty-util-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-util@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-util"
  summary: "Utility classes for Jetty"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-xml/9.4.18.v20190429/jetty-xml-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "jetty-xml"
  summary: "The jetty xml utilities."
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-xml"
  summary: "The jetty xml utilities."
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/jetty-xml/9.4.18.v20190429/jetty-xml-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty/jetty-xml@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jetty-xml"
  summary: "The jetty xml utilities."
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-api/9.4.18.v20190429/websocket-api-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-api@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "websocket-api"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-api@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-api"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-api/9.4.18.v20190429/websocket-api-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-api@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-api"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-client/9.4.18.v20190429/websocket-client-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-client"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "websocket-client"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-client"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-client"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-client/9.4.18.v20190429/websocket-client-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-client@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-client"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-client"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-common/9.4.18.v20190429/websocket-common-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-common"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "websocket-common"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-common"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-common"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-common/9.4.18.v20190429/websocket-common-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-common@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-common"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-common"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-server/9.4.18.v20190429/websocket-server-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-server@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-server"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "websocket-server"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-server@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-server"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-server"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-server/9.4.18.v20190429/websocket-server-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-server@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-server"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-server"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-servlet/9.4.18.v20190429/websocket-servlet-9.4.18.v20190429.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-servlet"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR EPL-1.0"
  name: "websocket-servlet"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429-vcs"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse/jetty.project.git@e1bc35120a6617ee3df052294e433f3a25ce7097"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-servlet"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-servlet"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429-source-artifact"
  copyrightText: "(c) Aahan Krish <geekpanth3r@gmail.com>\n(c) Ivan Sagalaev <Maniac@SoftwareManiacs.Org>\n\
    (c) Vasily Polovnyov <vast@whiteants.net>\n(c) Vladimir Epifanov <voldmar@voldmar.ru>\n\
    Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright (c) 1995-2012\
    \ Sabre Holdings\nCopyright (c) 1995-2019 Mort Bay Consulting Pty. Ltd.\nCopyright\
    \ (c) 1996 Aki Yoshida\nCopyright (c) 1999-2012 QOS.ch\nCopyright (c) 1999-2013\
    \ QOS.ch\nCopyright (c) 2002 The Apache Software Foundation\nCopyright (c) 2004-2013\
    \ QOS.ch\nCopyright (c) 2008-2009 Bjoern Hoehrmann <bjoern@hoehrmann.de>\nCopyright\
    \ (c) 2008-2019 Mort Bay Consulting Pty. Ltd.\nCopyright (c) copyright-range Mort\
    \ Bay Consulting Pty. Ltd.\nCopyright 1995-2019 Mort Bay Consulting Pty Ltd\n\
    Copyright 1995-2019 Mort Bay Consulting Pty Ltd.\nCopyright 1996 Aki Yoshida\n\
    Copyright 2000-2015 Willy Tarreau <willy@haproxy.org>\nCopyright 2015 Dave Gandy\n\
    copyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/eclipse/jetty/websocket/websocket-servlet/9.4.18.v20190429/websocket-servlet-9.4.18.v20190429-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.eclipse.jetty.websocket/websocket-servlet@9.4.18.v20190429"
  filesAnalyzed: false
  homepage: "http://www.eclipse.org/jetty/websocket-servlet"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "websocket-servlet"
  summary: "The Eclipse Jetty Project"
  versionInfo: "9.4.18.v20190429"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011-2013, 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2013,\
    \ 2016-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2018 http://www.oracle.com'\
    \ Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/glassfish/jakarta.json/1.1.5/jakarta.json-1.1.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish/jakarta.json@1.1.5"
  filesAnalyzed: false
  homepage: "https://javaee.github.io/jsonp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "jakarta.json"
  summary: "Default provider for JSR 374:Java API for Processing JSON"
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011-2013, 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2013,\
    \ 2016-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2018 http://www.oracle.com'\
    \ Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse-ee4j/jsonp.git@d0a11bb3a55a081c0680386debce46947261b332"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish/jakarta.json@1.1.5"
  filesAnalyzed: false
  homepage: "https://javaee.github.io/jsonp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jakarta.json"
  summary: "Default provider for JSR 374:Java API for Processing JSON"
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 2011-2013, 2015-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2013,\
    \ 2016-2018 Oracle and/or its affiliates\nCopyright (c) 2012-2018 http://www.oracle.com'\
    \ Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/glassfish/jakarta.json/1.1.5/jakarta.json-1.1.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.glassfish/jakarta.json@1.1.5"
  filesAnalyzed: false
  homepage: "https://javaee.github.io/jsonp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jakarta.json"
  summary: "Default provider for JSR 374:Java API for Processing JSON"
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/hamcrest/JavaHamcrest.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-NPM-abbrev-1.1.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/abbrev@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/abbrev-js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "abbrev"
  summary: "Like ruby's abbrev module, but in js"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-abbrev-1.1.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter and Contributors"
  downloadLocation: "git+ssh://github.com/isaacs/abbrev-js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/abbrev@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/abbrev-js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "abbrev"
  summary: "Like ruby's abbrev module, but in js"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-abbrev-1.1.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/abbrev/-/abbrev-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/abbrev@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/abbrev-js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "abbrev"
  summary: "Like ruby's abbrev module, but in js"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-align-2.0.0"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-align@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/nexdrew/ansi-align#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "ansi-align"
  summary: "align-text with ANSI support for CLIs"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-align-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "git+https://github.com/nexdrew/ansi-align.git@b27d6251ee7b22c7350e4c39219283e3e0fa735e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-align@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/nexdrew/ansi-align#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-align"
  summary: "align-text with ANSI support for CLIs"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-align-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "https://registry.npmjs.org/ansi-align/-/ansi-align-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-align@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/nexdrew/ansi-align#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-align"
  summary: "align-text with ANSI support for CLIs"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-3.0.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-regex.git@0a8cc19946c03c38520fe8c086b8adb66f9cce0b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-3.0.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-styles.git@de7527a86c1cf49906b0eb32a0de1402d849ccc2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-anymatch-3.1.1"
  copyrightText: "Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/anymatch@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/anymatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "anymatch"
  summary: "Matches strings against configurable strings, globs, regular expressions,\
    \ and/or functions"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-anymatch-3.1.1-vcs"
  copyrightText: "Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/micromatch/anymatch.git@e0ec3c077d6fd64753b0c9f149614f78c9d54285"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/anymatch@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/anymatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "anymatch"
  summary: "Matches strings against configurable strings, globs, regular expressions,\
    \ and/or functions"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-anymatch-3.1.1-source-artifact"
  copyrightText: "Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/anymatch/-/anymatch-3.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/anymatch@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/anymatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "anymatch"
  summary: "Matches strings against configurable strings, globs, regular expressions,\
    \ and/or functions"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10-vcs"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/argparse.git@ea45e14bad13b9e4a10af28f11fb7e731079ab72"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10-source-artifact"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-async-limiter-1.0.1"
  copyrightText: "Copyright (c) 2017 Samuel Reed <samuel.trace.reed@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async-limiter@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/strml/async-limiter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async-limiter"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-async-limiter-1.0.1-vcs"
  copyrightText: "Copyright (c) 2017 Samuel Reed <samuel.trace.reed@gmail.com>"
  downloadLocation: "git+https://github.com/strml/async-limiter.git@f3bb66f26e69a5747a6483e32c775a02632020ee"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async-limiter@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/strml/async-limiter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async-limiter"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-async-limiter-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2017 Samuel Reed <samuel.trace.reed@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async-limiter@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/strml/async-limiter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async-limiter"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "git+https://github.com/alexindigo/asynckit.git@583a75ed4fe41761b66416bb6e703ebb1f8963bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/balanced-match.git@d701a549a7653a874eebce7eca25d3577dc868ac"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/binary-extensions@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/binary-extensions#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "binary-extensions"
  summary: "List of binary file extensions"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-binary-extensions-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/sindresorhus/binary-extensions.git@11e076d96c41369015cc3c338428f7f456d3a92f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/binary-extensions@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/binary-extensions#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "binary-extensions"
  summary: "List of binary file extensions"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-binary-extensions-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/binary-extensions@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/binary-extensions#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "binary-extensions"
  summary: "List of binary file extensions"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-boxen-1.3.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boxen@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/boxen#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "boxen"
  summary: "Create boxes in the terminal"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-boxen-1.3.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/boxen.git@f968a18b60af6aa05ca1ab572f7b50cb4310d013"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boxen@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/boxen#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boxen"
  summary: "Create boxes in the terminal"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-boxen-1.3.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/boxen/-/boxen-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boxen@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/boxen#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boxen"
  summary: "Create boxes in the terminal"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/brace-expansion.git@01a21de7441549d26ac0c0a9ff91385d16e5c21c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-braces-3.0.2"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/braces@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/braces"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "braces"
  summary: "Bash-like brace expansion, implemented in JavaScript. Safer than other\
    \ brace expansion libs, with complete support for the Bash 4.3 braces specification,\
    \ without sacrificing speed."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-braces-3.0.2-vcs"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/braces.git@25791512d219b284bd62bb068cae85d8e68bd05b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/braces@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/braces"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "braces"
  summary: "Bash-like brace expansion, implemented in JavaScript. Safer than other\
    \ brace expansion libs, with complete support for the Bash 4.3 braces specification,\
    \ without sacrificing speed."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-braces-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/braces@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/braces"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "braces"
  summary: "Bash-like brace expansion, implemented in JavaScript. Safer than other\
    \ brace expansion libs, with complete support for the Bash 4.3 braces specification,\
    \ without sacrificing speed."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/builtin-modules@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/builtin-modules#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "builtin-modules"
  summary: "List of the Node.js builtin modules"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-builtin-modules-1.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/builtin-modules.git@0ea253452b1d8cb3a70d16464f909dbc0bc370fe"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/builtin-modules@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/builtin-modules#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "builtin-modules"
  summary: "List of the Node.js builtin modules"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-builtin-modules-1.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/builtin-modules@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/builtin-modules#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "builtin-modules"
  summary: "List of the Node.js builtin modules"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0"
  copyrightText: "Copyright (c) 2019 Szymon Marczak"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cacheable-lookup@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/cacheable-lookup#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cacheable-lookup"
  summary: "A cacheable dns.lookup(…) that respects the TTL"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0-vcs"
  copyrightText: "Copyright (c) 2019 Szymon Marczak"
  downloadLocation: "git+https://github.com/szmarczak/cacheable-lookup.git@4c1c3a0ce02137fa81e57ac90f2f0891f7766e42"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cacheable-lookup@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/cacheable-lookup#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cacheable-lookup"
  summary: "A cacheable dns.lookup(…) that respects the TTL"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2019 Szymon Marczak"
  downloadLocation: "https://registry.npmjs.org/cacheable-lookup/-/cacheable-lookup-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cacheable-lookup@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/cacheable-lookup#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cacheable-lookup"
  summary: "A cacheable dns.lookup(…) that respects the TTL"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cacheable-request@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/cacheable-request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cacheable-request"
  summary: "Wrap native HTTP requests with RFC compliant cache support"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-cacheable-request-7.0.1-vcs"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "git+https://github.com/lukechilds/cacheable-request.git@0656a46a3573a4de09f592f1d334433d223e68b7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cacheable-request@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/cacheable-request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cacheable-request"
  summary: "Wrap native HTTP requests with RFC compliant cache support"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-cacheable-request-7.0.1-source-artifact"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "https://registry.npmjs.org/cacheable-request/-/cacheable-request-7.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cacheable-request@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/cacheable-request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cacheable-request"
  summary: "Wrap native HTTP requests with RFC compliant cache support"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-4.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-4.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase.git@0e6e4a2752aa013b8e9477145c7b8132c95a82ef"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-4.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/camelcase/-/camelcase-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/capture-stack-trace@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/capture-stack-trace#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "capture-stack-trace"
  summary: "Error.captureStackTrace ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1-vcs"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "git+https://github.com/floatdrop/capture-stack-trace.git@dfec994c80358ded25885bd3de7a138549964984"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/capture-stack-trace@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/capture-stack-trace#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "capture-stack-trace"
  summary: "Error.captureStackTrace ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1-source-artifact"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/capture-stack-trace/-/capture-stack-trace-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/capture-stack-trace@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/capture-stack-trace#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "capture-stack-trace"
  summary: "Error.captureStackTrace ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/chalk.git@9776a2ae5b5b1712ccf16416b55f47e575a81fb9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chokidar-3.3.1"
  copyrightText: "(c) Paul Miller <https://paulmillr.com>\nCopyright (c) 2012-2019\
    \ Paul Miller (https://paulmillr.com), Elan Shanker"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chokidar@3.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/chokidar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chokidar"
  summary: "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents."
  versionInfo: "3.3.1"
- SPDXID: "SPDXRef-Package-NPM-chokidar-3.3.1-vcs"
  copyrightText: "(c) Paul Miller <https://paulmillr.com>\nCopyright (c) 2012-2019\
    \ Paul Miller (https://paulmillr.com), Elan Shanker"
  downloadLocation: "git+https://github.com/paulmillr/chokidar.git@1cbbef6bf8d382433011ef295ccfaf52da6038ed"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chokidar@3.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/chokidar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chokidar"
  summary: "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents."
  versionInfo: "3.3.1"
- SPDXID: "SPDXRef-Package-NPM-chokidar-3.3.1-source-artifact"
  copyrightText: "(c) Paul Miller <https://paulmillr.com>\nCopyright (c) 2012-2019\
    \ Paul Miller (https://paulmillr.com), Elan Shanker"
  downloadLocation: "https://registry.npmjs.org/chokidar/-/chokidar-3.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chokidar@3.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/chokidar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chokidar"
  summary: "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents."
  versionInfo: "3.3.1"
- SPDXID: "SPDXRef-Package-NPM-ci-info-1.6.0"
  copyrightText: "Copyright (c) 2016-2018 Thomas Watson Steen"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ci-info@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/watson/ci-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ci-info"
  summary: "Get details about the current Continuous Integration environment"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-ci-info-1.6.0-vcs"
  copyrightText: "Copyright (c) 2016-2018 Thomas Watson Steen"
  downloadLocation: "git+https://github.com/watson/ci-info.git@3d07175c39b07090ab939471c47ef363ea74ab97"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ci-info@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/watson/ci-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ci-info"
  summary: "Get details about the current Continuous Integration environment"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-ci-info-1.6.0-source-artifact"
  copyrightText: "Copyright (c) 2016-2018 Thomas Watson Steen"
  downloadLocation: "https://registry.npmjs.org/ci-info/-/ci-info-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ci-info@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/watson/ci-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ci-info"
  summary: "Get details about the current Continuous Integration environment"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-cli-boxes-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cli-boxes@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/cli-boxes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cli-boxes"
  summary: "Boxes for use in the terminal"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-cli-boxes-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/cli-boxes.git@30c6977f9c053c2e2de7bed9395512f90cd6e5ae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cli-boxes@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/cli-boxes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cli-boxes"
  summary: "Boxes for use in the terminal"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-cli-boxes-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/cli-boxes/-/cli-boxes-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cli-boxes@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/cli-boxes"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cli-boxes"
  summary: "Boxes for use in the terminal"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-clone-response-1.0.2"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-response@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/clone-response"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "clone-response"
  summary: "Clone a Node.js HTTP response stream"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-clone-response-1.0.2-vcs"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "git+https://github.com/lukechilds/clone-response.git@857094916c5393a7ce78838a4e447fa944263cca"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-response@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/clone-response"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-response"
  summary: "Clone a Node.js HTTP response stream"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-clone-response-1.0.2-source-artifact"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "https://registry.npmjs.org/clone-response/-/clone-response-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-response@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/clone-response"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-response"
  summary: "Clone a Node.js HTTP response stream"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3-vcs"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "git+https://github.com/Qix-/color-convert.git@99dc5da127d3d17d0ff8d13a995fd2d6aab404aa"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3-source-artifact"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "git+ssh://github.com/dfcreative/color-name.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8-vcs"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "git+https://github.com/felixge/node-combined-stream.git@5298bece5aba2cf4d2f5ec84c4fc128572c41cee"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8-source-artifact"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-commander-2.6.0"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.6.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.6.0-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/commander.js.git@c6807fd154dd3b7ce8756f141f8d3acfcc74be60"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.6.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.6.0-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/commander/-/commander-2.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.6.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.20.3"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.20.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.20.3"
- SPDXID: "SPDXRef-Package-NPM-commander-2.20.3-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/commander.js.git@6b8499b24f4f6498ad630c50c8a00c9579a8536b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.20.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.20.3"
- SPDXID: "SPDXRef-Package-NPM-commander-2.20.3-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.20.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.20.3"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/node-concat-map.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concurrently-3.6.1"
  copyrightText: "Copyright (c) 2015 Kimmo Brunfeldt"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concurrently@3.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/kimmobrunfeldt/concurrently"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "concurrently"
  summary: "Run commands concurrently"
  versionInfo: "3.6.1"
- SPDXID: "SPDXRef-Package-NPM-concurrently-3.6.1-vcs"
  copyrightText: "Copyright (c) 2015 Kimmo Brunfeldt"
  downloadLocation: "git+https://github.com/kimmobrunfeldt/concurrently.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concurrently@3.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/kimmobrunfeldt/concurrently"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concurrently"
  summary: "Run commands concurrently"
  versionInfo: "3.6.1"
- SPDXID: "SPDXRef-Package-NPM-concurrently-3.6.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Kimmo Brunfeldt"
  downloadLocation: "https://registry.npmjs.org/concurrently/-/concurrently-3.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concurrently@3.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/kimmobrunfeldt/concurrently"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concurrently"
  summary: "Run commands concurrently"
  versionInfo: "3.6.1"
- SPDXID: "SPDXRef-Package-NPM-configstore-3.1.2"
  copyrightText: "Copyright Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/configstore@3.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/yeoman/configstore#readme"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-2-Clause"
  name: "configstore"
  summary: "Easily load and save config without having to think about where and how"
  versionInfo: "3.1.2"
- SPDXID: "SPDXRef-Package-NPM-configstore-3.1.2-vcs"
  copyrightText: "Copyright Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/yeoman/configstore.git@f09f067e50e6a636cfc648a6fc36a522062bd49d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/configstore@3.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/yeoman/configstore#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "configstore"
  summary: "Easily load and save config without having to think about where and how"
  versionInfo: "3.1.2"
- SPDXID: "SPDXRef-Package-NPM-configstore-3.1.2-source-artifact"
  copyrightText: "Copyright Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/configstore/-/configstore-3.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/configstore@3.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/yeoman/configstore#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "configstore"
  summary: "Easily load and save config without having to think about where and how"
  versionInfo: "3.1.2"
- SPDXID: "SPDXRef-Package-NPM-create-error-class-3.0.2"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/create-error-class@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/create-error-class"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "create-error-class"
  summary: "Create Error classes"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-create-error-class-3.0.2-vcs"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "git+https://github.com/floatdrop/create-error-class.git@af3f3979494c4eca0b0259d12035e7fb84fa302f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/create-error-class@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/create-error-class"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "create-error-class"
  summary: "Create Error classes"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-create-error-class-3.0.2-source-artifact"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/create-error-class/-/create-error-class-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/create-error-class@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/create-error-class"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "create-error-class"
  summary: "Create Error classes"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
  copyrightText: "Copyright (c) 2014 IndigoUnited"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cross-spawn@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/IndigoUnited/node-cross-spawn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cross-spawn"
  summary: "Cross platform child_process#spawn and child_process#spawnSync"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-cross-spawn-5.1.0-vcs"
  copyrightText: "Copyright (c) 2014 IndigoUnited"
  downloadLocation: "git+https://github.com/IndigoUnited/node-cross-spawn.git@1da4c09ccf658079849a3d191b16e59bc600e8b4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cross-spawn@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/IndigoUnited/node-cross-spawn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cross-spawn"
  summary: "Cross platform child_process#spawn and child_process#spawnSync"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-cross-spawn-5.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 IndigoUnited"
  downloadLocation: "https://registry.npmjs.org/cross-spawn/-/cross-spawn-5.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cross-spawn@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/IndigoUnited/node-cross-spawn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cross-spawn"
  summary: "Cross platform child_process#spawn and child_process#spawnSync"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-crypto-random-string-1.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/crypto-random-string@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/crypto-random-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "crypto-random-string"
  summary: "Generate a cryptographically strong random string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-crypto-random-string-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/crypto-random-string.git@21960c996c3f77cf5f7bf6765e837e7c8a07e200"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/crypto-random-string@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/crypto-random-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "crypto-random-string"
  summary: "Generate a cryptographically strong random string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-crypto-random-string-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/crypto-random-string/-/crypto-random-string-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/crypto-random-string@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/crypto-random-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "crypto-random-string"
  summary: "Generate a cryptographically strong random string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-date-fns-1.30.1"
  copyrightText: "(c) Sasha Koss (https://kossnocorp.mit-license.org/)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/date-fns@1.30.1"
  filesAnalyzed: false
  homepage: "https://github.com/date-fns/date-fns#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "date-fns"
  summary: "Modern JavaScript date utility library"
  versionInfo: "1.30.1"
- SPDXID: "SPDXRef-Package-NPM-date-fns-1.30.1-vcs"
  copyrightText: "(c) Sasha Koss (https://kossnocorp.mit-license.org/)"
  downloadLocation: "git+https://github.com/date-fns/date-fns.git@67a0329d663f82393261f38c4c47ad65c038bd35"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/date-fns@1.30.1"
  filesAnalyzed: false
  homepage: "https://github.com/date-fns/date-fns#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "date-fns"
  summary: "Modern JavaScript date utility library"
  versionInfo: "1.30.1"
- SPDXID: "SPDXRef-Package-NPM-date-fns-1.30.1-source-artifact"
  copyrightText: "(c) Sasha Koss (https://kossnocorp.mit-license.org/)"
  downloadLocation: "https://registry.npmjs.org/date-fns/-/date-fns-1.30.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/date-fns@1.30.1"
  filesAnalyzed: false
  homepage: "https://github.com/date-fns/date-fns#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "date-fns"
  summary: "Modern JavaScript date utility library"
  versionInfo: "1.30.1"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9"
  copyrightText: "Copyright (c) 2014-2016 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9-vcs"
  copyrightText: "Copyright (c) 2014-2016 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@13abeae468fea297d0dccc50bc55590809241083"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9-source-artifact"
  copyrightText: "Copyright (c) 2014-2016 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-3.2.6"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.2.6"
- SPDXID: "SPDXRef-Package-NPM-debug-3.2.6-vcs"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@a7a17c9955460435592de2a4d3c722e9b32047a8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.2.6"
- SPDXID: "SPDXRef-Package-NPM-debug-3.2.6-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-3.2.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.2.6"
- SPDXID: "SPDXRef-Package-NPM-decompress-response-5.0.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decompress-response@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decompress-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "decompress-response"
  summary: "Decompress a HTTP response if needed"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-decompress-response-5.0.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/decompress-response.git@a31bde7a6bfe23345e41531ffa1a22cedbd4eadd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decompress-response@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decompress-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decompress-response"
  summary: "Decompress a HTTP response if needed"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-decompress-response-5.0.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/decompress-response/-/decompress-response-5.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decompress-response@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decompress-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decompress-response"
  summary: "Decompress a HTTP response if needed"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-deep-extend-0.6.0"
  copyrightText: "Copyright (c) 2013-2018 Viacheslav Lotsmanov"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/deep-extend@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/unclechu/node-deep-extend"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "deep-extend"
  summary: "Recursive object extending"
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-deep-extend-0.6.0-vcs"
  copyrightText: "Copyright (c) 2013-2018 Viacheslav Lotsmanov"
  downloadLocation: "git+https://github.com/unclechu/node-deep-extend.git@f3f2b4f30fffe8abc9a99a7d6469fb354ca206e9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/deep-extend@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/unclechu/node-deep-extend"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "deep-extend"
  summary: "Recursive object extending"
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-deep-extend-0.6.0-source-artifact"
  copyrightText: "Copyright (c) 2013-2018 Viacheslav Lotsmanov"
  downloadLocation: "https://registry.npmjs.org/deep-extend/-/deep-extend-0.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/deep-extend@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/unclechu/node-deep-extend"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "deep-extend"
  summary: "Recursive object extending"
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-defer-to-connect-2.0.0"
  copyrightText: "Copyright (c) 2018 Szymon Marczak"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/defer-to-connect@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/defer-to-connect#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "defer-to-connect"
  summary: "The safe way to handle the `connect` socket event"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-defer-to-connect-2.0.0-vcs"
  copyrightText: "Copyright (c) 2018 Szymon Marczak"
  downloadLocation: "git+https://github.com/szmarczak/defer-to-connect.git@e150241a9eb028d253c88845622bba905796fd08"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/defer-to-connect@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/defer-to-connect#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "defer-to-connect"
  summary: "The safe way to handle the `connect` socket event"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-defer-to-connect-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2018 Szymon Marczak"
  downloadLocation: "https://registry.npmjs.org/defer-to-connect/-/defer-to-connect-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/defer-to-connect@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/defer-to-connect#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "defer-to-connect"
  summary: "The safe way to handle the `connect` socket event"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "git+https://github.com/felixge/node-delayed-stream.git@07a9dc99fb8f1a488160026b9ad77493f766fb84"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-diff-4.0.2"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-diff-4.0.2-vcs"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "git+https://github.com/kpdecker/jsdiff.git@94b63ff1e152d5611d1571a13a3e06f1d723f4cd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-diff-4.0.2-source-artifact"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-dot-prop-4.2.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dot-prop@4.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/dot-prop#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "dot-prop"
  summary: "Get, set, or delete a property from a nested object using a dot path"
  versionInfo: "4.2.0"
- SPDXID: "SPDXRef-Package-NPM-dot-prop-4.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/dot-prop.git@70f7ed8e5dfe72c726bebe9cef5c85c1fb3cd767"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dot-prop@4.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/dot-prop#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dot-prop"
  summary: "Get, set, or delete a property from a nested object using a dot path"
  versionInfo: "4.2.0"
- SPDXID: "SPDXRef-Package-NPM-dot-prop-4.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/dot-prop/-/dot-prop-4.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dot-prop@4.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/dot-prop#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dot-prop"
  summary: "Get, set, or delete a property from a nested object using a dot path"
  versionInfo: "4.2.0"
- SPDXID: "SPDXRef-Package-NPM-duplexer3-0.1.4"
  copyrightText: "Copyright (c) 2013 Deoxxa Development"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexer3@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/duplexer3"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "duplexer3"
  summary: "Like duplexer but using streams3"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-duplexer3-0.1.4-vcs"
  copyrightText: "Copyright (c) 2013 Deoxxa Development"
  downloadLocation: "git+https://github.com/floatdrop/duplexer3.git@810f45fd7216a4ec4585e673ad28f05852ed05a6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexer3@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/duplexer3"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "duplexer3"
  summary: "Like duplexer but using streams3"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-duplexer3-0.1.4-source-artifact"
  copyrightText: "Copyright (c) 2013 Deoxxa Development"
  downloadLocation: "https://registry.npmjs.org/duplexer3/-/duplexer3-0.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexer3@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/duplexer3"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "duplexer3"
  summary: "Like duplexer but using streams3"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.4-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/end-of-stream.git@e104395e50015a6436d9747b4b1c2a617b267769"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.4-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2-vcs"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "git+https://github.com/qix-/node-error-ex.git@3953ebb9e4a33287e67676a70a8ad72bbbe38075"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2-source-artifact"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/escape-string-regexp.git@db124a3e1aae9d692c4899e42a5c6c3e329eaa20"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-esprima-4.0.1"
  copyrightText: "(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2010-2014\
    \ Google, Inc. http://angularjs.org\n(c) 2011-2013 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors Backbone\n(c) 2016 r\nCopyright (c) 2005-2007\
    \ Sam Stephenson\nCopyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright\
    \ (c) 2006-2012 Valerio Proietti (http://mad4milk.net/)\nCopyright (c) 2010 Cowboy\
    \ Ben Alman\nCopyright 2005, 2010, 2012, 2014 jQuery Foundation, Inc. and other\
    \ contributors\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors\nCopyright 2013 Yahoo! Inc.\n\
    Copyright JS Foundation and other contributors, https://js.foundation\ncopyright\
    \ (c) 2012 Scott Jehl, Paul Irish, Nicholas Zakas\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@4.0.1"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-2-Clause"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-esprima-4.0.1-vcs"
  copyrightText: "(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2010-2014\
    \ Google, Inc. http://angularjs.org\n(c) 2011-2013 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors Backbone\n(c) 2016 r\nCopyright (c) 2005-2007\
    \ Sam Stephenson\nCopyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright\
    \ (c) 2006-2012 Valerio Proietti (http://mad4milk.net/)\nCopyright (c) 2010 Cowboy\
    \ Ben Alman\nCopyright 2005, 2010, 2012, 2014 jQuery Foundation, Inc. and other\
    \ contributors\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors\nCopyright 2013 Yahoo! Inc.\n\
    Copyright JS Foundation and other contributors, https://js.foundation\ncopyright\
    \ (c) 2012 Scott Jehl, Paul Irish, Nicholas Zakas\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/jquery/esprima.git@0ed4b8afdf2abd416f738977672c6232836f410a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@4.0.1"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-esprima-4.0.1-source-artifact"
  copyrightText: "(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2010-2014\
    \ Google, Inc. http://angularjs.org\n(c) 2011-2013 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors Backbone\n(c) 2016 r\nCopyright (c) 2005-2007\
    \ Sam Stephenson\nCopyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright\
    \ (c) 2006-2012 Valerio Proietti (http://mad4milk.net/)\nCopyright (c) 2010 Cowboy\
    \ Ben Alman\nCopyright 2005, 2010, 2012, 2014 jQuery Foundation, Inc. and other\
    \ contributors\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors\nCopyright 2013 Yahoo! Inc.\n\
    Copyright JS Foundation and other contributors, https://js.foundation\ncopyright\
    \ (c) 2012 Scott Jehl, Paul Irish, Nicholas Zakas\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@4.0.1"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-esutils-2.0.3"
  copyrightText: "Copyright (c) 2013 Yusuke Suzuki (http://github.com/Constellation)\
    \ (twitter Constellation (http://twitter.com/Constellation)) and other contributors\n\
    Copyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\nCopyright (c) 2014\
    \ Ivan Nikulin <ifaaan@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esutils@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/estools/esutils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "esutils"
  summary: "utility box for ECMAScript language tools"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-esutils-2.0.3-vcs"
  copyrightText: "Copyright (c) 2013 Yusuke Suzuki (http://github.com/Constellation)\
    \ (twitter Constellation (http://twitter.com/Constellation)) and other contributors\n\
    Copyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\nCopyright (c) 2014\
    \ Ivan Nikulin <ifaaan@gmail.com>"
  downloadLocation: "git+ssh://github.com/estools/esutils.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esutils@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/estools/esutils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esutils"
  summary: "utility box for ECMAScript language tools"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-esutils-2.0.3-source-artifact"
  copyrightText: "Copyright (c) 2013 Yusuke Suzuki (http://github.com/Constellation)\
    \ (twitter Constellation (http://twitter.com/Constellation)) and other contributors\n\
    Copyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\nCopyright (c) 2014\
    \ Ivan Nikulin <ifaaan@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/esutils/-/esutils-2.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esutils@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/estools/esutils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esutils"
  summary: "utility box for ECMAScript language tools"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-execa-0.7.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/execa@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/execa#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "execa"
  summary: "A better `child_process`"
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-execa-0.7.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/execa.git@b4d1c8613fd068e3c36f11e7bff672d008ac88f9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/execa@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/execa#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "execa"
  summary: "A better `child_process`"
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-execa-0.7.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/execa/-/execa-0.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/execa@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/execa#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "execa"
  summary: "A better `child_process`"
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-fill-range-7.0.1"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fill-range@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/fill-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fill-range"
  summary: "Fill in a range of numbers or letters, optionally passing an increment\
    \ or `step` to use, or create a regex-compatible range with `options.toRegex`"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-fill-range-7.0.1-vcs"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/fill-range.git@39f421b499d5c97b62e955c179fa34c062aab2a5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fill-range@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/fill-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fill-range"
  summary: "Fill in a range of numbers or letters, optionally passing an increment\
    \ or `step` to use, or create a regex-compatible range with `options.toRegex`"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-fill-range-7.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fill-range@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/fill-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fill-range"
  summary: "Fill in a range of numbers or letters, optionally passing an increment\
    \ or `step` to use, or create a regex-compatible range with `options.toRegex`"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.5.1"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.5.1-vcs"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "git+https://github.com/form-data/form-data.git@8ce81f56cccf5466363a5eff135ad394a929f59b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/form-data/-/form-data-2.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/isaacs/fs.realpath.git@03e7c884431fe185dfebbc9b771aeca339c1807a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-get-stream-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stream@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "get-stream"
  summary: "Get a stream as a string, buffer, or array"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-get-stream-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/get-stream.git@3023bc31dec6680dda4f935a2b320b3a4f18c815"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stream@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stream"
  summary: "Get a stream as a string, buffer, or array"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-get-stream-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/get-stream/-/get-stream-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stream@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stream"
  summary: "Get a stream as a string, buffer, or array"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-get-stream-5.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stream@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "get-stream"
  summary: "Get a stream as a string, buffer, or array"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-get-stream-5.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/get-stream.git@7ce032d306373500e1f4557b3c7a31390a005da6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stream@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stream"
  summary: "Get a stream as a string, buffer, or array"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-get-stream-5.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/get-stream/-/get-stream-5.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stream@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stream"
  summary: "Get a stream as a string, buffer, or array"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.6"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.6"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.6-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@f5a57d3d6e19b324522a3fa5bdd5075fd1aa79d1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.6"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.6-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.6"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-5.1.0"
  copyrightText: "Copyright (c) 2015, 2019 Elan Shanker"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-parent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "glob-parent"
  summary: "Extract the non-magic parent path from a glob string."
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-5.1.0-vcs"
  copyrightText: "Copyright (c) 2015, 2019 Elan Shanker"
  downloadLocation: "git+https://github.com/gulpjs/glob-parent.git@2e5386e14f56f0957985fb2b607a45158c9c7a4d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-parent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-parent"
  summary: "Extract the non-magic parent path from a glob string."
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-5.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015, 2019 Elan Shanker"
  downloadLocation: "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-parent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-parent"
  summary: "Extract the non-magic parent path from a glob string."
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-global-dirs-0.1.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/global-dirs@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/global-dirs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "global-dirs"
  summary: "Get the directory of globally installed packages and binaries"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-global-dirs-0.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/global-dirs.git@bcb8a21a40930022e069f9c5b506ce41c8d46bff"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/global-dirs@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/global-dirs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "global-dirs"
  summary: "Get the directory of globally installed packages and binaries"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-global-dirs-0.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/global-dirs/-/global-dirs-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/global-dirs@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/global-dirs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "global-dirs"
  summary: "Get the directory of globally installed packages and binaries"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-got-6.7.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/got@6.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/got#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "got"
  summary: "Simplified HTTP requests"
  versionInfo: "6.7.1"
- SPDXID: "SPDXRef-Package-NPM-got-6.7.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/got.git@52da6067ddac5250d6c2e76af9a150b9cf4ba025"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/got@6.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/got#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "got"
  summary: "Simplified HTTP requests"
  versionInfo: "6.7.1"
- SPDXID: "SPDXRef-Package-NPM-got-6.7.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/got/-/got-6.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/got@6.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/got#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "got"
  summary: "Simplified HTTP requests"
  versionInfo: "6.7.1"
- SPDXID: "SPDXRef-Package-NPM-got-10.6.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/got@10.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/got#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "got"
  summary: "Human-friendly and powerful HTTP request library for Node.js"
  versionInfo: "10.6.0"
- SPDXID: "SPDXRef-Package-NPM-got-10.6.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/got.git@33a696694ebb2bd1c995f4800344fdf9b7fa1e86"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/got@10.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/got#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "got"
  summary: "Human-friendly and powerful HTTP request library for Node.js"
  versionInfo: "10.6.0"
- SPDXID: "SPDXRef-Package-NPM-got-10.6.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/got/-/got-10.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/got@10.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/got#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "got"
  summary: "Human-friendly and powerful HTTP request library for Node.js"
  versionInfo: "10.6.0"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-graceful-fs.git@5552309112e0d09e3c07a3e03ad3d6015b7cdccc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-has-flag-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-flag.git@621de2782d538f28f99f0bb85b158799cb3ae5cf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-flag/-/has-flag-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-flag.git@8b2ca7e693b2c742b29f2399194077b64b9ff781"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.4"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.4"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.4"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.4-vcs"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "git+https://github.com/npm/hosted-git-info.git@3d1ad71b9ccfc6db476b5678740866e38bc31f2d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.4"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.4"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.4-source-artifact"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.4"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.4"
- SPDXID: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0"
  copyrightText: "Copyright (c) 2011 The Android Open Source Project\nCopyright 2016-2018\
    \ Kornel Lesinski"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-cache-semantics@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/kornelski/http-cache-semantics#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "http-cache-semantics"
  summary: "Parses Cache-Control and other headers. Helps building correct HTTP caches\
    \ and proxies"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0-vcs"
  copyrightText: "Copyright (c) 2011 The Android Open Source Project\nCopyright 2016-2018\
    \ Kornel Lesinski"
  downloadLocation: "git+https://github.com/kornelski/http-cache-semantics.git@ed83aec75be817967cdac2663907d060fdc6adc3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-cache-semantics@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/kornelski/http-cache-semantics#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-cache-semantics"
  summary: "Parses Cache-Control and other headers. Helps building correct HTTP caches\
    \ and proxies"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0-source-artifact"
  copyrightText: "Copyright (c) 2011 The Android Open Source Project\nCopyright 2016-2018\
    \ Kornel Lesinski"
  downloadLocation: "https://registry.npmjs.org/http-cache-semantics/-/http-cache-semantics-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-cache-semantics@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/kornelski/http-cache-semantics#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-cache-semantics"
  summary: "Parses Cache-Control and other headers. Helps building correct HTTP caches\
    \ and proxies"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-ignore-by-default-1.0.1"
  copyrightText: "Copyright (c) 2016 Mark Wubben"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ignore-by-default@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/novemberborn/ignore-by-default#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "ignore-by-default"
  summary: "A list of directories you should ignore by default"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-ignore-by-default-1.0.1-vcs"
  copyrightText: "Copyright (c) 2016 Mark Wubben"
  downloadLocation: "git+https://github.com/novemberborn/ignore-by-default.git@fa7ec97d8249ab6aab63cc1e46d14dd30fcb11ee"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ignore-by-default@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/novemberborn/ignore-by-default#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ignore-by-default"
  summary: "A list of directories you should ignore by default"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-ignore-by-default-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2016 Mark Wubben"
  downloadLocation: "https://registry.npmjs.org/ignore-by-default/-/ignore-by-default-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ignore-by-default@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/novemberborn/ignore-by-default#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ignore-by-default"
  summary: "A list of directories you should ignore by default"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-import-lazy-2.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/import-lazy@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/import-lazy#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "import-lazy"
  summary: "Import modules lazily"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-import-lazy-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/import-lazy.git@ed6c2fac31aaf8a7d91a27295756383487f3965d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/import-lazy@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/import-lazy#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "import-lazy"
  summary: "Import modules lazily"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-import-lazy-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/import-lazy/-/import-lazy-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/import-lazy@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/import-lazy#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "import-lazy"
  summary: "Import modules lazily"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-imurmurhash-0.1.4"
  copyrightText: "Copyright (c) 2013 Gary Court, Jens Taylor"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/imurmurhash@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jensyt/imurmurhash-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "imurmurhash"
  summary: "An incremental implementation of MurmurHash3"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-imurmurhash-0.1.4-vcs"
  copyrightText: "Copyright (c) 2013 Gary Court, Jens Taylor"
  downloadLocation: "git+https://github.com/jensyt/imurmurhash-js.git@9f40361c7e2835a9b7b8eaa1cbab2a9f94ee22a2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/imurmurhash@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jensyt/imurmurhash-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "imurmurhash"
  summary: "An incremental implementation of MurmurHash3"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-imurmurhash-0.1.4-source-artifact"
  copyrightText: "Copyright (c) 2013 Gary Court, Jens Taylor"
  downloadLocation: "https://registry.npmjs.org/imurmurhash/-/imurmurhash-0.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/imurmurhash@0.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jensyt/imurmurhash-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "imurmurhash"
  summary: "An incremental implementation of MurmurHash3"
  versionInfo: "0.1.4"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/inflight.git@a547881738c8f57b27795e584071d67cf6ac1a57"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/inherits.git@9a2c29400c6d491e0b7beefe0c32efa3b462545d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-ini-1.3.5"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ini@1.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/ini#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "ini"
  summary: "An ini encoder/decoder for node"
  versionInfo: "1.3.5"
- SPDXID: "SPDXRef-Package-NPM-ini-1.3.5-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/ini.git@738eca59d77d8cfdddf5c477c17a0d8f8fbfe0fd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ini@1.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/ini#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ini"
  summary: "An ini encoder/decoder for node"
  versionInfo: "1.3.5"
- SPDXID: "SPDXRef-Package-NPM-ini-1.3.5-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/ini/-/ini-1.3.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ini@1.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/ini#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ini"
  summary: "An ini encoder/decoder for node"
  versionInfo: "1.3.5"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1-vcs"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "git+https://github.com/qix-/node-is-arrayish.git@53f22aa6ce557d7d31a3d1152a590a2df220df9d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1-source-artifact"
  copyrightText: "Copyright (c) 2015 JD Ballard"
  downloadLocation: "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-binary-path@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-binary-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-binary-path"
  summary: "Check if a file path is a binary file"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-binary-path-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-binary-path.git@efe99d8b3d0ef825925e8b986d047e39bee173c3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-binary-path@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-binary-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-binary-path"
  summary: "Check if a file path is a binary file"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-binary-path-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-binary-path@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-binary-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-binary-path"
  summary: "Check if a file path is a binary file"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-ci-1.2.1"
  copyrightText: "Copyright (c) 2016-2018 Thomas Watson Steen"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-ci@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/watson/is-ci"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-ci"
  summary: "Detect if the current environment is a CI server"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-ci-1.2.1-vcs"
  copyrightText: "Copyright (c) 2016-2018 Thomas Watson Steen"
  downloadLocation: "git+https://github.com/watson/is-ci.git@c441f9f2924e5c51656ee04e5cc203eba227c092"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-ci@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/watson/is-ci"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-ci"
  summary: "Detect if the current environment is a CI server"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-ci-1.2.1-source-artifact"
  copyrightText: "Copyright (c) 2016-2018 Thomas Watson Steen"
  downloadLocation: "https://registry.npmjs.org/is-ci/-/is-ci-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-ci@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/watson/is-ci"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-ci"
  summary: "Detect if the current environment is a CI server"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1-vcs"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-extglob.git@10a74787acbe79abf02141c5d487950d1b197b15"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-fullwidth-code-point@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-fullwidth-code-point"
  summary: "Check if the character represented by a given Unicode code point is fullwidth"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-fullwidth-code-point.git@e94a78056056c5546f2bf4c4cf812a2163a46dae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-fullwidth-code-point@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-fullwidth-code-point"
  summary: "Check if the character represented by a given Unicode code point is fullwidth"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-fullwidth-code-point@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-fullwidth-code-point"
  summary: "Check if the character represented by a given Unicode code point is fullwidth"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-glob-4.0.1"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-glob-4.0.1-vcs"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/is-glob.git@4ac6a0cb019fa39141457946c2d455f281f73659"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-glob-4.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-installed-globally-0.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-installed-globally@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-installed-globally#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-installed-globally"
  summary: "Check if your package was installed globally"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-installed-globally-0.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-installed-globally.git@c8de3eb10412caceb8f005a4ad2b2e91b09caedb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-installed-globally@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-installed-globally#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-installed-globally"
  summary: "Check if your package was installed globally"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-installed-globally-0.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-installed-globally/-/is-installed-globally-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-installed-globally@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-installed-globally#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-installed-globally"
  summary: "Check if your package was installed globally"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-npm-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-npm@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-npm"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-npm"
  summary: "Check if your code is running as an npm script"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-npm-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-npm.git@d5b73b7ca7219bf75b409048238263344895afe5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-npm@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-npm"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-npm"
  summary: "Check if your code is running as an npm script"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-npm-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-npm/-/is-npm-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-npm@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-npm"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-npm"
  summary: "Check if your code is running as an npm script"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-number-7.0.0"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2018\
    \ Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-number@7.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-number"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-number"
  summary: "Returns true if a number or string value is a finite number. Useful for\
    \ regex matches, parsing, user input, etc."
  versionInfo: "7.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-number-7.0.0-vcs"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2018\
    \ Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-number.git@98e8ff1da1a89f93d1397a24d7413ed15421c139"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-number@7.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-number"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-number"
  summary: "Returns true if a number or string value is a finite number. Useful for\
    \ regex matches, parsing, user input, etc."
  versionInfo: "7.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-number-7.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2018\
    \ Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-number@7.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-number"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-number"
  summary: "Returns true if a number or string value is a finite number. Useful for\
    \ regex matches, parsing, user input, etc."
  versionInfo: "7.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-obj-1.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-obj#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-obj"
  summary: "Check if a value is an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-obj-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-obj.git@7438be7393348bf65cbc2330446666bb7fc2c2da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-obj#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-obj"
  summary: "Check if a value is an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-obj-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-obj#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-obj"
  summary: "Check if a value is an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-path-inside-1.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-path-inside@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-path-inside#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-path-inside"
  summary: "Check if a path is inside another path"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-path-inside-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-path-inside.git@7f08550845a34a9be18f5422f31da0c83b5a50b9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-path-inside@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-path-inside#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-path-inside"
  summary: "Check if a path is inside another path"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-path-inside-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-path-inside/-/is-path-inside-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-path-inside@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-path-inside#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-path-inside"
  summary: "Check if a path is inside another path"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-redirect-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-redirect@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-redirect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-redirect"
  summary: "Check if a number is a redirect HTTP status code"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-redirect-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-redirect.git@53bc816ba54447a55676930138151feb0f917c18"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-redirect@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-redirect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-redirect"
  summary: "Check if a number is a redirect HTTP status code"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-redirect-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-redirect/-/is-redirect-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-redirect@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-redirect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-redirect"
  summary: "Check if a number is a redirect HTTP status code"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-retry-allowed@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/is-retry-allowed#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-retry-allowed"
  summary: "Is retry allowed for Error?"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0-vcs"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "git+https://github.com/floatdrop/is-retry-allowed.git@b2490025b619141fbdf4914867073cda98185e88"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-retry-allowed@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/is-retry-allowed#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-retry-allowed"
  summary: "Is retry allowed for Error?"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0-source-artifact"
  copyrightText: "(c) Vsevolod Strukchinsky (http://github.com/floatdrop)\nCopyright\
    \ (c) Vsevolod Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/is-retry-allowed/-/is-retry-allowed-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-retry-allowed@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/is-retry-allowed#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-retry-allowed"
  summary: "Is retry allowed for Error?"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-is-stream-1.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-stream@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-stream"
  summary: "Check if something is a Node.js stream"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-stream-1.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-stream.git@e21d73f1028c189d16150cea52641059b0936310"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-stream@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-stream"
  summary: "Check if something is a Node.js stream"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-stream-1.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-stream/-/is-stream-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-stream@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-stream"
  summary: "Check if something is a Node.js stream"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-isexe-2.0.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isexe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/isexe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "isexe"
  summary: "Minimal module to check if a file is executable."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-isexe-2.0.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/isexe.git@10f8be491aab2e158c7e20df64a7f90ab5b5475c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isexe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/isexe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isexe"
  summary: "Minimal module to check if a file is executable."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-isexe-2.0.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isexe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/isexe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isexe"
  summary: "Minimal module to check if a file is executable."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-tokens-4.0.0"
  copyrightText: "Copyright (c) 2014-2018 Simon Lydell\nCopyright 2014-2018 Simon\
    \ Lydell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-tokens@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lydell/js-tokens#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "js-tokens"
  summary: "A regex that tokenizes JavaScript."
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-tokens-4.0.0-vcs"
  copyrightText: "Copyright (c) 2014-2018 Simon Lydell\nCopyright 2014-2018 Simon\
    \ Lydell"
  downloadLocation: "git+https://github.com/lydell/js-tokens.git@0eb6e9daee32160ab0fca979b6dc91a1991b720c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-tokens@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lydell/js-tokens#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-tokens"
  summary: "A regex that tokenizes JavaScript."
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-tokens-4.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2018 Simon Lydell\nCopyright 2014-2018 Simon\
    \ Lydell"
  downloadLocation: "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-tokens@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lydell/js-tokens#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-tokens"
  summary: "A regex that tokenizes JavaScript."
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011-2015 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@3.13.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "3.13.1"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-3.13.1-vcs"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011-2015 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/js-yaml.git@665aadda42349dcae869f12040d9b10ef18d12da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@3.13.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "3.13.1"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-3.13.1-source-artifact"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011-2015 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/js-yaml/-/js-yaml-3.13.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@3.13.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "3.13.1"
- SPDXID: "SPDXRef-Package-NPM-json-buffer-3.0.1"
  copyrightText: "Copyright (c) 2013 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-buffer@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/json-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "json-buffer"
  summary: "JSON parse & stringify that supports binary via bops & base64"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-buffer-3.0.1-vcs"
  copyrightText: "Copyright (c) 2013 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/json-buffer.git@39146e89172469d5700f06e6b569574827d77fed"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-buffer@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/json-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-buffer"
  summary: "JSON parse & stringify that supports binary via bops & base64"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-buffer-3.0.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/json-buffer/-/json-buffer-3.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-buffer@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/json-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-buffer"
  summary: "JSON parse & stringify that supports binary via bops & base64"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2"
  copyrightText: "Copyright 2017 Kat Marchan"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-parse-better-errors@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/zkat/json-parse-better-errors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "json-parse-better-errors"
  summary: "JSON.parse with context information on error"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2-vcs"
  copyrightText: "Copyright 2017 Kat Marchan"
  downloadLocation: "git+https://github.com/zkat/json-parse-better-errors.git@0f36e75d0add7e247d84a34361c8c01abd6e22c8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-parse-better-errors@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/zkat/json-parse-better-errors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-parse-better-errors"
  summary: "JSON.parse with context information on error"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2-source-artifact"
  copyrightText: "Copyright 2017 Kat Marchan"
  downloadLocation: "https://registry.npmjs.org/json-parse-better-errors/-/json-parse-better-errors-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-parse-better-errors@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/zkat/json-parse-better-errors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-parse-better-errors"
  summary: "JSON.parse with context information on error"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-keyv-4.0.0"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/keyv@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/keyv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "keyv"
  summary: "Simple key-value storage with support for multiple backends"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-keyv-4.0.0-vcs"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "git+https://github.com/lukechilds/keyv.git@d288a1896ea7601f4a74ecbb086e8917c370367f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/keyv@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/keyv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "keyv"
  summary: "Simple key-value storage with support for multiple backends"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-keyv-4.0.0-source-artifact"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "https://registry.npmjs.org/keyv/-/keyv-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/keyv@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/keyv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "keyv"
  summary: "Simple key-value storage with support for multiple backends"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-latest-version-3.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/latest-version@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/latest-version#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "latest-version"
  summary: "Get the latest version of an npm package"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-latest-version-3.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/latest-version.git@2181e0f3c18d71c43bc6656c9cd09ba9bccd6c68"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/latest-version@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/latest-version#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "latest-version"
  summary: "Get the latest version of an npm package"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-latest-version-3.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/latest-version/-/latest-version-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/latest-version@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/latest-version#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "latest-version"
  summary: "Get the latest version of an npm package"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-4.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/load-json-file.git@633ec57b4d10a4bcc0e5fb63296ff9e6e68924da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-4.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/load-json-file/-/load-json-file-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.19"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.19"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.19"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.19-vcs"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.19"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.19"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.19-source-artifact"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.19"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.19"
- SPDXID: "SPDXRef-Package-NPM-lowercase-keys-1.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lowercase-keys@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/lowercase-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lowercase-keys"
  summary: "Lowercase the keys of an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-lowercase-keys-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/lowercase-keys.git@f1ec3a8fb1ddb2c39f434e0e7a6817dee31b5286"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lowercase-keys@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/lowercase-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lowercase-keys"
  summary: "Lowercase the keys of an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-lowercase-keys-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lowercase-keys@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/lowercase-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lowercase-keys"
  summary: "Lowercase the keys of an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-lowercase-keys-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lowercase-keys@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/lowercase-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lowercase-keys"
  summary: "Lowercase the keys of an object"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-lowercase-keys-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/lowercase-keys.git@628be98fd3b9a1e19baca3ea6f2f8a1266342399"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lowercase-keys@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/lowercase-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lowercase-keys"
  summary: "Lowercase the keys of an object"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-lowercase-keys-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lowercase-keys@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/lowercase-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lowercase-keys"
  summary: "Lowercase the keys of an object"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-lru-cache-4.1.5"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lru-cache@4.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-lru-cache#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "lru-cache"
  summary: "A cache object that deletes the least-recently-used items."
  versionInfo: "4.1.5"
- SPDXID: "SPDXRef-Package-NPM-lru-cache-4.1.5-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-lru-cache.git@57658f575607a44bb2fa38dd0e43d74835e42dae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lru-cache@4.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-lru-cache#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lru-cache"
  summary: "A cache object that deletes the least-recently-used items."
  versionInfo: "4.1.5"
- SPDXID: "SPDXRef-Package-NPM-lru-cache-4.1.5-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/lru-cache/-/lru-cache-4.1.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lru-cache@4.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-lru-cache#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lru-cache"
  summary: "A cache object that deletes the least-recently-used items."
  versionInfo: "4.1.5"
- SPDXID: "SPDXRef-Package-NPM-make-dir-1.3.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/make-dir@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/make-dir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "make-dir"
  summary: "Make a directory and its parents if needed - Think `mkdir -p`"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-make-dir-1.3.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/make-dir.git@e962394d01198a961d42272f1e849ab601aaef1e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/make-dir@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/make-dir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "make-dir"
  summary: "Make a directory and its parents if needed - Think `mkdir -p`"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-make-dir-1.3.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/make-dir/-/make-dir-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/make-dir@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/make-dir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "make-dir"
  summary: "Make a directory and its parents if needed - Think `mkdir -p`"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.40.0"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.40.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.40.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.40.0-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "git+https://github.com/jshttp/mime-db.git@4db92114124a76a38bf29b7d572d4c7da33a1261"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.40.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.40.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.40.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/mime-db/-/mime-db-1.40.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.40.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.40.0"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.24"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.24"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.24"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.24-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/mime-types.git@e5b5f41ef0d7e4e66eb9baeec7920c0cd9ec81f0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.24"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.24"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.24-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.24.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.24"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.24"
- SPDXID: "SPDXRef-Package-NPM-mimic-response-1.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mimic-response@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/mimic-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mimic-response"
  summary: "Mimic a Node.js HTTP response stream"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-mimic-response-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/mimic-response.git@687b4544afddca3d3e9e61a455ca5efe0e27851e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mimic-response@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/mimic-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mimic-response"
  summary: "Mimic a Node.js HTTP response stream"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-mimic-response-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/mimic-response/-/mimic-response-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mimic-response@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/mimic-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mimic-response"
  summary: "Mimic a Node.js HTTP response stream"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-mimic-response-2.1.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mimic-response@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/mimic-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mimic-response"
  summary: "Mimic a Node.js HTTP response stream"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-mimic-response-2.1.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/mimic-response.git@94bd5a359bad199d801188473e48cb024c6f31ca"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mimic-response@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/mimic-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mimic-response"
  summary: "Mimic a Node.js HTTP response stream"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-mimic-response-2.1.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/mimic-response/-/mimic-response-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mimic-response@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/mimic-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mimic-response"
  summary: "Mimic a Node.js HTTP response stream"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/minimatch.git@e46989a323d5f0aa4781eff5e2e6e7aafa223321"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/minimist.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.3-vcs"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "git+https://github.com/substack/node-mkdirp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.3-source-artifact"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@9b88d1568a52ec9bb67ecc8d2aa224fa38fd41f4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.2"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.2-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@7920885eb232fbe7a5efdab956d3e7c507c92ddf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.2-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-nodemon-2.0.2"
  copyrightText: "Copyright (c) 2009-2014 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2010 Benjamin Thomas, Robert Kieffer\nCopyright (c) 2010 Sencha Inc.\nCopyright\
    \ (c) 2010 present, Remy Sharp, https://remysharp.com <remy@remysharp.com>\nCopyright\
    \ (c) 2011 LearnBoost\nCopyright (c) 2011 Peter Zotov <whitequark@whitequark.org>\n\
    Copyright (c) 2011-2014 TJ Holowaychuk\nCopyright (c) 2012 Federico Romero\nCopyright\
    \ (c) 2012 LearnBoost <tj@learnboost.com>\nCopyright (c) 2012-2014 Isaac Z. Schlueter\n\
    Copyright (c) 2013 Jared Hanson\nCopyright (c) 2013 Jared Hanson < http://jaredhanson.net/\
    \ (http://jaredhanson.net/)>\nCopyright (c) 2013 Jared Hanson < http://jaredhanson.net/\
    \ (http://jaredhanson.net/)> , readmeFilename' README.md', homepage' https://github.com/jaredhanson/utils-merge\n\
    Copyright (c) 2013-2014 Jonathan Ong\nCopyright (c) 2013-2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014 Alex Gorbatchev\nCopyright (c) 2014 Douglas Christopher Wilson\n\
    Copyright (c) 2014 Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright\
    \ (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) Roman Shtylman\
    \ <shtylman@gmail.com>\nCopyright 2014 Alex Gorbatchev"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nodemon@2.0.2"
  filesAnalyzed: false
  homepage: "http://nodemon.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "nodemon"
  summary: "Simple monitor script for use during development of a node.js app."
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-nodemon-2.0.2-vcs"
  copyrightText: "Copyright (c) 2009-2014 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2010 Benjamin Thomas, Robert Kieffer\nCopyright (c) 2010 Sencha Inc.\nCopyright\
    \ (c) 2010 present, Remy Sharp, https://remysharp.com <remy@remysharp.com>\nCopyright\
    \ (c) 2011 LearnBoost\nCopyright (c) 2011 Peter Zotov <whitequark@whitequark.org>\n\
    Copyright (c) 2011-2014 TJ Holowaychuk\nCopyright (c) 2012 Federico Romero\nCopyright\
    \ (c) 2012 LearnBoost <tj@learnboost.com>\nCopyright (c) 2012-2014 Isaac Z. Schlueter\n\
    Copyright (c) 2013 Jared Hanson\nCopyright (c) 2013 Jared Hanson < http://jaredhanson.net/\
    \ (http://jaredhanson.net/)>\nCopyright (c) 2013 Jared Hanson < http://jaredhanson.net/\
    \ (http://jaredhanson.net/)> , readmeFilename' README.md', homepage' https://github.com/jaredhanson/utils-merge\n\
    Copyright (c) 2013-2014 Jonathan Ong\nCopyright (c) 2013-2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014 Alex Gorbatchev\nCopyright (c) 2014 Douglas Christopher Wilson\n\
    Copyright (c) 2014 Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright\
    \ (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) Roman Shtylman\
    \ <shtylman@gmail.com>\nCopyright 2014 Alex Gorbatchev"
  downloadLocation: "git+https://github.com/remy/nodemon.git@cd45d74593be411eba39481e5a8360c39079b118"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nodemon@2.0.2"
  filesAnalyzed: false
  homepage: "http://nodemon.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nodemon"
  summary: "Simple monitor script for use during development of a node.js app."
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-nodemon-2.0.2-source-artifact"
  copyrightText: "Copyright (c) 2009-2014 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2010 Benjamin Thomas, Robert Kieffer\nCopyright (c) 2010 Sencha Inc.\nCopyright\
    \ (c) 2010 present, Remy Sharp, https://remysharp.com <remy@remysharp.com>\nCopyright\
    \ (c) 2011 LearnBoost\nCopyright (c) 2011 Peter Zotov <whitequark@whitequark.org>\n\
    Copyright (c) 2011-2014 TJ Holowaychuk\nCopyright (c) 2012 Federico Romero\nCopyright\
    \ (c) 2012 LearnBoost <tj@learnboost.com>\nCopyright (c) 2012-2014 Isaac Z. Schlueter\n\
    Copyright (c) 2013 Jared Hanson\nCopyright (c) 2013 Jared Hanson < http://jaredhanson.net/\
    \ (http://jaredhanson.net/)>\nCopyright (c) 2013 Jared Hanson < http://jaredhanson.net/\
    \ (http://jaredhanson.net/)> , readmeFilename' README.md', homepage' https://github.com/jaredhanson/utils-merge\n\
    Copyright (c) 2013-2014 Jonathan Ong\nCopyright (c) 2013-2014 Jonathan Ong <me@jongleberry.com>\n\
    Copyright (c) 2014 Alex Gorbatchev\nCopyright (c) 2014 Douglas Christopher Wilson\n\
    Copyright (c) 2014 Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright\
    \ (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) Roman Shtylman\
    \ <shtylman@gmail.com>\nCopyright 2014 Alex Gorbatchev"
  downloadLocation: "https://registry.npmjs.org/nodemon/-/nodemon-2.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nodemon@2.0.2"
  filesAnalyzed: false
  homepage: "http://nodemon.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nodemon"
  summary: "Simple monitor script for use during development of a node.js app."
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-nopt-1.0.10"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-nopt-1.0.10-vcs"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/nopt.git@51b18696abcac5c071fe4d706f2b7fd02b9f5ed1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-nopt-1.0.10-source-artifact"
  copyrightText: "Copyright 2009-2011 Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/nopt/-/nopt-1.0.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nopt@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/npm/nopt#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nopt"
  summary: "Option parsing for Node, supporting types, shorthands, etc. Used by npm."
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  copyrightText: "Copyright (c) 2013 Meryn Stol\nCopyright (c) Meryn Stol 'Author"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-vcs"
  copyrightText: "Copyright (c) 2013 Meryn Stol\nCopyright (c) Meryn Stol 'Author"
  downloadLocation: "git+https://github.com/npm/normalize-package-data.git@dedb606de22fa4bdf21c3679dece5fd07b4a0b1a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Meryn Stol\nCopyright (c) Meryn Stol 'Author"
  downloadLocation: "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-3.0.0"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "normalize-path"
  summary: "Normalize slashes in a file path to be posix/unix-like forward slashes.\
    \ Also condenses repeat slashes to a single slash and removes and trailing slashes,\
    \ unless disabled."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-3.0.0-vcs"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/normalize-path.git@0979eb807a1725d83d5a996347d41067cf773d1f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-path"
  summary: "Normalize slashes in a file path to be posix/unix-like forward slashes.\
    \ Also condenses repeat slashes to a single slash and removes and trailing slashes,\
    \ unless disabled."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-path"
  summary: "Normalize slashes in a file path to be posix/unix-like forward slashes.\
    \ Also condenses repeat slashes to a single slash and removes and trailing slashes,\
    \ unless disabled."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-url-4.5.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-url@4.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/normalize-url#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "normalize-url"
  summary: "Normalize a URL"
  versionInfo: "4.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-url-4.5.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/normalize-url.git@454970b662086e8856d1af074c7a57df96545b8b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-url@4.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/normalize-url#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-url"
  summary: "Normalize a URL"
  versionInfo: "4.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-url-4.5.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/normalize-url/-/normalize-url-4.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-url@4.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/normalize-url#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-url"
  summary: "Normalize a URL"
  versionInfo: "4.5.0"
- SPDXID: "SPDXRef-Package-NPM-npm-run-path-2.0.2"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/npm-run-path@2.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/npm-run-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "npm-run-path"
  summary: "Get your PATH prepended with locally installed binaries"
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-npm-run-path-2.0.2-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/npm-run-path.git@4d956312d5da324c4eff435af7d80797f04f09e1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/npm-run-path@2.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/npm-run-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "npm-run-path"
  summary: "Get your PATH prepended with locally installed binaries"
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-npm-run-path-2.0.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/npm-run-path/-/npm-run-path-2.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/npm-run-path@2.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/npm-run-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "npm-run-path"
  summary: "Get your PATH prepended with locally installed binaries"
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/once.git@0e614d9f5a7e6f0305c625f6b581f6d80b33b8a6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-p-cancelable-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-cancelable@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-cancelable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-cancelable"
  summary: "Create a promise that can be canceled"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-cancelable-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-cancelable.git@5bcb7bcf966fc416755b50c24c4d7eb2fbf44b0e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-cancelable@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-cancelable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-cancelable"
  summary: "Create a promise that can be canceled"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-cancelable-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-cancelable/-/p-cancelable-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-cancelable@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-cancelable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-cancelable"
  summary: "Create a promise that can be canceled"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-event-4.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-event@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-event#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-event"
  summary: "Promisify an event by waiting for it to be emitted"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-p-event-4.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-event.git@3226456732aa20fc20e6a76eda73ed66d77fdf62"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-event@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-event#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-event"
  summary: "Promisify an event by waiting for it to be emitted"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-p-event-4.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-event/-/p-event-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-event@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-event#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-event"
  summary: "Promisify an event by waiting for it to be emitted"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-p-finally-1.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-finally@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-finally#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-finally"
  summary: "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless\
    \ of outcome"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-finally-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-finally.git@9cfdd5dccb41995300916c17ab0fab784800f4d3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-finally@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-finally#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-finally"
  summary: "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless\
    \ of outcome"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-finally-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-finally/-/p-finally-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-finally@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-finally#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-finally"
  summary: "`Promise#finally()` ponyfill - Invoked when the promise is settled regardless\
    \ of outcome"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-timeout-2.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-timeout@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-timeout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-timeout"
  summary: "Timeout a promise after a specified amount of time"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-p-timeout-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-timeout.git@db65c4b51196c505ac005ce5b665d41a246ed253"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-timeout@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-timeout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-timeout"
  summary: "Timeout a promise after a specified amount of time"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-p-timeout-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-timeout/-/p-timeout-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-timeout@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-timeout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-timeout"
  summary: "Timeout a promise after a specified amount of time"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-package-json-4.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/package-json@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/package-json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "package-json"
  summary: "Get metadata of a package from the npm registry"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-package-json-4.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/package-json.git@2312d0437c16d7117d354ae76f640c5ac25fe0e0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/package-json@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/package-json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "package-json"
  summary: "Get metadata of a package from the npm registry"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-package-json-4.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/package-json/-/package-json-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/package-json@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/package-json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "package-json"
  summary: "Get metadata of a package from the npm registry"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-parse-json-4.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-parse-json-4.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/parse-json.git@d1f4edbbef6e76ddc084b2f88e4d64a2b08081c5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-parse-json-4.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/parse-json/-/parse-json-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-is-absolute.git@edc91d348b21dac2ab65ea2fbec2868e2eff5eb6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-inside-1.0.2"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c)\
    \ 2013-2016 Domenic Denicola <d@domenic.me>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-inside@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/domenic/path-is-inside#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT OR WTFPL"
  name: "path-is-inside"
  summary: "Tests whether one path is inside another path"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-path-is-inside-1.0.2-vcs"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c)\
    \ 2013-2016 Domenic Denicola <d@domenic.me>"
  downloadLocation: "git+https://github.com/domenic/path-is-inside.git@05a9bf7c5e008505539e14e96c4d2fc8b2c6d058"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-inside@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/domenic/path-is-inside#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-inside"
  summary: "Tests whether one path is inside another path"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-path-is-inside-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c)\
    \ 2013-2016 Domenic Denicola <d@domenic.me>"
  downloadLocation: "https://registry.npmjs.org/path-is-inside/-/path-is-inside-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-inside@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/domenic/path-is-inside#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-inside"
  summary: "Tests whether one path is inside another path"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-path-key-2.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-key@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-key#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-key"
  summary: "Get the PATH environment variable key cross-platform"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-key-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-key.git@d60207f9ab9dc9e60d49c87faacf415a4946287c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-key@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-key#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-key"
  summary: "Get the PATH environment variable key cross-platform"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-key-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-key/-/path-key-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-key@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-key#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-key"
  summary: "Get the PATH environment variable key cross-platform"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6-vcs"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "git+https://github.com/jbgutierrez/path-parse.git@97efc90ce24455d23ec6acedf47589df46e48ea0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6-source-artifact"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "https://registry.npmjs.org/path-parse/-/path-parse-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-type-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-path-type-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-type.git@a83cd9d8ad6560dadaa85ae3e677e5a3b58e3ee4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-path-type-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-type/-/path-type-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-picomatch-2.0.7"
  copyrightText: "Copyright (c) 2017 present, Jon Schlinkert\nCopyright (c) 2017 present,\
    \ Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/picomatch@2.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/picomatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "picomatch"
  summary: "Blazing fast and accurate glob matcher written in JavaScript, with no\
    \ dependencies and full support for standard and extended Bash glob features,\
    \ including braces, extglobs, POSIX brackets, and regular expressions."
  versionInfo: "2.0.7"
- SPDXID: "SPDXRef-Package-NPM-picomatch-2.0.7-vcs"
  copyrightText: "Copyright (c) 2017 present, Jon Schlinkert\nCopyright (c) 2017 present,\
    \ Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/picomatch.git@9eb9a71780035c5c3e2c1e67eafa3d967f2289b2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/picomatch@2.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/picomatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "picomatch"
  summary: "Blazing fast and accurate glob matcher written in JavaScript, with no\
    \ dependencies and full support for standard and extended Bash glob features,\
    \ including braces, extglobs, POSIX brackets, and regular expressions."
  versionInfo: "2.0.7"
- SPDXID: "SPDXRef-Package-NPM-picomatch-2.0.7-source-artifact"
  copyrightText: "Copyright (c) 2017 present, Jon Schlinkert\nCopyright (c) 2017 present,\
    \ Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/picomatch/-/picomatch-2.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/picomatch@2.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/picomatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "picomatch"
  summary: "Blazing fast and accurate glob matcher written in JavaScript, with no\
    \ dependencies and full support for standard and extended Bash glob features,\
    \ including braces, extglobs, POSIX brackets, and regular expressions."
  versionInfo: "2.0.7"
- SPDXID: "SPDXRef-Package-NPM-pify-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-pify-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/pify.git@e64328eb378e2ecd6bf8c0eb40aa3277680aaff4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-pify-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/pify/-/pify-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-prepend-http-1.0.4"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/prepend-http@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/prepend-http#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "prepend-http"
  summary: "Prepend `http://` to humanized URLs like todomvc.com and localhost"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-prepend-http-1.0.4-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/prepend-http.git@4f2fbbcdd5daa579c062f9e54a99c8714ddc80d8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/prepend-http@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/prepend-http#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "prepend-http"
  summary: "Prepend `http://` to humanized URLs like todomvc.com and localhost"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-prepend-http-1.0.4-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/prepend-http/-/prepend-http-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/prepend-http@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/prepend-http#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "prepend-http"
  summary: "Prepend `http://` to humanized URLs like todomvc.com and localhost"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-pseudomap-1.0.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pseudomap@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/pseudomap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "pseudomap"
  summary: "A thing that is a lot like ES6 `Map`, but without iterators, for use in\
    \ environments where `for..of` syntax and `Map` are not available."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-pseudomap-1.0.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/pseudomap.git@b6dc728207a0321ede6479e34506d3e0e13a940b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pseudomap@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/pseudomap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pseudomap"
  summary: "A thing that is a lot like ES6 `Map`, but without iterators, for use in\
    \ environments where `for..of` syntax and `Map` are not available."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-pseudomap-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/pseudomap/-/pseudomap-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pseudomap@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/pseudomap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pseudomap"
  summary: "A thing that is a lot like ES6 `Map`, but without iterators, for use in\
    \ environments where `for..of` syntax and `Map` are not available."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-pstree.remy-1.1.7"
  copyrightText: "Copyright (c) 2019 Remy Sharp, https://remysharp.com <remy@remysharp.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pstree.remy@1.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/remy/pstree#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pstree.remy"
  summary: "Collects the full tree of processes from /proc"
  versionInfo: "1.1.7"
- SPDXID: "SPDXRef-Package-NPM-pstree.remy-1.1.7-vcs"
  copyrightText: "Copyright (c) 2019 Remy Sharp, https://remysharp.com <remy@remysharp.com>"
  downloadLocation: "git+https://github.com/remy/pstree.git@44da1174fc8a0c68d7bc30cacad9cec28c50f64e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pstree.remy@1.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/remy/pstree#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pstree.remy"
  summary: "Collects the full tree of processes from /proc"
  versionInfo: "1.1.7"
- SPDXID: "SPDXRef-Package-NPM-pstree.remy-1.1.7-source-artifact"
  copyrightText: "Copyright (c) 2019 Remy Sharp, https://remysharp.com <remy@remysharp.com>"
  downloadLocation: "https://registry.npmjs.org/pstree.remy/-/pstree.remy-1.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pstree.remy@1.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/remy/pstree#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pstree.remy"
  summary: "Collects the full tree of processes from /proc"
  versionInfo: "1.1.7"
- SPDXID: "SPDXRef-Package-NPM-pump-3.0.0"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-pump-3.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/pump.git@b05d1838cc3be47f7c3cd9020c73f6ebbafd3aa0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-pump-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-rc-1.2.8"
  copyrightText: "Copyright (c) 2011 Dominic Tarr\nCopyright (c) 2013 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rc@1.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/rc#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR BSD-2-Clause OR MIT"
  name: "rc"
  summary: "hardwired configuration loader"
  versionInfo: "1.2.8"
- SPDXID: "SPDXRef-Package-NPM-rc-1.2.8-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr\nCopyright (c) 2013 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/rc.git@a97f6adcc37ee1cad06ab7dc9b0bd842bbc5c664"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rc@1.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/rc#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rc"
  summary: "hardwired configuration loader"
  versionInfo: "1.2.8"
- SPDXID: "SPDXRef-Package-NPM-rc-1.2.8-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr\nCopyright (c) 2013 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/rc/-/rc-1.2.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rc@1.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/rc#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rc"
  summary: "hardwired configuration loader"
  versionInfo: "1.2.8"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/read-pkg.git@7eb2f6b7b50618c28f1bf2db8b895a453552cd9c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/read-pkg/-/read-pkg-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-readdirp-3.3.0"
  copyrightText: "Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller <https://paulmillr.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readdirp@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/readdirp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "readdirp"
  summary: "Recursive version of fs.readdir with streaming API."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-readdirp-3.3.0-vcs"
  copyrightText: "Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller <https://paulmillr.com>"
  downloadLocation: "git+https://github.com/paulmillr/readdirp.git@b9376eb2aad7e7f4dc3352ff8d139ba5e4877519"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readdirp@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/readdirp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readdirp"
  summary: "Recursive version of fs.readdir with streaming API."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-readdirp-3.3.0-source-artifact"
  copyrightText: "Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller <https://paulmillr.com>"
  downloadLocation: "https://registry.npmjs.org/readdirp/-/readdirp-3.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readdirp@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/readdirp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readdirp"
  summary: "Recursive version of fs.readdir with streaming API."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-registry-auth-token-3.4.0"
  copyrightText: "Copyright (c) 2016 Espen Hovlandsdal"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/registry-auth-token@3.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/rexxars/registry-auth-token#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "registry-auth-token"
  summary: "Get the auth token set for an npm registry (if any)"
  versionInfo: "3.4.0"
- SPDXID: "SPDXRef-Package-NPM-registry-auth-token-3.4.0-vcs"
  copyrightText: "Copyright (c) 2016 Espen Hovlandsdal"
  downloadLocation: "git+ssh://github.com/rexxars/registry-auth-token.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/registry-auth-token@3.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/rexxars/registry-auth-token#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "registry-auth-token"
  summary: "Get the auth token set for an npm registry (if any)"
  versionInfo: "3.4.0"
- SPDXID: "SPDXRef-Package-NPM-registry-auth-token-3.4.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Espen Hovlandsdal"
  downloadLocation: "https://registry.npmjs.org/registry-auth-token/-/registry-auth-token-3.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/registry-auth-token@3.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/rexxars/registry-auth-token#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "registry-auth-token"
  summary: "Get the auth token set for an npm registry (if any)"
  versionInfo: "3.4.0"
- SPDXID: "SPDXRef-Package-NPM-registry-url-3.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/registry-url@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/registry-url"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "registry-url"
  summary: "Get the set npm registry URL"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-registry-url-3.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/registry-url.git@79d07a452fe0c990fa0b154d510c68fc483b4689"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/registry-url@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/registry-url"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "registry-url"
  summary: "Get the set npm registry URL"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-registry-url-3.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/registry-url/-/registry-url-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/registry-url@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/registry-url"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "registry-url"
  summary: "Get the set npm registry URL"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.12.0"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.12.0-vcs"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "git+https://github.com/browserify/resolve.git@2c61679ed9d10524ba1bcec46cf5488755c39cf8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.12.0-source-artifact"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "https://registry.npmjs.org/resolve/-/resolve-1.12.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-responselike-2.0.0"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/responselike@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/responselike#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "responselike"
  summary: "A response-like object for mocking a Node.js HTTP response stream"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-responselike-2.0.0-vcs"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "git+https://github.com/lukechilds/responselike.git@6dff4cd69cfc91710dc9864e26d3a3dff558376a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/responselike@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/responselike#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "responselike"
  summary: "A response-like object for mocking a Node.js HTTP response stream"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-responselike-2.0.0-source-artifact"
  copyrightText: "(c) Luke Childs\nCopyright (c) 2017 Luke Childs"
  downloadLocation: "https://registry.npmjs.org/responselike/-/responselike-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/responselike@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lukechilds/responselike#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "responselike"
  summary: "A response-like object for mocking a Node.js HTTP response stream"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-rx-2.3.24"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rx@2.3.24"
  filesAnalyzed: false
  homepage: "https://github.com/Reactive-Extensions/RxJS"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "rx"
  summary: "Library for composing asynchronous and event-based operations in JavaScript"
  versionInfo: "2.3.24"
- SPDXID: "SPDXRef-Package-NPM-rx-2.3.24-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/Reactive-Extensions/RxJS.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rx@2.3.24"
  filesAnalyzed: false
  homepage: "https://github.com/Reactive-Extensions/RxJS"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rx"
  summary: "Library for composing asynchronous and event-based operations in JavaScript"
  versionInfo: "2.3.24"
- SPDXID: "SPDXRef-Package-NPM-rx-2.3.24-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/rx/-/rx-2.3.24.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rx@2.3.24"
  filesAnalyzed: false
  homepage: "https://github.com/Reactive-Extensions/RxJS"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rx"
  summary: "Library for composing asynchronous and event-based operations in JavaScript"
  versionInfo: "2.3.24"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/safe-buffer.git@ae53d5b9f06eae8540ca948d14e43ca32692dd8c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/node-semver.git@c83c18cf84f9ccaea3431c929bb285fd168c01e4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-diff-2.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver-diff@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/semver-diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "semver-diff"
  summary: "Get the diff type of two semver versions: 0.0.1 0.0.2 → patch"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-semver-diff-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/semver-diff.git@58205f4b171e86b07942a30fb4502bc0ca60a071"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver-diff@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/semver-diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver-diff"
  summary: "Get the diff type of two semver versions: 0.0.1 0.0.2 → patch"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-semver-diff-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/semver-diff/-/semver-diff-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver-diff@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/semver-diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver-diff"
  summary: "Get the diff type of two semver versions: 0.0.1 0.0.2 → patch"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-shebang-command-1.2.0"
  copyrightText: "(c) Kevin Martensson (http://github.com/kevva)\nCopyright (c) Kevin\
    \ Martensson <kevinmartensson@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/shebang-command@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kevva/shebang-command#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "shebang-command"
  summary: "Get the command from a shebang"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-shebang-command-1.2.0-vcs"
  copyrightText: "(c) Kevin Martensson (http://github.com/kevva)\nCopyright (c) Kevin\
    \ Martensson <kevinmartensson@gmail.com>"
  downloadLocation: "git+https://github.com/kevva/shebang-command.git@01de9b7d355f21e00417650a6fb1eb56321bc23c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/shebang-command@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kevva/shebang-command#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "shebang-command"
  summary: "Get the command from a shebang"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-shebang-command-1.2.0-source-artifact"
  copyrightText: "(c) Kevin Martensson (http://github.com/kevva)\nCopyright (c) Kevin\
    \ Martensson <kevinmartensson@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/shebang-command/-/shebang-command-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/shebang-command@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kevva/shebang-command#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "shebang-command"
  summary: "Get the command from a shebang"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-shebang-regex-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/shebang-regex@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/shebang-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "shebang-regex"
  summary: "Regular expression for matching a shebang"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-shebang-regex-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/shebang-regex.git@cb774c70d5f569479ca997abf8ee7e558e617284"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/shebang-regex@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/shebang-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "shebang-regex"
  summary: "Regular expression for matching a shebang"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-shebang-regex-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/shebang-regex/-/shebang-regex-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/shebang-regex@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/shebang-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "shebang-regex"
  summary: "Regular expression for matching a shebang"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.2"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.2-vcs"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "git+https://github.com/tapjs/signal-exit.git@9c5ad9809fe6135ef22e2623989deaffe2a4fa8a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-spawn-command-0.0.2-1"
  copyrightText: "Copyright (c) 2011 by Maciej Malecki"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spawn-command@0.0.2-1"
  filesAnalyzed: false
  homepage: "https://github.com/mmalecki/spawn-command"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "spawn-command"
  summary: "Spawn commands like `child_process.exec` does but return a `ChildProcess`"
  versionInfo: "0.0.2-1"
- SPDXID: "SPDXRef-Package-NPM-spawn-command-0.0.2-1-vcs"
  copyrightText: "Copyright (c) 2011 by Maciej Malecki"
  downloadLocation: "git+https://github.com/mmalecki/spawn-command.git@78f3fa3b904b767ec4dd1c4b27c9b288eb498f03"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spawn-command@0.0.2-1"
  filesAnalyzed: false
  homepage: "https://github.com/mmalecki/spawn-command"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spawn-command"
  summary: "Spawn commands like `child_process.exec` does but return a `ChildProcess`"
  versionInfo: "0.0.2-1"
- SPDXID: "SPDXRef-Package-NPM-spawn-command-0.0.2-1-source-artifact"
  copyrightText: "Copyright (c) 2011 by Maciej Malecki"
  downloadLocation: "https://registry.npmjs.org/spawn-command/-/spawn-command-0.0.2-1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spawn-command@0.0.2-1"
  filesAnalyzed: false
  homepage: "https://github.com/mmalecki/spawn-command"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spawn-command"
  summary: "Spawn commands like `child_process.exec` does but return a `ChildProcess`"
  versionInfo: "0.0.2-1"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  copyrightText: "(c) 2014 WTFPL\nCopyright (c) 2013 Michael\nCopyright (c) 2015 Austin\n\
    Copyright 2014 uh-sem-blee, Co.' AGPL-3.0-or-later', AGPL-3' AGPL-3.0-or-later',\
    \ AGPL3' AGPL-3.0-or-later\nCopyright First Rally\nCopyright spdx-correct.js contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.1.0-vcs"
  copyrightText: "(c) 2014 WTFPL\nCopyright (c) 2013 Michael\nCopyright (c) 2015 Austin\n\
    Copyright 2014 uh-sem-blee, Co.' AGPL-3.0-or-later', AGPL-3' AGPL-3.0-or-later',\
    \ AGPL3' AGPL-3.0-or-later\nCopyright First Rally\nCopyright spdx-correct.js contributors"
  downloadLocation: "git+https://github.com/jslicense/spdx-correct.js.git@6e556b4af7bee9899e7f16ae8f745719e5517e5d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.1.0-source-artifact"
  copyrightText: "(c) 2014 WTFPL\nCopyright (c) 2013 Michael\nCopyright (c) 2015 Austin\n\
    Copyright 2014 uh-sem-blee, Co.' AGPL-3.0-or-later', AGPL-3' AGPL-3.0-or-later',\
    \ AGPL3' AGPL-3.0-or-later\nCopyright First Rally\nCopyright spdx-correct.js contributors"
  downloadLocation: "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
  copyrightText: "Copyright (c) 2010-2015 Linux Foundation and its Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC-BY-3.0"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-vcs"
  copyrightText: "Copyright (c) 2010-2015 Linux Foundation and its Contributors"
  downloadLocation: "git+https://github.com/kemitchell/spdx-exceptions.json.git@c33d7b8f1966c486c8f831e0dd1c5af6f4deefbd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-source-artifact"
  copyrightText: "Copyright (c) 2010-2015 Linux Foundation and its Contributors"
  downloadLocation: "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  copyrightText: "Copyright (c) 2015 Kyle E. Mitchell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Kyle E. Mitchell"
  downloadLocation: "git+https://github.com/jslicense/spdx-expression-parse.js.git@063e2d555cc5aef6c433c7dce7c543894476bcb8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Kyle E. Mitchell"
  downloadLocation: "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/shinnn/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC0-1.0"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.5"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/shinnn/spdx-license-ids.git@2bc004aae6f30d625d3aad95eac09d9aaf1c97cc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/shinnn/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.5"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/shinnn/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.5"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3-vcs"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "git+https://github.com/alexei/sprintf.js.git@747b806c2dab5b64d5c9958c42884946a187c3b1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-string-width-2.1.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-width-2.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/string-width.git@74d8d552b465692790c41169b123409669d41079"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-width-2.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-4.0.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/strip-ansi.git@c299056a42b31d7a479d6a89b41318b2a2462cc7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-4.0.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-bom.git@8258d09a069a5d5eb3d787c1d5d29737df1c8bba"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-bom/-/strip-bom-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-eof-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-eof@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-eof"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-eof"
  summary: "Strip the End-Of-File (EOF) character from a string/buffer"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-eof-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-eof.git@365dfe6c19b4e607a0cc2cf7dad0b0620f238333"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-eof@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-eof"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-eof"
  summary: "Strip the End-Of-File (EOF) character from a string/buffer"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-eof-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-eof/-/strip-eof-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-eof@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-eof"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-eof"
  summary: "Strip the End-Of-File (EOF) character from a string/buffer"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-json-comments@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-json-comments#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "strip-json-comments"
  summary: "Strip comments from JSON. Lets you use comments in your JSON files!"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-json-comments.git@1aef99eaa70d07981156e8aaa722e750c3b4eaf9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-json-comments@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-json-comments#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-json-comments"
  summary: "Strip comments from JSON. Lets you use comments in your JSON files!"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-json-comments@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-json-comments#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-json-comments"
  summary: "Strip comments from JSON. Lets you use comments in your JSON files!"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-supports-color-3.2.3"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@3.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "3.2.3"
- SPDXID: "SPDXRef-Package-NPM-supports-color-3.2.3-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@c2394c1f77a0f64c4b2d0db33a3df3b841e6fc15"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@3.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "3.2.3"
- SPDXID: "SPDXRef-Package-NPM-supports-color-3.2.3-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-3.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@3.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "3.2.3"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@7759fc135b1be07cb7411178d7b1ac33d367fec8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-term-size-1.2.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/term-size@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/term-size#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "term-size"
  summary: "Reliably get the terminal window size (columns & rows)"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-term-size-1.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/term-size.git@d3857c0f53ef237edbc65f8a85eacb9410963d85"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/term-size@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/term-size#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "term-size"
  summary: "Reliably get the terminal window size (columns & rows)"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-term-size-1.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/term-size/-/term-size-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/term-size@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/term-size#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "term-size"
  summary: "Reliably get the terminal window size (columns & rows)"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-timed-out-4.0.1"
  copyrightText: "(c) Vsevolod Strukchinsky (floatdrop@gmail.com)\nCopyright (c) Vsevolod\
    \ Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/timed-out@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/timed-out#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "timed-out"
  summary: "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-timed-out-4.0.1-vcs"
  copyrightText: "(c) Vsevolod Strukchinsky (floatdrop@gmail.com)\nCopyright (c) Vsevolod\
    \ Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "git+https://github.com/floatdrop/timed-out.git@2f00fdafb6af0a9b91fb23a04a9271766c5559a4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/timed-out@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/timed-out#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "timed-out"
  summary: "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-timed-out-4.0.1-source-artifact"
  copyrightText: "(c) Vsevolod Strukchinsky (floatdrop@gmail.com)\nCopyright (c) Vsevolod\
    \ Strukchinsky <floatdrop@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/timed-out/-/timed-out-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/timed-out@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/timed-out#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "timed-out"
  summary: "Emit `ETIMEDOUT` or `ESOCKETTIMEDOUT` when ClientRequest is hanged"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-to-readable-stream-2.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-readable-stream@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/to-readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "to-readable-stream"
  summary: "Convert a string/Buffer/Uint8Array to a readable stream"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-to-readable-stream-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/to-readable-stream.git@89ccd4b90d53994beb53bc9f9899b6a15cb6b43f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-readable-stream@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/to-readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-readable-stream"
  summary: "Convert a string/Buffer/Uint8Array to a readable stream"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-to-readable-stream-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/to-readable-stream/-/to-readable-stream-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-readable-stream@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/to-readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-readable-stream"
  summary: "Convert a string/Buffer/Uint8Array to a readable stream"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  copyrightText: "Copyright (c) 2015 present, Jon Schlinkert\nCopyright (c) 2019 Jon\
    \ Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-regex-range@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/to-regex-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "to-regex-range"
  summary: "Pass two numbers, get a regex-compatible source string for matching ranges.\
    \ Validated against more than 2.78 million test assertions."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-to-regex-range-5.0.1-vcs"
  copyrightText: "Copyright (c) 2015 present, Jon Schlinkert\nCopyright (c) 2019 Jon\
    \ Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/to-regex-range.git@c05ef9ec07e7703d146467934098ecbde9d0bd95"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-regex-range@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/to-regex-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-regex-range"
  summary: "Pass two numbers, get a regex-compatible source string for matching ranges.\
    \ Validated against more than 2.78 million test assertions."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-to-regex-range-5.0.1-source-artifact"
  copyrightText: "Copyright (c) 2015 present, Jon Schlinkert\nCopyright (c) 2019 Jon\
    \ Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-regex-range@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/to-regex-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-regex-range"
  summary: "Pass two numbers, get a regex-compatible source string for matching ranges.\
    \ Validated against more than 2.78 million test assertions."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-touch-3.1.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/touch@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-touch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "touch"
  summary: "like touch(1) in node"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-touch-3.1.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/node-touch.git@7706a0d249c72edd90adbeb37ec8d4ca2b9a9a7f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/touch@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-touch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "touch"
  summary: "like touch(1) in node"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-touch-3.1.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/touch/-/touch-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/touch@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-touch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "touch"
  summary: "like touch(1) in node"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-tree-kill-1.2.2"
  copyrightText: "Copyright (c) 2018 Peter Krumins"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tree-kill@1.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/pkrumins/node-tree-kill"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tree-kill"
  summary: "kill trees of processes"
  versionInfo: "1.2.2"
- SPDXID: "SPDXRef-Package-NPM-tree-kill-1.2.2-vcs"
  copyrightText: "Copyright (c) 2018 Peter Krumins"
  downloadLocation: "git+https://github.com/pkrumins/node-tree-kill.git@cb478381547107f5c53362668533f634beff7e6e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tree-kill@1.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/pkrumins/node-tree-kill"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tree-kill"
  summary: "kill trees of processes"
  versionInfo: "1.2.2"
- SPDXID: "SPDXRef-Package-NPM-tree-kill-1.2.2-source-artifact"
  copyrightText: "Copyright (c) 2018 Peter Krumins"
  downloadLocation: "https://registry.npmjs.org/tree-kill/-/tree-kill-1.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tree-kill@1.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/pkrumins/node-tree-kill"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tree-kill"
  summary: "kill trees of processes"
  versionInfo: "1.2.2"
- SPDXID: "SPDXRef-Package-NPM-tslib-1.11.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslib@1.11.1"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tslib"
  summary: "Runtime library for TypeScript helper functions"
  versionInfo: "1.11.1"
- SPDXID: "SPDXRef-Package-NPM-tslib-1.11.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/tslib.git@c1f87f79190d61e1e4ca24af03894771cdf1aef9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslib@1.11.1"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslib"
  summary: "Runtime library for TypeScript helper functions"
  versionInfo: "1.11.1"
- SPDXID: "SPDXRef-Package-NPM-tslib-1.11.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/tslib/-/tslib-1.11.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslib@1.11.1"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslib"
  summary: "Runtime library for TypeScript helper functions"
  versionInfo: "1.11.1"
- SPDXID: "SPDXRef-Package-NPM-tslint-6.1.0"
  copyrightText: "(c) 2018 Palantir Technologies\nCopyright 2013-2019 Palantir Technologies,\
    \ Inc.\nCopyright 2019 ', enforce-trailing-newline"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslint@6.1.0"
  filesAnalyzed: false
  homepage: "https://palantir.github.io/tslint"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tslint"
  summary: "An extensible static analysis linter for the TypeScript language"
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-tslint-6.1.0-vcs"
  copyrightText: "(c) 2018 Palantir Technologies\nCopyright 2013-2019 Palantir Technologies,\
    \ Inc.\nCopyright 2019 ', enforce-trailing-newline"
  downloadLocation: "git+https://github.com/palantir/tslint.git@0ebda9b11a4fe7f27f6eb25aedc552960ca584c6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslint@6.1.0"
  filesAnalyzed: false
  homepage: "https://palantir.github.io/tslint"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslint"
  summary: "An extensible static analysis linter for the TypeScript language"
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-tslint-6.1.0-source-artifact"
  copyrightText: "(c) 2018 Palantir Technologies\nCopyright 2013-2019 Palantir Technologies,\
    \ Inc.\nCopyright 2019 ', enforce-trailing-newline"
  downloadLocation: "https://registry.npmjs.org/tslint/-/tslint-6.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslint@6.1.0"
  filesAnalyzed: false
  homepage: "https://palantir.github.io/tslint"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslint"
  summary: "An extensible static analysis linter for the TypeScript language"
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-tsutils-2.29.0"
  copyrightText: "Copyright (c) 2017 Klaus Meinhardt"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsutils@2.29.0"
  filesAnalyzed: false
  homepage: "https://github.com/ajafff/tsutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tsutils"
  summary: "utilities for working with typescript's AST"
  versionInfo: "2.29.0"
- SPDXID: "SPDXRef-Package-NPM-tsutils-2.29.0-vcs"
  copyrightText: "Copyright (c) 2017 Klaus Meinhardt"
  downloadLocation: "git+https://github.com/ajafff/tsutils.git@31508d0a38f2e76cbe3d2486e23c1cee83fc3550"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsutils@2.29.0"
  filesAnalyzed: false
  homepage: "https://github.com/ajafff/tsutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tsutils"
  summary: "utilities for working with typescript's AST"
  versionInfo: "2.29.0"
- SPDXID: "SPDXRef-Package-NPM-tsutils-2.29.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Klaus Meinhardt"
  downloadLocation: "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsutils@2.29.0"
  filesAnalyzed: false
  homepage: "https://github.com/ajafff/tsutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tsutils"
  summary: "utilities for working with typescript's AST"
  versionInfo: "2.29.0"
- SPDXID: "SPDXRef-Package-NPM-type-fest-0.10.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-fest@0.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/type-fest#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC0-1.0 OR MIT"
  name: "type-fest"
  summary: "A collection of essential TypeScript types"
  versionInfo: "0.10.0"
- SPDXID: "SPDXRef-Package-NPM-type-fest-0.10.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/type-fest.git@8b857cedffb19f6e770887aa8cdbdc878586d53f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-fest@0.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/type-fest#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "type-fest"
  summary: "A collection of essential TypeScript types"
  versionInfo: "0.10.0"
- SPDXID: "SPDXRef-Package-NPM-type-fest-0.10.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/type-fest/-/type-fest-0.10.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-fest@0.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/type-fest#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "type-fest"
  summary: "A collection of essential TypeScript types"
  versionInfo: "0.10.0"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.5.3"
  copyrightText: "(c) 2016 Company, Inc.\n(c) 2018 by Matt Zabriskie\n(c) Hello World\n\
    (c) Sindre Sorhus\n(c) by W3C\n(c) jQuery Foundation\nCopyright (c) 1991-2017\
    \ Unicode, Inc.\nCopyright (c) 2011 Edgar Tolentino and Pablo Impallari (www.impallari.com\
    \ impallari@gmail.com)\nCopyright (c) 2011 Edgar Tolentino, Pablo Impallari, Igino\
    \ Marini\nCopyright (c) 2011 Igino Marini. (www.ikern.com mail@iginomarini.com)\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2012 Ecma\
    \ International\nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2013, 2015\
    \ present, Facebook, Inc.\nCopyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright (c) 2013-2015, 2017 present, Facebook, Inc.\nCopyright (c) 2014 Facebook,\
    \ Inc.\nCopyright (c) 2014 Ivan Nikulin <ifaaan@gmail.com>\nCopyright (c) 2014\
    \ The Chromium Authors\nCopyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner\
    \ and contributors\nCopyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2015\
    \ Andreas Lubbe\nCopyright (c) 2015 Tiancheng Timoth Gu\nCopyright (c) 2015 Tiancheng\
    \ Timothy Gu\nCopyright (c) 2016-2018 John Gardner\nCopyright (c) 2017-2018 Compositor\
    \ and Zeit, Inc.\nCopyright (c) 2018 Philipp Kief\nCopyright (c) 2018 The Khronos\
    \ Group Inc.\nCopyright (c) 2018 WHATWG\nCopyright (c) James Long and contributors\n\
    Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation\nCopyright (c) YEAR\
    \ W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\nCopyright 2004 present Facebook\n\
    Copyright 2009 the Sputnik authors\nCopyright 2009-2011, 2014 Mozilla Foundation\
    \ and contributors\nCopyright 2011 The Closure Compiler Authors\nCopyright 2011-2016\
    \ Twitter, Inc.\nCopyright 2012-2014 Kit Cambridge http://kit.mit-license.org\n\
    Copyright 2013-2015 Panayiotis Lipiridis\nCopyright 2013-2016 present Facebook,\
    \ Inc.\nCopyright 2014 jQuery Foundation and other contributors\nCopyright 2014-2015\
    \ Facebook, Inc.\nCopyright 2014-2016 Simon Lydell\nCopyright 2014-2016 Simon\
    \ Lydell X11\nCopyright 2015 MyCompany Inc.\nCopyright 2016 Creative Tim (http://www.creative-tim.com)\n\
    Copyright 2016 Dave Gandy\nCopyright 2017 Google Inc., PhantomJS\nCopyright 2017-2018\
    \ Google Inc.\nCopyright 2017-2019 Google Inc.\nCopyright JS Foundation and other\
    \ contributors\nCopyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.5.3"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.5.3"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.5.3-vcs"
  copyrightText: "(c) 2016 Company, Inc.\n(c) 2018 by Matt Zabriskie\n(c) Hello World\n\
    (c) Sindre Sorhus\n(c) by W3C\n(c) jQuery Foundation\nCopyright (c) 1991-2017\
    \ Unicode, Inc.\nCopyright (c) 2011 Edgar Tolentino and Pablo Impallari (www.impallari.com\
    \ impallari@gmail.com)\nCopyright (c) 2011 Edgar Tolentino, Pablo Impallari, Igino\
    \ Marini\nCopyright (c) 2011 Igino Marini. (www.ikern.com mail@iginomarini.com)\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2012 Ecma\
    \ International\nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2013, 2015\
    \ present, Facebook, Inc.\nCopyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright (c) 2013-2015, 2017 present, Facebook, Inc.\nCopyright (c) 2014 Facebook,\
    \ Inc.\nCopyright (c) 2014 Ivan Nikulin <ifaaan@gmail.com>\nCopyright (c) 2014\
    \ The Chromium Authors\nCopyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner\
    \ and contributors\nCopyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2015\
    \ Andreas Lubbe\nCopyright (c) 2015 Tiancheng Timoth Gu\nCopyright (c) 2015 Tiancheng\
    \ Timothy Gu\nCopyright (c) 2016-2018 John Gardner\nCopyright (c) 2017-2018 Compositor\
    \ and Zeit, Inc.\nCopyright (c) 2018 Philipp Kief\nCopyright (c) 2018 The Khronos\
    \ Group Inc.\nCopyright (c) 2018 WHATWG\nCopyright (c) James Long and contributors\n\
    Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation\nCopyright (c) YEAR\
    \ W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\nCopyright 2004 present Facebook\n\
    Copyright 2009 the Sputnik authors\nCopyright 2009-2011, 2014 Mozilla Foundation\
    \ and contributors\nCopyright 2011 The Closure Compiler Authors\nCopyright 2011-2016\
    \ Twitter, Inc.\nCopyright 2012-2014 Kit Cambridge http://kit.mit-license.org\n\
    Copyright 2013-2015 Panayiotis Lipiridis\nCopyright 2013-2016 present Facebook,\
    \ Inc.\nCopyright 2014 jQuery Foundation and other contributors\nCopyright 2014-2015\
    \ Facebook, Inc.\nCopyright 2014-2016 Simon Lydell\nCopyright 2014-2016 Simon\
    \ Lydell X11\nCopyright 2015 MyCompany Inc.\nCopyright 2016 Creative Tim (http://www.creative-tim.com)\n\
    Copyright 2016 Dave Gandy\nCopyright 2017 Google Inc., PhantomJS\nCopyright 2017-2018\
    \ Google Inc.\nCopyright 2017-2019 Google Inc.\nCopyright JS Foundation and other\
    \ contributors\nCopyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/Microsoft/TypeScript.git@aff7ef12305de00cca7ac405fdaf8402ba0e6973"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.5.3"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.5.3"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.5.3-source-artifact"
  copyrightText: "(c) 2016 Company, Inc.\n(c) 2018 by Matt Zabriskie\n(c) Hello World\n\
    (c) Sindre Sorhus\n(c) by W3C\n(c) jQuery Foundation\nCopyright (c) 1991-2017\
    \ Unicode, Inc.\nCopyright (c) 2011 Edgar Tolentino and Pablo Impallari (www.impallari.com\
    \ impallari@gmail.com)\nCopyright (c) 2011 Edgar Tolentino, Pablo Impallari, Igino\
    \ Marini\nCopyright (c) 2011 Igino Marini. (www.ikern.com mail@iginomarini.com)\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2012 Ecma\
    \ International\nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2013, 2015\
    \ present, Facebook, Inc.\nCopyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright (c) 2013-2015, 2017 present, Facebook, Inc.\nCopyright (c) 2014 Facebook,\
    \ Inc.\nCopyright (c) 2014 Ivan Nikulin <ifaaan@gmail.com>\nCopyright (c) 2014\
    \ The Chromium Authors\nCopyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner\
    \ and contributors\nCopyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2015\
    \ Andreas Lubbe\nCopyright (c) 2015 Tiancheng Timoth Gu\nCopyright (c) 2015 Tiancheng\
    \ Timothy Gu\nCopyright (c) 2016-2018 John Gardner\nCopyright (c) 2017-2018 Compositor\
    \ and Zeit, Inc.\nCopyright (c) 2018 Philipp Kief\nCopyright (c) 2018 The Khronos\
    \ Group Inc.\nCopyright (c) 2018 WHATWG\nCopyright (c) James Long and contributors\n\
    Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation\nCopyright (c) YEAR\
    \ W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\nCopyright 2004 present Facebook\n\
    Copyright 2009 the Sputnik authors\nCopyright 2009-2011, 2014 Mozilla Foundation\
    \ and contributors\nCopyright 2011 The Closure Compiler Authors\nCopyright 2011-2016\
    \ Twitter, Inc.\nCopyright 2012-2014 Kit Cambridge http://kit.mit-license.org\n\
    Copyright 2013-2015 Panayiotis Lipiridis\nCopyright 2013-2016 present Facebook,\
    \ Inc.\nCopyright 2014 jQuery Foundation and other contributors\nCopyright 2014-2015\
    \ Facebook, Inc.\nCopyright 2014-2016 Simon Lydell\nCopyright 2014-2016 Simon\
    \ Lydell X11\nCopyright 2015 MyCompany Inc.\nCopyright 2016 Creative Tim (http://www.creative-tim.com)\n\
    Copyright 2016 Dave Gandy\nCopyright 2017 Google Inc., PhantomJS\nCopyright 2017-2018\
    \ Google Inc.\nCopyright 2017-2019 Google Inc.\nCopyright JS Foundation and other\
    \ contributors\nCopyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/typescript/-/typescript-3.5.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.5.3"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.5.3"
- SPDXID: "SPDXRef-Package-NPM-undefsafe-2.0.3"
  copyrightText: "Copyright (c) 2016 Remy Sharp, http://remysharp.com <remy@remysharp.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/undefsafe@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/remy/undefsafe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "undefsafe"
  summary: "Undefined safe way of extracting object properties"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-undefsafe-2.0.3-vcs"
  copyrightText: "Copyright (c) 2016 Remy Sharp, http://remysharp.com <remy@remysharp.com>"
  downloadLocation: "git+https://github.com/remy/undefsafe.git@f272681b3a50e2c4cbb6a8533795e1453382c822"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/undefsafe@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/remy/undefsafe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "undefsafe"
  summary: "Undefined safe way of extracting object properties"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-undefsafe-2.0.3-source-artifact"
  copyrightText: "Copyright (c) 2016 Remy Sharp, http://remysharp.com <remy@remysharp.com>"
  downloadLocation: "https://registry.npmjs.org/undefsafe/-/undefsafe-2.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/undefsafe@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/remy/undefsafe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "undefsafe"
  summary: "Undefined safe way of extracting object properties"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-unique-string-1.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unique-string@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/unique-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "unique-string"
  summary: "Generate a unique random string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unique-string-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/unique-string.git@157a6b74fb44cf5d4ee2aa579502b967edbf4203"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unique-string@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/unique-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unique-string"
  summary: "Generate a unique random string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unique-string-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/unique-string/-/unique-string-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unique-string@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/unique-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unique-string"
  summary: "Generate a unique random string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unzip-response-2.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unzip-response@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/unzip-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "unzip-response"
  summary: "Unzip a HTTP response if needed"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-unzip-response-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/unzip-response.git@71858052fe94b89678d14ba54e8e96cacbda92c3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unzip-response@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/unzip-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unzip-response"
  summary: "Unzip a HTTP response if needed"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-unzip-response-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/unzip-response/-/unzip-response-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unzip-response@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/unzip-response#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unzip-response"
  summary: "Unzip a HTTP response if needed"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/update-notifier@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/yeoman/update-notifier#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "update-notifier"
  summary: "Update notifications for your CLI app"
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-update-notifier-2.5.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/yeoman/update-notifier.git@5cd65771e2fab2567592ae217d3ce647679462af"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/update-notifier@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/yeoman/update-notifier#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "update-notifier"
  summary: "Update notifications for your CLI app"
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-update-notifier-2.5.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/update-notifier/-/update-notifier-2.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/update-notifier@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/yeoman/update-notifier#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "update-notifier"
  summary: "Update notifications for your CLI app"
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-url-parse-lax-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-parse-lax@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/url-parse-lax#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "url-parse-lax"
  summary: "url.parse() with support for protocol-less URLs & IPs"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-url-parse-lax-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/url-parse-lax.git@1c2c7473ee75bb84a92c8aca532a6e615e531380"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-parse-lax@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/url-parse-lax#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "url-parse-lax"
  summary: "url.parse() with support for protocol-less URLs & IPs"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-url-parse-lax-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/url-parse-lax/-/url-parse-lax-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-parse-lax@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/url-parse-lax#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "url-parse-lax"
  summary: "url.parse() with support for protocol-less URLs & IPs"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/kemitchell/validate-npm-package-license.js.git@6bbe26201fa7e5c7281516b04b9f3f4cc6db145c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-which-1.3.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-which-1.3.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-which.git@563406d75b97f97a33e506b9cc7a82b268332b6f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-which-1.3.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-widest-line-2.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/widest-line@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/widest-line#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "widest-line"
  summary: "Get the visual width of the widest line in a string - the number of columns\
    \ required to display it"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-widest-line-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/widest-line.git@11fc92452ad77233a53cec179202a6c68e2b8ad3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/widest-line@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/widest-line#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "widest-line"
  summary: "Get the visual width of the widest line in a string - the number of columns\
    \ required to display it"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-widest-line-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/widest-line/-/widest-line-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/widest-line@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/widest-line#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "widest-line"
  summary: "Get the visual width of the widest line in a string - the number of columns\
    \ required to display it"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/npm/wrappy.git@71d91b6dc5bdeac37e218c2cf03f9ab55b60d214"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/write-file-atomic@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/iarna/write-file-atomic"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "write-file-atomic"
  summary: "Write files in an atomic fashion w/configurable ownership"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-write-file-atomic-2.4.3-vcs"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "git+ssh://github.com/iarna/write-file-atomic.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/write-file-atomic@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/iarna/write-file-atomic"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "write-file-atomic"
  summary: "Write files in an atomic fashion w/configurable ownership"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-write-file-atomic-2.4.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Rebecca Turner"
  downloadLocation: "https://registry.npmjs.org/write-file-atomic/-/write-file-atomic-2.4.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/write-file-atomic@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/iarna/write-file-atomic"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "write-file-atomic"
  summary: "Write files in an atomic fashion w/configurable ownership"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-ws-6.2.1"
  copyrightText: "Copyright (c) 2011 Einar Otto Stangvik <einaros@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ws@6.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/websockets/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ws"
  summary: "Simple to use, blazing fast and thoroughly tested websocket client and\
    \ server for Node.js"
  versionInfo: "6.2.1"
- SPDXID: "SPDXRef-Package-NPM-ws-6.2.1-vcs"
  copyrightText: "Copyright (c) 2011 Einar Otto Stangvik <einaros@gmail.com>"
  downloadLocation: "git+https://github.com/websockets/ws.git@d57db27daf0e610590e3168266a214201a8c1d3a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ws@6.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/websockets/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ws"
  summary: "Simple to use, blazing fast and thoroughly tested websocket client and\
    \ server for Node.js"
  versionInfo: "6.2.1"
- SPDXID: "SPDXRef-Package-NPM-ws-6.2.1-source-artifact"
  copyrightText: "Copyright (c) 2011 Einar Otto Stangvik <einaros@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/ws/-/ws-6.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ws@6.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/websockets/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ws"
  summary: "Simple to use, blazing fast and thoroughly tested websocket client and\
    \ server for Node.js"
  versionInfo: "6.2.1"
- SPDXID: "SPDXRef-Package-NPM-xdg-basedir-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/xdg-basedir@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/xdg-basedir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "xdg-basedir"
  summary: "Get XDG Base Directory paths"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-xdg-basedir-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/xdg-basedir.git@d441833e9dad9694b04495905ab8fe484e3b8b99"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/xdg-basedir@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/xdg-basedir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "xdg-basedir"
  summary: "Get XDG Base Directory paths"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-xdg-basedir-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/xdg-basedir/-/xdg-basedir-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/xdg-basedir@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/xdg-basedir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "xdg-basedir"
  summary: "Get XDG Base Directory paths"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-yallist-2.1.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yallist@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/yallist#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "yallist"
  summary: "Yet Another Linked List"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-yallist-2.1.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/yallist.git@566cd4cd1e2ce57ffa84e295981cd9aa72319391"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yallist@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/yallist#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yallist"
  summary: "Yet Another Linked List"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-yallist-2.1.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/yallist/-/yallist-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yallist@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/yallist#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yallist"
  summary: "Yet Another Linked List"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/code-frame@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "code-frame"
  summary: "Generate errors that contain a code frame that point to source locations."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-vcs"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "git+https://github.com/babel/babel.git@a7620bd266ae1345975767bbc7abf09034437017#packages/babel-code-frame"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/code-frame@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "code-frame"
  summary: "Generate errors that contain a code frame that point to source locations."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-source-artifact"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.8.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/code-frame@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "code-frame"
  summary: "Generate errors that contain a code frame that point to source locations."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/highlight@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "highlight"
  summary: "Syntax highlight JavaScript strings for output in terminals."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-highlight-7.8.3-vcs"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "git+https://github.com/babel/babel.git@a7620bd266ae1345975767bbc7abf09034437017#packages/babel-highlight"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/highlight@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "highlight"
  summary: "Syntax highlight JavaScript strings for output in terminals."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-highlight-7.8.3-source-artifact"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "https://registry.npmjs.org/@babel/highlight/-/highlight-7.8.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/highlight@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "highlight"
  summary: "Syntax highlight JavaScript strings for output in terminals."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40sindresorhus/is@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is"
  summary: "Type check values"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is.git@1ff389cabb53a2b921ad9da00759823b57b6d0a3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40sindresorhus/is@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is"
  summary: "Type check values"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/@sindresorhus/is/-/is-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40sindresorhus/is@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is"
  summary: "Type check values"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5"
  copyrightText: "Copyright (c) 2018 Szymon Marczak"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40szmarczak/http-timer@4.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/http-timer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "http-timer"
  summary: "Timings for HTTP requests"
  versionInfo: "4.0.5"
- SPDXID: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5-vcs"
  copyrightText: "Copyright (c) 2018 Szymon Marczak"
  downloadLocation: "git+https://github.com/szmarczak/http-timer.git@c4783261a2926379eed6c4f58f8f18359c2f42c2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40szmarczak/http-timer@4.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/http-timer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-timer"
  summary: "Timings for HTTP requests"
  versionInfo: "4.0.5"
- SPDXID: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5-source-artifact"
  copyrightText: "Copyright (c) 2018 Szymon Marczak"
  downloadLocation: "https://registry.npmjs.org/@szmarczak/http-timer/-/http-timer-4.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40szmarczak/http-timer@4.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/szmarczak/http-timer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-timer"
  summary: "Timings for HTTP requests"
  versionInfo: "4.0.5"
- SPDXID: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/cacheable-request@6.0.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cacheable-request"
  summary: "TypeScript definitions for cacheable-request"
  versionInfo: "6.0.1"
- SPDXID: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/cacheable-request"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/cacheable-request@6.0.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cacheable-request"
  summary: "TypeScript definitions for cacheable-request"
  versionInfo: "6.0.1"
- SPDXID: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/cacheable-request/-/cacheable-request-6.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/cacheable-request@6.0.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cacheable-request"
  summary: "TypeScript definitions for cacheable-request"
  versionInfo: "6.0.1"
- SPDXID: "SPDXRef-Package-NPM-types-got-9.6.9"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/got@9.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/got"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "got"
  summary: "TypeScript definitions for got"
  versionInfo: "9.6.9"
- SPDXID: "SPDXRef-Package-NPM-types-got-9.6.9-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/got"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/got@9.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/got"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "got"
  summary: "TypeScript definitions for got"
  versionInfo: "9.6.9"
- SPDXID: "SPDXRef-Package-NPM-types-got-9.6.9-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/got/-/got-9.6.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/got@9.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/got"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "got"
  summary: "TypeScript definitions for got"
  versionInfo: "9.6.9"
- SPDXID: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/http-cache-semantics@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/http-cache-semantics"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "http-cache-semantics"
  summary: "TypeScript definitions for http-cache-semantics"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/http-cache-semantics@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/http-cache-semantics"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-cache-semantics"
  summary: "TypeScript definitions for http-cache-semantics"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/http-cache-semantics/-/http-cache-semantics-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/http-cache-semantics@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/http-cache-semantics"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-cache-semantics"
  summary: "TypeScript definitions for http-cache-semantics"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-keyv-3.1.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/keyv@3.1.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "keyv"
  summary: "TypeScript definitions for keyv"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-types-keyv-3.1.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/keyv"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/keyv@3.1.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "keyv"
  summary: "TypeScript definitions for keyv"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-types-keyv-3.1.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/keyv/-/keyv-3.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/keyv@3.1.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "keyv"
  summary: "TypeScript definitions for keyv"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-types-node-10.14.15"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@10.14.15"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "10.14.15"
- SPDXID: "SPDXRef-Package-NPM-types-node-10.14.15-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/node"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@10.14.15"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "10.14.15"
- SPDXID: "SPDXRef-Package-NPM-types-node-10.14.15-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/node/-/node-10.14.15.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@10.14.15"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "10.14.15"
- SPDXID: "SPDXRef-Package-NPM-types-responselike-1.0.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/responselike@1.0.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "responselike"
  summary: "TypeScript definitions for responselike"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-responselike-1.0.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/responselike@1.0.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "responselike"
  summary: "TypeScript definitions for responselike"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-responselike-1.0.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/responselike/-/responselike-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/responselike@1.0.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "responselike"
  summary: "TypeScript definitions for responselike"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tough-cookie@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tough-cookie"
  summary: "TypeScript definitions for tough-cookie"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tough-cookie@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "TypeScript definitions for tough-cookie"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/tough-cookie/-/tough-cookie-2.3.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tough-cookie@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "TypeScript definitions for tough-cookie"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-types-ws-6.0.2"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/ws@6.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ws"
  summary: "TypeScript definitions for ws"
  versionInfo: "6.0.2"
- SPDXID: "SPDXRef-Package-NPM-types-ws-6.0.2-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/ws"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/ws@6.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ws"
  summary: "TypeScript definitions for ws"
  versionInfo: "6.0.2"
- SPDXID: "SPDXRef-Package-NPM-types-ws-6.0.2-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/ws/-/ws-6.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/ws@6.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ws"
  summary: "TypeScript definitions for ws"
  versionInfo: "6.0.2"
relationships:
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.15.0-rc2"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.15.0-rc2"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.12"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.12-vcs"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.12-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-jakarta.json-jakarta.json-api-1.1.5"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-server-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-security-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-client-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-xml-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-util-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-io-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-common-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-client-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-servlet-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty-jetty-http-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.servlet-javax.servlet-api-3.1.0"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-servlet-9.4.18.v20190429-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-abbrev-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-abbrev-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-align-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-ansi-align-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-align-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-align-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-align-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.0.7"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-anymatch-3.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-anymatch-3.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-limiter-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-limiter-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-limiter-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-limiter-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
- spdxElementId: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-esutils-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-tokens-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-highlight-7.8.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-highlight-7.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-binary-extensions-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-binary-extensions-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-align-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cli-boxes-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-term-size-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-widest-line-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-boxen-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-boxen-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-boxen-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-braces-3.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fill-range-7.0.1"
- spdxElementId: "SPDXRef-Package-NPM-braces-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-braces-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-braces-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-braces-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-builtin-modules-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-builtin-modules-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-keyv-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-keyv-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-response-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-5.1.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-url-4.5.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-responselike-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cacheable-request-7.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cacheable-request-7.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-anymatch-3.1.1"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-braces-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-5.1.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readdirp-3.3.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ci-info-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ci-info-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ci-info-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ci-info-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cli-boxes-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cli-boxes-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cli-boxes-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cli-boxes-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-response-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-clone-response-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-response-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-response-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-response-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-color-name-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-color-name-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.20.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.20.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.20.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.20.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-concat-map-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-concat-map-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.6.0"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-date-fns-1.30.1"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.19"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rx-2.3.24"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spawn-command-0.0.2-1"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-3.2.3"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tree-kill-1.2.2"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concurrently-3.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-concurrently-3.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concurrently-3.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.2"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dot-prop-4.2.0"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-make-dir-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unique-string-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-xdg-basedir-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-configstore-3.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-configstore-3.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-configstore-3.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-create-error-class-3.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-capture-stack-trace-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-create-error-class-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-create-error-class-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-create-error-class-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-create-error-class-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-4.1.5"
- spdxElementId: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-shebang-command-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cross-spawn-5.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cross-spawn-5.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-crypto-random-string-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-crypto-random-string-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-crypto-random-string-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-crypto-random-string-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-date-fns-1.30.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-date-fns-1.30.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-date-fns-1.30.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-date-fns-1.30.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.2.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-decompress-response-5.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-decompress-response-5.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decompress-response-5.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-decompress-response-5.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decompress-response-5.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-deep-extend-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-deep-extend-0.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-deep-extend-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-deep-extend-0.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-defer-to-connect-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-defer-to-connect-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-defer-to-connect-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-defer-to-connect-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-diff-4.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-4.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-diff-4.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-4.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dot-prop-4.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-obj-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-dot-prop-4.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dot-prop-4.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dot-prop-4.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dot-prop-4.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-duplexer3-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer3-0.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-duplexer3-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer3-0.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-esprima-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-esprima-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-esutils-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esutils-2.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-esutils-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esutils-2.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-finally-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cross-spawn-5.1.0"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-stream-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-npm-run-path-2.0.2"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-eof-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-execa-0.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-execa-0.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-execa-0.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fill-range-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
- spdxElementId: "SPDXRef-Package-NPM-fill-range-7.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fill-range-7.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fill-range-7.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fill-range-7.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-get-stream-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-get-stream-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-get-stream-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-get-stream-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-5.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-get-stream-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-5.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-5.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-5.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-global-dirs-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ini-1.3.5"
- spdxElementId: "SPDXRef-Package-NPM-global-dirs-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-global-dirs-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-global-dirs-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-global-dirs-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cacheable-lookup-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cacheable-request-7.0.1"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-5.1.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-responselike-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-decompress-response-5.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer3-0.1.4"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-cancelable-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-event-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-readable-stream-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-fest-0.10.0"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-got-10.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-got-10.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-got-10.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer3-0.1.4"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stream-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-stream-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-create-error-class-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-redirect-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-timed-out-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unzip-response-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-parse-lax-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-got-6.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-got-6.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-got-6.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-hosted-git-info-2.8.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-hosted-git-info-2.8.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-cache-semantics-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ignore-by-default-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ignore-by-default-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ignore-by-default-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ignore-by-default-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-import-lazy-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-import-lazy-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-import-lazy-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-import-lazy-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-imurmurhash-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-imurmurhash-0.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-imurmurhash-0.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-imurmurhash-0.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ini-1.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ini-1.3.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ini-1.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ini-1.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-binary-path-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-binary-path-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-ci-1.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ci-info-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-is-ci-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-ci-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-ci-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-ci-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-4.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-installed-globally-0.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-global-dirs-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-is-installed-globally-0.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-path-inside-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-is-installed-globally-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-installed-globally-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-installed-globally-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-installed-globally-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-npm-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-npm-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-npm-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-npm-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-number-7.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-number-7.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-number-7.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-number-7.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-obj-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-obj-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-path-inside-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-inside-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-is-path-inside-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-path-inside-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-path-inside-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-path-inside-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-redirect-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-redirect-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-redirect-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-redirect-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-retry-allowed-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-stream-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-stream-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-stream-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-stream-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isexe-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isexe-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isexe-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isexe-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-js-tokens-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-tokens-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-js-tokens-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-tokens-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-buffer-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-buffer-3.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-buffer-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-buffer-3.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-keyv-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-buffer-3.0.1"
- spdxElementId: "SPDXRef-Package-NPM-keyv-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-keyv-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-keyv-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-keyv-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-latest-version-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-package-json-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-latest-version-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-latest-version-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-latest-version-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-latest-version-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.2"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.19"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.19-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.19"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.19-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lowercase-keys-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lowercase-keys-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lowercase-keys-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lowercase-keys-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lru-cache-4.1.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pseudomap-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-lru-cache-4.1.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-lru-cache-4.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-4.1.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lru-cache-4.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lru-cache-4.1.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-make-dir-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-make-dir-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-make-dir-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-make-dir-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-make-dir-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.40.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.40.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.40.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.40.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.24"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.40.0"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mimic-response-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mimic-response-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mimic-response-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mimic-response-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mimic-response-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.1"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ignore-by-default-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pstree.remy-1.1.7"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-touch-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-undefsafe-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-update-notifier-2.5.0"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nodemon-2.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-nodemon-2.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nodemon-2.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-nopt-1.0.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-abbrev-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-nopt-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-nopt-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.4"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-url-4.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-url-4.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-url-4.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-url-4.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-npm-run-path-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-key-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-npm-run-path-2.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-npm-run-path-2.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-npm-run-path-2.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-npm-run-path-2.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-cancelable-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-cancelable-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-cancelable-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-cancelable-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-event-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-timeout-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-p-event-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-event-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-event-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-event-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-finally-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-finally-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-finally-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-finally-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-timeout-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-finally-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-p-timeout-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-timeout-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-timeout-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-timeout-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-package-json-4.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-package-json-4.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-got-6.7.1"
- spdxElementId: "SPDXRef-Package-NPM-package-json-4.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-registry-auth-token-3.4.0"
- spdxElementId: "SPDXRef-Package-NPM-package-json-4.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-registry-url-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-package-json-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-package-json-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-package-json-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-package-json-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-parse-better-errors-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-is-inside-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-inside-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-is-inside-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-inside-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-key-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-key-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-key-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-key-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-type-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-path-type-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-type-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-picomatch-2.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-picomatch-2.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pify-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pify-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-prepend-http-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-prepend-http-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-prepend-http-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-prepend-http-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pseudomap-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pseudomap-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pseudomap-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pseudomap-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pstree.remy-1.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pstree.remy-1.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pstree.remy-1.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pstree.remy-1.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-rc-1.2.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ini-1.3.5"
- spdxElementId: "SPDXRef-Package-NPM-rc-1.2.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-deep-extend-0.6.0"
- spdxElementId: "SPDXRef-Package-NPM-rc-1.2.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5"
- spdxElementId: "SPDXRef-Package-NPM-rc-1.2.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-rc-1.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rc-1.2.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-rc-1.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rc-1.2.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readdirp-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.0.7"
- spdxElementId: "SPDXRef-Package-NPM-readdirp-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readdirp-3.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readdirp-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readdirp-3.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-registry-auth-token-3.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-registry-auth-token-3.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rc-1.2.8"
- spdxElementId: "SPDXRef-Package-NPM-registry-auth-token-3.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-registry-auth-token-3.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-registry-auth-token-3.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-registry-auth-token-3.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-registry-url-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rc-1.2.8"
- spdxElementId: "SPDXRef-Package-NPM-registry-url-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-registry-url-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-registry-url-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-registry-url-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.12.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-responselike-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lowercase-keys-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-responselike-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-responselike-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-responselike-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-responselike-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-rx-2.3.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rx-2.3.24-vcs"
- spdxElementId: "SPDXRef-Package-NPM-rx-2.3.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rx-2.3.24-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-semver-diff-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-semver-diff-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-diff-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-semver-diff-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-diff-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-shebang-command-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-shebang-regex-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-shebang-command-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-shebang-command-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-shebang-command-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-shebang-command-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-shebang-regex-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-shebang-regex-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-shebang-regex-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-shebang-regex-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-signal-exit-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-signal-exit-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sindresorhus-is-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spawn-command-0.0.2-1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spawn-command-0.0.2-1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spawn-command-0.0.2-1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spawn-command-0.0.2-1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-eof-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-eof-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-eof-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-eof-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-3.2.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-3.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-3.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-3.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-3.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-defer-to-connect-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-szmarczak-http-timer-4.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-term-size-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-execa-0.7.0"
- spdxElementId: "SPDXRef-Package-NPM-term-size-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-term-size-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-term-size-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-term-size-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-timed-out-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-timed-out-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-timed-out-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-timed-out-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-to-readable-stream-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-readable-stream-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-to-readable-stream-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-readable-stream-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-number-7.0.0"
- spdxElementId: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-regex-range-5.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-regex-range-5.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-touch-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-nopt-1.0.10"
- spdxElementId: "SPDXRef-Package-NPM-touch-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-touch-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-touch-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-touch-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tree-kill-1.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tree-kill-1.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tree-kill-1.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tree-kill-1.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tslib-1.11.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tslib-1.11.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.20.3"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-4.0.2"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.3"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsutils-2.29.0"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslint-6.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslint-6.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tsutils-2.29.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1"
- spdxElementId: "SPDXRef-Package-NPM-tsutils-2.29.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsutils-2.29.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tsutils-2.29.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsutils-2.29.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-type-fest-0.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-fest-0.10.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-type-fest-0.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-fest-0.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-keyv-3.1.1"
- spdxElementId: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15"
- spdxElementId: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-responselike-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-cacheable-request-6.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-got-9.6.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15"
- spdxElementId: "SPDXRef-Package-NPM-types-got-9.6.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
- spdxElementId: "SPDXRef-Package-NPM-types-got-9.6.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.5.1"
- spdxElementId: "SPDXRef-Package-NPM-types-got-9.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-got-9.6.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-got-9.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-got-9.6.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-http-cache-semantics-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-keyv-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15"
- spdxElementId: "SPDXRef-Package-NPM-types-keyv-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-keyv-3.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-keyv-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-keyv-3.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-node-10.14.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-node-10.14.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-responselike-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15"
- spdxElementId: "SPDXRef-Package-NPM-types-responselike-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-responselike-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-responselike-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-responselike-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-ws-6.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15"
- spdxElementId: "SPDXRef-Package-NPM-types-ws-6.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-ws-6.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-ws-6.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-ws-6.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-typescript-3.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.5.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-typescript-3.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.5.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-undefsafe-2.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9"
- spdxElementId: "SPDXRef-Package-NPM-undefsafe-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-undefsafe-2.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-undefsafe-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-undefsafe-2.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-unique-string-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-crypto-random-string-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-unique-string-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unique-string-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-unique-string-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unique-string-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-unzip-response-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unzip-response-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-unzip-response-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unzip-response-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-boxen-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-configstore-3.1.2"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-xdg-basedir-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-import-lazy-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-ci-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-installed-globally-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-npm-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-latest-version-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-diff-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-update-notifier-2.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-update-notifier-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-update-notifier-2.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-lax-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-prepend-http-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-lax-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-parse-lax-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-lax-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-parse-lax-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-which-1.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isexe-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-which-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-which-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-widest-line-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-widest-line-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-widest-line-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-widest-line-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-widest-line-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-wrappy-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-wrappy-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.2"
- spdxElementId: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-imurmurhash-0.1.4"
- spdxElementId: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-write-file-atomic-2.4.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-write-file-atomic-2.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-write-file-atomic-2.4.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ws-6.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-limiter-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-ws-6.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ws-6.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ws-6.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ws-6.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-xdg-basedir-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-xdg-basedir-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-xdg-basedir-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-xdg-basedir-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yallist-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yallist-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Project-Maven-FilewatcherTestDriver-FilewatcherTestDriver-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.15.0-rc2"
- spdxElementId: "SPDXRef-Project-Maven-FilewatcherTestDriver-FilewatcherTestDriver-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.12"
- spdxElementId: "SPDXRef-Project-Maven-FilewatcherTestDriver-FilewatcherTestDriver-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-api-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Project-Maven-FilewatcherTestDriver-FilewatcherTestDriver-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse.jetty.websocket-websocket-server-9.4.18.v20190429"
- spdxElementId: "SPDXRef-Project-Maven-MockCwctlSync-MockCwctlSync-0.0.1-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-jakarta.json.bind-jakarta.json.bind-api-1.0.1"
- spdxElementId: "SPDXRef-Project-Maven-MockCwctlSync-MockCwctlSync-0.0.1-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.eclipse-yasson-1.0.3"
- spdxElementId: "SPDXRef-Project-Maven-MockCwctlSync-MockCwctlSync-0.0.1-SNAPSHOT"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.glassfish-jakarta.json-1.1.5"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.1"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-got-10.6.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ws-6.2.1"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-concurrently-3.6.1"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-nodemon-2.0.2"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslint-6.1.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.5.3"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-got-9.6.9"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-10.14.15"
- spdxElementId: "SPDXRef-Project-NPM-codewind-filewatcher-0.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-ws-6.0.2"
