---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-04-02T20:46:12Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://b4b188a8-7213-4986-9067-10debbdc86ec"
documentDescribes:
- "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
- "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
- "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
- "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
- "SPDXRef-Project-Unmanaged-codewind-openapi-vscode-1d73760011bf7fbb5d6eac4353f78a2ae96f0a81"
packages:
- SPDXID: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://github.com/openapitools/openapi-generator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Unlicense"
  name: "openapi-java-client"
  summary: "NONE"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "openapi-jaxrs-server"
  summary: "NONE"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-starter-parent/openapi-spring"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "openapi-spring"
  summary: "NONE"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  copyrightText: "Copyright (c) 2019 IBM Corporation and others\nCopyright (c) 2019-2020\
    \ IBM Corporation and others"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "codewind-openapi-tools"
  summary: "NONE"
  versionInfo: "0.14.1"
- SPDXID: "SPDXRef-Project-Unmanaged-codewind-openapi-vscode-1d73760011bf7fbb5d6eac4353f78a2ae96f0a81"
  copyrightText: "Copyright (c) 2002 Cynthia Brewer Mark Harrower and The Pennsylvania\
    \ State\nCopyright (c) 2003-2005 Tom Wu\nCopyright (c) 2003-2009 Tom Wu\nCopyright\
    \ (c) 2006 Kirill Simonov\nCopyright (c) 2006, 2009-2014 Google Inc.\nCopyright\
    \ (c) 2006, 2010, 2012 Google Inc.\nCopyright (c) 2007 Eclipse Foundation Inc.\n\
    Copyright (c) 2007 Free Software Foundation Inc.\nCopyright (c) 2007 Kris Zyp\
    \ SitePen (www.sitepen.com)\nCopyright (c) 2007-2014 Alexandru Marasteanu\nCopyright\
    \ (c) 2008 Ariel Flesler\nCopyright (c) 2008 Fair Oaks Labs Inc.\nCopyright (c)\
    \ 2008 Matsuza\nCopyright (c) 2008-2012 Charles Karney\nCopyright (c) 2008-2013\
    \ Pivotal Labs\nCopyright (c) 2009 John Resig Jorn Zaefferer\nCopyright (c) 2009\
    \ The Go Authors\nCopyright (c) 2009, 2012 The Go Authors\nCopyright (c) 2009,\
    \ 2012-2014 IBM Corp.\nCopyright (c) 2009, 2012-2014 James Halliday <mail@substack.net>\
    \ Thomas Robinson <280north.com>\nCopyright (c) 2009, 2012-2015, 2017 IBM Corp.\n\
    Copyright (c) 2009-2011 TJ Holowaychuk < tj@vision-media.ca>\nCopyright (c) 2009-2014\
    \ Stuart Knightley David Duponchel Franz Buchinger Antonio Afonso\nCopyright (c)\
    \ 2009-2014 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2009-2016 Stuart\
    \ Knightley David Duponchel Franz Buchinger Antonio Afonso\nCopyright (c) 2009-2017\
    \ TJ Holowaychuk < tj@vision-media.ca>\nCopyright (c) 2009-2020 Jeremy Ashkenas\
    \ DocumentCloud and Investigative\nCopyright (c) 2010 Benjamin Thomas Robert Kieffer\n\
    Copyright (c) 2010 Jeremy Faivre\nCopyright (c) 2010 Linden Research Inc.\nCopyright\
    \ (c) 2010 Ryan McGrath\nCopyright (c) 2010 Sencha Inc.\nCopyright (c) 2010 Yahoo!\
    \ Inc.\nCopyright (c) 2010 passive.ly LLC\nCopyright (c) 2010, 2015 Yahoo! Inc.\n\
    Copyright (c) 2010-2012 Robert Kieffer\nCopyright (c) 2010-2013 Raymond Hill\n\
    Copyright (c) 2010-2016 Charlie Robbins Jarrett Cruger & the Contributors\nCopyright\
    \ (c) 2010-2016 Robert Kieffer and other contributors\nCopyright (c) 2010-2018\
    \ Caolan McMahon\nCopyright (c) 2010-2018 Michael Bostock\nCopyright (c) 2010-2019\
    \ by Philipp Dunkel Ben Noordhuis Elan Shankar Paul Miller\nCopyright (c) 2011\
    \ Alexander Shtuchkin\nCopyright (c) 2011 Andrei Mackenzie\nCopyright (c) 2011\
    \ Debuggable Limited <felix@debuggable.com>\nCopyright (c) 2011 Einar Otto Stangvik\
    \ <einaros@gmail.com>\nCopyright (c) 2011 Felix Geisendorfer (felix@debuggable.com)\n\
    Copyright (c) 2011 Konstantin Kafer <kkaefer@gmail.com>\nCopyright (c) 2011 LearnBoost\n\
    Copyright (c) 2011 Troy Goode <troygoode@gmail.com>\nCopyright (c) 2011 by Maciej\
    \ Malecki\nCopyright (c) 2011, 2013 Troy Goode <troygoode@gmail.com>\nCopyright\
    \ (c) 2011-2012 Mark Cavage\nCopyright (c) 2011-2013 Phillip Clark\nCopyright\
    \ (c) 2011-2013 TJ Holowaychuk\nCopyright (c) 2011-2013, 2016 Joyent Inc.\nCopyright\
    \ (c) 2011-2014 Raynos\nCopyright (c) 2011-2016 by Vitaly Puzrin\nCopyright (c)\
    \ 2011-2017 JP Richardson\nCopyright (c) 2011-2017 whitequark <whitequark@whitequark.org>\n\
    Copyright (c) 2011-2019 Mariusz Nowak medikoo medikoo.com\nCopyright (c) 2011-2019\
    \ Stefan Goessner Subbu Allamaraju Mike Brevoort\nCopyright (c) 2012 Alex Ogier\n\
    Copyright (c) 2012 Artur Adib\nCopyright (c) 2012 Artur Adib <arturadib@gmail.com>\n\
    Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and contributors\n\
    Copyright (c) 2012 Google Inc.\nCopyright (c) 2012 James Halliday Josh Duff and\
    \ other contributors\nCopyright (c) 2012 Joshua Bell\nCopyright (c) 2012 LearnBoost\
    \ < tj@learnboost.com>\nCopyright (c) 2012 Nathan Cartwright <fshost@yahoo.com>\n\
    Copyright (c) 2012 Niklas von Hertzen\nCopyright (c) 2012 Peter Suranyi\nCopyright\
    \ (c) 2012 TJ Holowaychuk < tj@vision-media.ca>\nCopyright (c) 2012 The Chromium\
    \ Authors\nCopyright (c) 2012 The Go Authors\nCopyright (c) 2012 Vitaly Puzrin\n\
    Copyright (c) 2012 by Vitaly Puzrin\nCopyright (c) 2012, 2014 Ben Noordhuis <info@bnoordhuis.nl>\n\
    Copyright (c) 2012, 2014 Nathan Rajlich <nathan@tootallnate.net>\nCopyright (c)\
    \ 2012-2013 James Halliday\nCopyright (c) 2012-2014 Andris Reinman\nCopyright\
    \ (c) 2012-2014 Federico Romero\nCopyright (c) 2012-2014 Isaac Z. Schlueter\n\
    Copyright (c) 2012-2014 Raynos\nCopyright (c) 2012-2014 Roman Shtylman <shtylman@gmail.com>\n\
    Copyright (c) 2012-2015 JP Richardson <jprichardson@gmail.com>\nCopyright (c)\
    \ 2012-2016 Kristian Faeldt <faeldt_kristian@cyberagent.co.jp>\nCopyright (c)\
    \ 2012-2016 Mariusz Nowak\nCopyright (c) 2012-2018 Zongmin Lei Lei Zong Min\n\
    Copyright (c) 2012-2019 Paul Miller\nCopyright (c) 2012-2019 Thorsten Lorenz Paul\
    \ Miller\nCopyright (c) 2013 Alex Fernandez\nCopyright (c) 2013 Dario Castane\n\
    Copyright (c) 2013 Deoxxa Development\nCopyright (c) 2013 Dominic Tarr\nCopyright\
    \ (c) 2013 Gareth Jones\nCopyright (c) 2013 GoInstant Inc. a salesforce.com company\n\
    Copyright (c) 2013 Julian Gruber\nCopyright (c) 2013 Julian Gruber <julian@juliangruber.com>\n\
    Copyright (c) 2013 Masayuki Tanaka\nCopyright (c) 2013 Max Ogden\nCopyright (c)\
    \ 2013 Nathan Rajlich\nCopyright (c) 2013 Raynos\nCopyright (c) 2013 Roman Shtylman\
    \ <shtylman@gmail.com>\nCopyright (c) 2013 Sergio Garcia <sgmonda@gmail.com>\n\
    Copyright (c) 2013 Steve King\nCopyright (c) 2013 Ted Unangst <tedu@openbsd.org>\n\
    Copyright (c) 2013 Thiago de Arruda\nCopyright (c) 2013 Trent Mick\nCopyright\
    \ (c) 2013 Troy Goode <troygoode@gmail.com>\nCopyright (c) 2013 present Facebook\
    \ Inc.\nCopyright (c) 2013, 2017 Braveg1rl\nCopyright (c) 2013-2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2013-2014 Rase\nCopyright (c) 2013-2014\
    \ Roman Shtylman <shtylman+expressjs@gmail.com>\nCopyright (c) 2013-2014 present\
    \ Facebook Inc.\nCopyright (c) 2013-2015 Brian J. Brennan\nCopyright (c) 2013-2015\
    \ Facebook Inc.\nCopyright (c) 2013-2016 Brian J. Brennan\nCopyright (c) 2013-2016\
    \ Forrest L Norvell <ogd@aoaioxxysz.net>\nCopyright (c) 2013-2017 Jared Hanson\n\
    Copyright (c) 2013-2017 Mariusz Nowak (www.medikoo.com)\nCopyright (c) 2013-2017\
    \ by Andrea Giammarchi\nCopyright (c) 2013-2017, 2019-2020 Jordan Harband\nCopyright\
    \ (c) 2013-2019 Alex Fernandez <alexfernandeznpm@gmail.com>\nCopyright (c) 2013-2019\
    \ Forrest L Norvell\nCopyright (c) 2013-2019 Mariusz Nowak medikoo medikoo.com\n\
    Copyright (c) 2013-2019 bl contributors\nCopyright (c) 2014 Adam Paszke\nCopyright\
    \ (c) 2014 Arnout Kazemier\nCopyright (c) 2014 Automattic Inc.\nCopyright (c)\
    \ 2014 Blake Embrey (hello@blakeembrey.com)\nCopyright (c) 2014 Component\nCopyright\
    \ (c) 2014 Douglas Christopher Wilson\nCopyright (c) 2014 Evan Wallace\nCopyright\
    \ (c) 2014 Gabriel Llamas\nCopyright (c) 2014 Guillermo Rauch <guillermo@learnboost.com>\n\
    Copyright (c) 2014 Jameson Little\nCopyright (c) 2014 Jeremie Miller\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com\nCopyright (c) 2014 Kevin Roark\nCopyright (c) 2014 Krishna\
    \ Raman <kraman@gmail.com>\nCopyright (c) 2014 Mathias Buus\nCopyright (c) 2014\
    \ Matthew Conlen\nCopyright (c) 2014 Mike Hall Digital Design Labs\nCopyright\
    \ (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) 2014 Stefan\
    \ Thomas\nCopyright (c) 2014 StrongLoop Inc.\nCopyright (c) 2014 Yehuda Katz Tom\
    \ Dale Stefan Penner and contributors\nCopyright (c) 2014 object-hash contributors\n\
    Copyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2014 present Sebastian\
    \ McKenzie and other contributors\nCopyright (c) 2014, 2016 Guillermo Rauch\n\
    Copyright (c) 2014, 2016-2017 Jon Schlinkert\nCopyright (c) 2014-2015 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014-2015 Gal Koren\n\
    Copyright (c) 2014-2015 Rebecca Turner <me@re-becca.org>\nCopyright (c) 2014-2015,\
    \ 2017 present Jon Schlinkert\nCopyright (c) 2014-2015, 2017-2018 Mathias Buus\n\
    Copyright (c) 2014-2016 Douglas Christopher Wilson\nCopyright (c) 2014-2016 Jonathan\
    \ Ong me@jongleberry.com and Contributors\nCopyright (c) 2014-2016 Michael Bostock\n\
    Copyright (c) 2014-2016 by Vitaly Puzrin\nCopyright (c) 2014-2017 Chen Yi-Cyuan\n\
    Copyright (c) 2014-2017 Douglas Christopher Wilson\nCopyright (c) 2014-2017 Douglas\
    \ Christopher Wilson <doug@somethingdoug.com>\nCopyright (c) 2014-2018 Automattic\
    \ <dev@cloudup.com>\nCopyright (c) 2014-2018 Douglas Christopher Wilson\nCopyright\
    \ (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2014-2018 Simon Lydell\nCopyright\
    \ (c) 2014-2018 Tyler Kellen <tyler@sleekcode.net> Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ and Eric Schoffstall <yo@contra.io>\nCopyright (c) 2015 Andreas Lubbe\nCopyright\
    \ (c) 2015 Andres Suarez <zertosh@gmail.com>\nCopyright (c) 2015 Auth0 Inc. <support@auth0.com>\n\
    Copyright (c) 2015 Calvin Metcalf\nCopyright (c) 2015 Dmitry Ivanov\nCopyright\
    \ (c) 2015 Gal Koren\nCopyright (c) 2015 Inaki Baz Castillo <ibc@aliax.net>\n\
    Copyright (c) 2015 Jason Quense\nCopyright (c) 2015 Javier Blanco\nCopyright (c)\
    \ 2015 Jed Watson <jed.watson@me.com>\nCopyright (c) 2015 Jose F. Romaniello\n\
    Copyright (c) 2015 Lao Lei\nCopyright (c) 2015 Rebecca Turner\nCopyright (c) 2015\
    \ Rebecca Turner <me@re-becca.org>\nCopyright (c) 2015 Rod Vagg\nCopyright (c)\
    \ 2015 Scott Motte\nCopyright (c) 2015 Tiancheng Timothy Gu\nCopyright (c) 2015\
    \ Tyler Kellen\nCopyright (c) 2015 Unshift.io Arnout Kazemier\nCopyright (c) 2015\
    \ Wes Todd\nCopyright (c) 2015 Yahoo! Inc.\nCopyright (c) 2015 present Dan Abramov\n\
    Copyright (c) 2015, 2017 IBM Corp.\nCopyright (c) 2015, 2018 Ahmad Nassri <ahmad@ahmadnassri.com>\n\
    Copyright (c) 2015, 2018 Salesforce.com Inc.\nCopyright (c) 2015, 2019 Elan Shanker\n\
    Copyright (c) 2015, 2020 Filip Skokan\nCopyright (c) 2015-2016 Contributors\n\
    Copyright (c) 2015-2016 David Clark\nCopyright (c) 2015-2016 Douglas Christopher\
    \ Wilson <doug@somethingdoug.com>\nCopyright (c) 2015-2016 Zongmin Lei Lei Zong\
    \ Min\nCopyright (c) 2015-2016, 2018, 2020 Filip Skokan\nCopyright (c) 2015-2016,\
    \ 2019 Jordan Harband\nCopyright (c) 2015-2017 Evgeny Poberezkin\nCopyright (c)\
    \ 2016 Alex Indigo\nCopyright (c) 2016 Ben Noordhuis <info@bnoordhuis.nl>\nCopyright\
    \ (c) 2016 David Frank\nCopyright (c) 2016 Diego Rodriguez Baquero\nCopyright\
    \ (c) 2016 Douglas Christopher Wilson <doug@somethingdoug.com>\nCopyright (c)\
    \ 2016 Eugene Rodionov\nCopyright (c) 2016 Filip Skokan\nCopyright (c) 2016 GoDaddy\
    \ Operating Company LLC.\nCopyright (c) 2016 Joyent Inc.\nCopyright (c) 2016 Rogier\
    \ Schouten <github@workingcode.ninja>\nCopyright (c) 2016 json-iterator\nCopyright\
    \ (c) 2016, 2018 Linus Unneback\nCopyright (c) 2016, 2019 Jordan Harband\nCopyright\
    \ (c) 2016-2017 ZEIT Inc.\nCopyright (c) 2017 Evgeny Poberezkin\nCopyright (c)\
    \ 2017 Gregory Petrosyan\nCopyright (c) 2017 Jed Watson\nCopyright (c) 2017 Khaled\
    \ Al-Ansari\nCopyright (c) 2017 Luke Childs\nCopyright (c) 2017 Lupo Montero <lupomontero@gmail.com>\n\
    Copyright (c) 2017 Mathias Buus\nCopyright (c) 2017 NAN contributors\nCopyright\
    \ (c) 2017 PayPal\nCopyright (c) 2017 Samuel Reed <samuel.trace.reed@gmail.com>\n\
    Copyright (c) 2017 present Jon Schlinkert\nCopyright (c) 2017, 2020 Ryan Zimmerman\
    \ <opensrc@ryanzim.com>\nCopyright (c) 2017-2018 Fredrik Nicol\nCopyright (c)\
    \ 2017-2019 James Kyle <me@thejameskyle.com>\nCopyright (c) 2018 Andrea Giammarchi\n\
    Copyright (c) 2018 NAN WG Members Collaborators\nCopyright (c) 2018 NAN contributors\n\
    Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>\nCopyright (c) 2018 React\
    \ Community\nCopyright (c) 2018 Silas Boyd-Wickizer\nCopyright (c) 2018 Zejin\
    \ Zhuang <heineiuo@gmail.com>\nCopyright (c) 2018-2019 Szymon Marczak\nCopyright\
    \ (c) 2019 Alexander Reardon\nCopyright (c) 2019 Elan Shanker Paul Miller\nCopyright\
    \ (c) 2019 IBM Corporation and others\nCopyright (c) 2019 Inspect JS\nCopyright\
    \ (c) 2019 Jordan Harband\nCopyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com>\n\
    Copyright (c) 2019 present StringEpsilon <StringEpsilon@gmail.com>\nCopyright\
    \ (c) 2019-2020 IBM Corporation and others\nCopyright (c) 2020 James Halliday\
    \ (mail@substack.net) and Mathias Buus\nCopyright (c) 2020 Ryan Zimmerman <opensrc@ryanzim.com>\n\
    Copyright (c) 2020 i18next\nCopyright (c) Ben Lesh <ben@benlesh.com>\nCopyright\
    \ (c) Facebook Inc. and its affiliates\nCopyright (c) Feross Aboukhadijeh\nCopyright\
    \ (c) Feross Aboukhadijeh and other contributors\nCopyright (c) Isaac Z. Schlueter\n\
    Copyright (c) Isaac Z. Schlueter Ben Noordhuis and Contributors\nCopyright (c)\
    \ Isaac Z. Schlueter and Contributors\nCopyright (c) JS Foundation and other contributors\n\
    Copyright (c) Kevin Martensson <kevinmartensson@gmail.com> github.com\nCopyright\
    \ (c) Microsoft Corporation\nCopyright (c) Purpose Industries\nCopyright (c) Sam\
    \ Verschueren <sam.verschueren@gmail.com> github.com\nCopyright (c) Sindre Sorhus\
    \ <sindresorhus@gmail.com>\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com>\
    \ (sindresorhus.com)\nCopyright (c) npm Inc. and Contributors\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2001 Robert Penner\n\
    Copyright 2006-2011 the V8 project authors\nCopyright 2007-2017 IBM Corp.\nCopyright\
    \ 2007-2018 IBM Corp.\nCopyright 2008 Fair Oaks Labs Inc.\nCopyright 2009 The\
    \ Go Authors\nCopyright 2009-2013, 2015-2016, 2018 The Go Authors\nCopyright 2009-2016\
    \ Jeremy Ashkenas DocumentCloud and Investigative Reporters & Editors\nCopyright\
    \ 2010 James Halliday (mail@substack.net)\nCopyright 2010 LearnBoost <dev@learnboost.com>\n\
    Copyright 2010-2012 Mikeal Rogers\nCopyright 2010-2013, 2015-2016, 2018 The Go\
    \ Authors\nCopyright 2010-2015 Brian McKelvey\nCopyright 2010-2016 Mike Bostock\n\
    Copyright 2010-2018 Mike Bostock\nCopyright 2011 Gary Court\nCopyright 2011 Mark\
    \ Cavage <mcavage@gmail.com>\nCopyright 2011 Sebastian Tschan\nCopyright 2011-2016\
    \ Canonical Ltd.\nCopyright 2011-2019 The Bootstrap Authors\nCopyright 2011-2019\
    \ Twitter Inc.\nCopyright 2012, 2015-2018 Joyent Inc\nCopyright 2012-2016 JP Richardson\
    \ <jprichardson@gmail.com>\nCopyright 2012-2016 The Dojo Foundation\nCopyright\
    \ 2013 Michael Hart (michael.hart.au@gmail.com)\nCopyright 2013 The Chromium Authors\n\
    Copyright 2013-2014 Dario Castane\nCopyright 2013-2014 Google Inc.\nCopyright\
    \ 2013-2014, 2017 Google Inc.\nCopyright 2013-2015 Facebook Inc.\nCopyright 2014\
    \ Brian White\nCopyright 2014 Contributors (ben@npmjs.com)\nCopyright 2014 Julien\
    \ Fontanet\nCopyright 2014 StrongLoop Inc.\nCopyright 2014 present Olivier Lalonde\
    \ <olalonde@gmail.com> James Talmage <james@talmage.io> Ruben Verborgh\nCopyright\
    \ 2014, 2016 Red Hat Inc.\nCopyright 2014, 2016-2017 Red Hat Inc.\nCopyright 2014,\
    \ 2017 Google Inc.\nCopyright 2014-2015 Facebook Inc.\nCopyright 2014-2017 The\
    \ Kubernetes Authors\nCopyright 2014-2018 Simon Lydell\nCopyright 2015 Calvin\
    \ Metcalf\nCopyright 2015 D2L Corporation\nCopyright 2015 Gareth Jones\nCopyright\
    \ 2015 Yahoo! Inc.\nCopyright 2015, 2017 IBM Corp.\nCopyright 2016 Copyright (c)\
    \ Josef Frohle\nCopyright 2016 Joyent Inc\nCopyright 2016 Joyent Inc.\nCopyright\
    \ 2016 Trent Mick\nCopyright 2016 omr-agent contributors\nCopyright 2016-2018\
    \ Kornel Lesinski\nCopyright 2017 Brett Epps\nCopyright 2017 IBM\nCopyright 2017\
    \ Refael Ackermann\nCopyright 2017 The Kubernetes Authors\nCopyright 2018 Santeri\
    \ Hiltunen\nCopyright 2018 Stefan Penner\nCopyright 2019 David Mark Clements <david.mark.clements@gmail.com>\n\
    Portions Copyright (c) 2009 The Go\ncopyright 2009-2016 Jeremy Ashkenas"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "codewind-openapi-vscode"
  summary: "NONE"
  versionInfo: "1d73760011bf7fbb5d6eac4353f78a2ae96f0a81"
- SPDXID: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ch.qos.logback/logback-classic@1.2.3"
  filesAnalyzed: false
  homepage: "http://logback.qos.ch/logback-classic"
  licenseConcluded: "EPL-1.0"
  licenseDeclared: "LGPL-2.1-or-later AND EPL-1.0"
  name: "logback-classic"
  summary: "logback-classic module"
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/ceki/logback.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ch.qos.logback/logback-classic@1.2.3"
  filesAnalyzed: false
  homepage: "http://logback.qos.ch/logback-classic"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "logback-classic"
  summary: "logback-classic module"
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ch/qos/logback/logback-classic/1.2.3/logback-classic-1.2.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ch.qos.logback/logback-classic@1.2.3"
  filesAnalyzed: false
  homepage: "http://logback.qos.ch/logback-classic"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "logback-classic"
  summary: "logback-classic module"
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ch.qos.logback/logback-core@1.2.3"
  filesAnalyzed: false
  homepage: "http://logback.qos.ch/logback-core"
  licenseConcluded: "EPL-1.0"
  licenseDeclared: "LGPL-2.1-or-later AND EPL-1.0"
  name: "logback-core"
  summary: "logback-core module"
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/ceki/logback.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ch.qos.logback/logback-core@1.2.3"
  filesAnalyzed: false
  homepage: "http://logback.qos.ch/logback-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "logback-core"
  summary: "logback-core module"
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/ch/qos/logback/logback-core/1.2.3/logback-core-1.2.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/ch.qos.logback/logback-core@1.2.3"
  filesAnalyzed: false
  homepage: "http://logback.qos.ch/logback-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "logback-core"
  summary: "logback-core module"
  versionInfo: "1.2.3"
- SPDXID: "SPDXRef-Package-Maven-com.beust-jcommander-1.27"
  copyrightText: "Copyright (c) 2010-2011 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/beust/jcommander/1.27/jcommander-1.27.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.beust/jcommander@1.27"
  filesAnalyzed: false
  homepage: "http://beust.com/jcommander"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "jcommander"
  summary: "A Java framework to parse command line options with annotations."
  versionInfo: "1.27"
- SPDXID: "SPDXRef-Package-Maven-com.beust-jcommander-1.27-vcs"
  copyrightText: "Copyright (c) 2010-2011 the original author or authors"
  downloadLocation: "git+ssh://github.com/cbeust/jcommander.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.beust/jcommander@1.27"
  filesAnalyzed: false
  homepage: "http://beust.com/jcommander"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jcommander"
  summary: "A Java framework to parse command line options with annotations."
  versionInfo: "1.27"
- SPDXID: "SPDXRef-Package-Maven-com.beust-jcommander-1.27-source-artifact"
  copyrightText: "Copyright (c) 2010-2011 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/beust/jcommander/1.27/jcommander-1.27-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.beust/jcommander@1.27"
  filesAnalyzed: false
  homepage: "http://beust.com/jcommander"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jcommander"
  summary: "A Java framework to parse command line options with annotations."
  versionInfo: "1.27"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/classmate/1.3.4/classmate-1.3.4.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml/classmate@1.3.4"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/java-classmate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "classmate"
  summary: "Library for introspecting types with full generic information\n      \
    \  including resolving of field and method types."
  versionInfo: "1.3.4"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/java-classmate.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml/classmate@1.3.4"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/java-classmate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "classmate"
  summary: "Library for introspecting types with full generic information\n      \
    \  including resolving of field and method types."
  versionInfo: "1.3.4"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/classmate/1.3.4/classmate-1.3.4-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml/classmate@1.3.4"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/java-classmate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "classmate"
  summary: "Library for introspecting types with full generic information\n      \
    \  including resolving of field and method types."
  versionInfo: "1.3.4"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.9.0/jackson-annotations-2.9.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.9.0"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.9.0"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-annotations.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.9.0"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.9.0"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.9.0/jackson-annotations-2.9.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-annotations@2.9.0"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-annotations"
  summary: "Core annotations used for value types, used by Jackson data binding package."
  versionInfo: "2.9.0"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.9.5/jackson-core-2.9.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.9.5/jackson-core-2.9.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.9.9/jackson-core-2.9.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.9"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.9"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-core/2.9.9/jackson-core-2.9.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-core@2.9.9"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-core"
  summary: "Core Jackson processing abstractions (aka Streaming API), implementation\
    \ for JSON"
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.9.5/jackson-databind-2.9.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.5"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-databind.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.5"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.9.5/jackson-databind-2.9.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.5"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.9.9/jackson-databind-2.9.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-databind.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.9.9/jackson-databind-2.9.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.core/jackson-databind@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind"
  summary: "General data-binding functionality for Jackson: works on core streaming\
    \ API"
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.9.5/jackson-datatype-jdk8-2.9.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-datatype-jdk8"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nJDK\
    \ 8 data types."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-modules-java8.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-datatype-jdk8"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nJDK\
    \ 8 data types."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.9.5/jackson-datatype-jdk8-2.9.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jdk8@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jdk8"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-datatype-jdk8"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nJDK\
    \ 8 data types."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.9.9/jackson-datatype-joda-2.9.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.9.9"
  filesAnalyzed: false
  homepage: "http://wiki.fasterxml.com/JacksonModuleJoda"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-datatype-joda"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nJoda\
    \ (http://joda-time.sourceforge.net/) data types."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-datatype-joda.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.9.9"
  filesAnalyzed: false
  homepage: "http://wiki.fasterxml.com/JacksonModuleJoda"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-datatype-joda"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nJoda\
    \ (http://joda-time.sourceforge.net/) data types."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-joda/2.9.9/jackson-datatype-joda-2.9.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-joda@2.9.9"
  filesAnalyzed: false
  homepage: "http://wiki.fasterxml.com/JacksonModuleJoda"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-datatype-joda"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nJoda\
    \ (http://joda-time.sourceforge.net/) data types."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
  copyrightText: "Copyright 2013 FasterXML.com"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.9.5/jackson-datatype-jsr310-2.9.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-datatype-jsr310"
  summary: "Add-on module to support JSR-310 (Java 8 Date & Time API) data types."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5-vcs"
  copyrightText: "Copyright 2013 FasterXML.com"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-modules-java8.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-datatype-jsr310"
  summary: "Add-on module to support JSR-310 (Java 8 Date & Time API) data types."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5-source-artifact"
  copyrightText: "Copyright 2013 FasterXML.com"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.9.5/jackson-datatype-jsr310-2.9.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.datatype/jackson-datatype-jsr310@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-datatype-jsr310"
  summary: "Add-on module to support JSR-310 (Java 8 Date & Time API) data types."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.9.9/jackson-jaxrs-base-2.9.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-jaxrs-base"
  summary: "Pile of code that is shared by all Jackson-based JAX-RS\nproviders."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-jaxrs-providers.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-jaxrs-base"
  summary: "Pile of code that is shared by all Jackson-based JAX-RS\nproviders."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-base/2.9.9/jackson-jaxrs-base-2.9.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-base@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-base"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-jaxrs-base"
  summary: "Pile of code that is shared by all Jackson-based JAX-RS\nproviders."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.9.9/jackson-jaxrs-json-provider-2.9.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-jaxrs-json-provider"
  summary: "Functionality to handle JSON input/output for JAX-RS implementations (like\
    \ Jersey and RESTeasy) using standard Jackson data binding."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-jaxrs-providers.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-jaxrs-json-provider"
  summary: "Functionality to handle JSON input/output for JAX-RS implementations (like\
    \ Jersey and RESTeasy) using standard Jackson data binding."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/jaxrs/jackson-jaxrs-json-provider/2.9.9/jackson-jaxrs-json-provider-2.9.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.jaxrs/jackson-jaxrs-json-provider@2.9.9"
  filesAnalyzed: false
  homepage: "http://github.com/FasterXML/jackson-jaxrs-providers/jackson-jaxrs-json-provider"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-jaxrs-json-provider"
  summary: "Functionality to handle JSON input/output for JAX-RS implementations (like\
    \ Jersey and RESTeasy) using standard Jackson data binding."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.9.9/jackson-module-jaxb-annotations-2.9.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.9.9"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-base"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-module-jaxb-annotations"
  summary: "Support for using JAXB annotations as an alternative to \"native\" Jackson\
    \ annotations, for configuring\ndata-binding."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-modules-base.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.9.9"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-base"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-module-jaxb-annotations"
  summary: "Support for using JAXB annotations as an alternative to \"native\" Jackson\
    \ annotations, for configuring\ndata-binding."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/module/jackson-module-jaxb-annotations/2.9.9/jackson-module-jaxb-annotations-2.9.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.module/jackson-module-jaxb-annotations@2.9.9"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-base"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-module-jaxb-annotations"
  summary: "Support for using JAXB annotations as an alternative to \"native\" Jackson\
    \ annotations, for configuring\ndata-binding."
  versionInfo: "2.9.9"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.9.5/jackson-module-parameter-names-2.9.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-module-parameter-names"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nintrospection\
    \ of method/constructor parameter names, without having to add explicit property\
    \ name annotation."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/FasterXML/jackson-modules-java8.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-module-parameter-names"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nintrospection\
    \ of method/constructor parameter names, without having to add explicit property\
    \ name annotation."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.9.5/jackson-module-parameter-names-2.9.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.fasterxml.jackson.module/jackson-module-parameter-names@2.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/FasterXML/jackson-modules-java8/jackson-module-parameter-names"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-module-parameter-names"
  summary: "Add-on module for Jackson (http://jackson.codehaus.org) to support\nintrospection\
    \ of method/constructor parameter names, without having to add explicit property\
    \ name annotation."
  versionInfo: "2.9.5"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5"
  copyrightText: "Copyright (c) 2008, 2014 http://www.google.com' Google, Inc.\nCopyright\
    \ (c) 2008-2012, 2014-2017 Google Inc.\nCopyright (c) 2010 The Android Open Source\
    \ Project\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2014 Trymph Inc.\nCopyright\
    \ (c) 2016-2018 Gson\nCopyright (c) 2016-2018 The Gson Authors\nCopyright 2008-2011\
    \ Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/gson/gson/2.8.5/gson-2.8.5.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@2.8.5"
  filesAnalyzed: false
  homepage: "https://github.com/google/gson/gson"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "gson"
  summary: "Gson JSON library"
  versionInfo: "2.8.5"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5-vcs"
  copyrightText: "Copyright (c) 2008, 2014 http://www.google.com' Google, Inc.\nCopyright\
    \ (c) 2008-2012, 2014-2017 Google Inc.\nCopyright (c) 2010 The Android Open Source\
    \ Project\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2014 Trymph Inc.\nCopyright\
    \ (c) 2016-2018 Gson\nCopyright (c) 2016-2018 The Gson Authors\nCopyright 2008-2011\
    \ Google Inc."
  downloadLocation: "git+https://github.com/google/gson.git@f649e051411e092f0123878e16c5132500a2d01e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@2.8.5"
  filesAnalyzed: false
  homepage: "https://github.com/google/gson/gson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson"
  summary: "Gson JSON library"
  versionInfo: "2.8.5"
- SPDXID: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5-source-artifact"
  copyrightText: "Copyright (c) 2008, 2014 http://www.google.com' Google, Inc.\nCopyright\
    \ (c) 2008-2012, 2014-2017 Google Inc.\nCopyright (c) 2010 The Android Open Source\
    \ Project\nCopyright (c) 2012 Square, Inc.\nCopyright (c) 2014 Trymph Inc.\nCopyright\
    \ (c) 2016-2018 Gson\nCopyright (c) 2016-2018 The Gson Authors\nCopyright 2008-2011\
    \ Google Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/code/gson/gson/2.8.5/gson-2.8.5-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.code.gson/gson@2.8.5"
  filesAnalyzed: false
  homepage: "https://github.com/google/gson/gson"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson"
  summary: "Gson JSON library"
  versionInfo: "2.8.5"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-20.0"
  copyrightText: "Copyright (c) 2005-2016 The Guava Authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/20.0/guava-20.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@20.0"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more.\n\n    Guava\
    \ has only one code dependency - javax.annotation,\n    per the JSR-305 spec."
  versionInfo: "20.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-20.0-vcs"
  copyrightText: "Copyright (c) 2005-2016 The Guava Authors"
  downloadLocation: "git+https://github.com/google/guava.git@65f6b4f4b132a051616403bcf74e4034a19d92a1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@20.0"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more.\n\n    Guava\
    \ has only one code dependency - javax.annotation,\n    per the JSR-305 spec."
  versionInfo: "20.0"
- SPDXID: "SPDXRef-Package-Maven-com.google.guava-guava-20.0-source-artifact"
  copyrightText: "Copyright (c) 2005-2016 The Guava Authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/google/guava/guava/20.0/guava-20.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.google.guava/guava@20.0"
  filesAnalyzed: false
  homepage: "https://github.com/google/guava/guava"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "guava"
  summary: "Guava is a suite of core and expanded libraries that include\n    utility\
    \ classes, google's collections, io classes, and much\n    much more.\n\n    Guava\
    \ has only one code dependency - javax.annotation,\n    per the JSR-305 spec."
  versionInfo: "20.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0"
  copyrightText: "(c) zbar s:http h:example.com\nCopyright (c) 2009-2013 The Android\
    \ Open Source Project\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011-2012,\
    \ 2016 Google Inc.\nCopyright (c) 2012-2019 Square, Inc.\nCopyright (c) 2013 Karl\
    \ Swedberg\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2012-2013 Twitter, Inc\nCopyright 2014, 2016 Square Inc.\nCopyright\
    \ 2016 Square, Inc.\nCopyright 2016 The Netty Project"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/squareup/okhttp3/logging-interceptor/3.14.0/logging-interceptor-3.14.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/square/okhttp/logging-interceptor"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "logging-interceptor"
  summary: "An HTTP+HTTP/2 client for Android and Java applications"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0-vcs"
  copyrightText: "(c) zbar s:http h:example.com\nCopyright (c) 2009-2013 The Android\
    \ Open Source Project\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011-2012,\
    \ 2016 Google Inc.\nCopyright (c) 2012-2019 Square, Inc.\nCopyright (c) 2013 Karl\
    \ Swedberg\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2012-2013 Twitter, Inc\nCopyright 2014, 2016 Square Inc.\nCopyright\
    \ 2016 Square, Inc.\nCopyright 2016 The Netty Project"
  downloadLocation: "git+https://github.com/square/okhttp.git@44d51d0cebea7d2c69f293e2fb2a7e97e7984bcc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/square/okhttp/logging-interceptor"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "logging-interceptor"
  summary: "An HTTP+HTTP/2 client for Android and Java applications"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0-source-artifact"
  copyrightText: "(c) zbar s:http h:example.com\nCopyright (c) 2009-2013 The Android\
    \ Open Source Project\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011-2012,\
    \ 2016 Google Inc.\nCopyright (c) 2012-2019 Square, Inc.\nCopyright (c) 2013 Karl\
    \ Swedberg\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2012-2013 Twitter, Inc\nCopyright 2014, 2016 Square Inc.\nCopyright\
    \ 2016 Square, Inc.\nCopyright 2016 The Netty Project"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/squareup/okhttp3/logging-interceptor/3.14.0/logging-interceptor-3.14.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okhttp3/logging-interceptor@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/square/okhttp/logging-interceptor"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "logging-interceptor"
  summary: "An HTTP+HTTP/2 client for Android and Java applications"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0"
  copyrightText: "(c) zbar s:http h:example.com\nCopyright (c) 2009-2013 The Android\
    \ Open Source Project\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011-2012,\
    \ 2016 Google Inc.\nCopyright (c) 2012-2019 Square, Inc.\nCopyright (c) 2013 Karl\
    \ Swedberg\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2012-2013 Twitter, Inc\nCopyright 2014, 2016 Square Inc.\nCopyright\
    \ 2016 Square, Inc.\nCopyright 2016 The Netty Project"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/squareup/okhttp3/okhttp/3.14.0/okhttp-3.14.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okhttp3/okhttp@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/square/okhttp/okhttp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "okhttp"
  summary: "An HTTP+HTTP/2 client for Android and Java applications"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0-vcs"
  copyrightText: "(c) zbar s:http h:example.com\nCopyright (c) 2009-2013 The Android\
    \ Open Source Project\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011-2012,\
    \ 2016 Google Inc.\nCopyright (c) 2012-2019 Square, Inc.\nCopyright (c) 2013 Karl\
    \ Swedberg\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2012-2013 Twitter, Inc\nCopyright 2014, 2016 Square Inc.\nCopyright\
    \ 2016 Square, Inc.\nCopyright 2016 The Netty Project"
  downloadLocation: "git+https://github.com/square/okhttp.git@44d51d0cebea7d2c69f293e2fb2a7e97e7984bcc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okhttp3/okhttp@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/square/okhttp/okhttp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "okhttp"
  summary: "An HTTP+HTTP/2 client for Android and Java applications"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0-source-artifact"
  copyrightText: "(c) zbar s:http h:example.com\nCopyright (c) 2009-2013 The Android\
    \ Open Source Project\nCopyright (c) 2011 The Guava Authors\nCopyright (c) 2011-2012,\
    \ 2016 Google Inc.\nCopyright (c) 2012-2019 Square, Inc.\nCopyright (c) 2013 Karl\
    \ Swedberg\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2012-2013 Twitter, Inc\nCopyright 2014, 2016 Square Inc.\nCopyright\
    \ 2016 Square, Inc.\nCopyright 2016 The Netty Project"
  downloadLocation: "https://repo.maven.apache.org/maven2/com/squareup/okhttp3/okhttp/3.14.0/okhttp-3.14.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okhttp3/okhttp@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/square/okhttp/okhttp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "okhttp"
  summary: "An HTTP+HTTP/2 client for Android and Java applications"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2"
  copyrightText: "Copyright (c) 2014, 2016, 2018 Square, Inc. and others\nCopyright\
    \ (c) 2014-2019 Square, Inc.\nCopyright 2013-2014 Square Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/squareup/okio/okio/1.17.2/okio-1.17.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okio/okio@1.17.2"
  filesAnalyzed: false
  homepage: "https://github.com/square/okio/okio"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "okio"
  summary: "A modern I/O API for Java"
  versionInfo: "1.17.2"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2-vcs"
  copyrightText: "Copyright (c) 2014, 2016, 2018 Square, Inc. and others\nCopyright\
    \ (c) 2014-2019 Square, Inc.\nCopyright 2013-2014 Square Inc."
  downloadLocation: "git+https://github.com/square/okio.git@f95aabc6605d3ea8349385cf2de34e229d58d60e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okio/okio@1.17.2"
  filesAnalyzed: false
  homepage: "https://github.com/square/okio/okio"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "okio"
  summary: "A modern I/O API for Java"
  versionInfo: "1.17.2"
- SPDXID: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2-source-artifact"
  copyrightText: "Copyright (c) 2014, 2016, 2018 Square, Inc. and others\nCopyright\
    \ (c) 2014-2019 Square, Inc.\nCopyright 2013-2014 Square Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/com/squareup/okio/okio/1.17.2/okio-1.17.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/com.squareup.okio/okio@1.17.2"
  filesAnalyzed: false
  homepage: "https://github.com/square/okio/okio"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "okio"
  summary: "A modern I/O API for Java"
  versionInfo: "1.17.2"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9"
  copyrightText: "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright 2002-2013\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.9/commons-codec-1.9.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.9"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.9"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9-vcs"
  copyrightText: "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright 2002-2013\
    \ The Apache Software Foundation"
  downloadLocation: "svn+http://svn.apache.org/repos/asf/commons/proper/codec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.9"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.9"
- SPDXID: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9-source-artifact"
  copyrightText: "Copyright (c) 2002 Kevin Atkinson (kevina@gnu.org)\nCopyright 2002-2013\
    \ The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/commons-codec/commons-codec/1.9/commons-codec-1.9-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/commons-codec/commons-codec@1.9"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-codec/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-codec"
  summary: "The Apache Commons Codec package contains simple encoder and decoders\
    \ for\n     various formats such as Base64 and Hexadecimal.  In addition to these\n\
    \     widely used encoders and decoders, the codec package also maintains a\n\
    \     collection of phonetic encoding utilities."
  versionInfo: "1.9"
- SPDXID: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/gsonfire/gson-fire/1.8.3/gson-fire-1.8.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.gsonfire/gson-fire@1.8.3"
  filesAnalyzed: false
  homepage: "http://gsonfire.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gson-fire"
  summary: "A java library that adds some very useful features to Gson, like Date\
    \ serializing to unix timestamp or RFC3339, method (getter) serialization, pre\
    \ and post processors and many more. Check out the documentation to learn how\
    \ to use it!"
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/julman99/gson-fire.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.gsonfire/gson-fire@1.8.3"
  filesAnalyzed: false
  homepage: "http://gsonfire.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson-fire"
  summary: "A java library that adds some very useful features to Gson, like Date\
    \ serializing to unix timestamp or RFC3339, method (getter) serialization, pre\
    \ and post processors and many more. Check out the documentation to learn how\
    \ to use it!"
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/gsonfire/gson-fire/1.8.3/gson-fire-1.8.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.gsonfire/gson-fire@1.8.3"
  filesAnalyzed: false
  homepage: "http://gsonfire.io"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gson-fire"
  summary: "A java library that adds some very useful features to Gson, like Date\
    \ serializing to unix timestamp or RFC3339, method (getter) serialization, pre\
    \ and post processors and many more. Check out the documentation to learn how\
    \ to use it!"
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-core/2.8.0/springfox-core-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-core@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-core"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0-vcs"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-core@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-core"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0-source-artifact"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-core/2.8.0/springfox-core-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-core@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-core"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-schema/2.8.0/springfox-schema-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-schema@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-schema"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0-vcs"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-schema@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-schema"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0-source-artifact"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-schema/2.8.0/springfox-schema-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-schema@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-schema"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-spi/2.8.0/springfox-spi-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-spi@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-spi"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0-vcs"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-spi@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-spi"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0-source-artifact"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-spi/2.8.0/springfox-spi-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-spi@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-spi"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-spring-web/2.8.0/springfox-spring-web-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-spring-web@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-spring-web"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0-vcs"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-spring-web@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-spring-web"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0-source-artifact"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-spring-web/2.8.0/springfox-spring-web-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-spring-web@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-spring-web"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-swagger-common/2.8.0/springfox-swagger-common-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger-common@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-swagger-common"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0-vcs"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger-common@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-swagger-common"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0-source-artifact"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-swagger-common/2.8.0/springfox-swagger-common-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger-common@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-swagger-common"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-swagger-ui/2.8.0/springfox-swagger-ui-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger-ui@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-swagger-ui"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger-ui@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-swagger-ui"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-swagger-ui/2.8.0/springfox-swagger-ui-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger-ui@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-swagger-ui"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-swagger2/2.8.0/springfox-swagger2-2.8.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger2@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "springfox-swagger2"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0-vcs"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "git+ssh://github.com/springfox/springfox.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger2@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-swagger2"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0-source-artifact"
  copyrightText: "Copyright 2015-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/springfox/springfox-swagger2/2.8.0/springfox-swagger2-2.8.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.springfox/springfox-swagger2@2.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/springfox/springfox"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "springfox-swagger2"
  summary: "JSON API documentation for spring based applications"
  versionInfo: "2.8.0"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3"
  copyrightText: "Copyright 2015 SmartBear Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-annotations/1.5.3/swagger-annotations-1.5.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.3"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3-vcs"
  copyrightText: "Copyright 2015 SmartBear Software"
  downloadLocation: "git+ssh://github.com/swagger-api/swagger-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.3"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3-source-artifact"
  copyrightText: "Copyright 2015 SmartBear Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-annotations/1.5.3/swagger-annotations-1.5.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.3"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14"
  copyrightText: "Copyright 2016 SmartBear Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-annotations/1.5.14/swagger-annotations-1.5.14.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.14"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.14"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14-vcs"
  copyrightText: "Copyright 2016 SmartBear Software"
  downloadLocation: "git+ssh://github.com/swagger-api/swagger-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.14"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.14"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14-source-artifact"
  copyrightText: "Copyright 2016 SmartBear Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-annotations/1.5.14/swagger-annotations-1.5.14-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.14"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.14"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21"
  copyrightText: "Copyright 2016 SmartBear Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-annotations/1.5.21/swagger-annotations-1.5.21.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.21"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.21"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21-vcs"
  copyrightText: "Copyright 2016 SmartBear Software"
  downloadLocation: "git+ssh://github.com/swagger-api/swagger-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.21"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.21"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21-source-artifact"
  copyrightText: "Copyright 2016 SmartBear Software"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-annotations/1.5.21/swagger-annotations-1.5.21-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-annotations@1.5.21"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-annotations"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-annotations"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.21"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-models/1.5.14/swagger-models-1.5.14.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-models@1.5.14"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-models"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "swagger-models"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.14"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/swagger-api/swagger-core.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-models@1.5.14"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-models"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-models"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.14"
- SPDXID: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/io/swagger/swagger-models/1.5.14/swagger-models-1.5.14-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/io.swagger/swagger-models@1.5.14"
  filesAnalyzed: false
  homepage: "https://github.com/swagger-api/swagger-core/modules/swagger-models"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "swagger-models"
  summary: "Sonatype helps open source projects to set up Maven repositories on https://oss.sonatype.org/"
  versionInfo: "1.5.14"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1999-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2016 Oracle America,\
    \ Inc.\nCopyright (c) 2017 Oracle and/or its affiliates\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CDDL-1.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1999-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2016 Oracle America,\
    \ Inc.\nCopyright (c) 2017 Oracle and/or its affiliates\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "git+https://github.com/javaee/javax.annotation.git@5000694c178b93a952510dff6afcc2101e6e0490"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1999-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2005-2018 Oracle and/or its affiliates\nCopyright (c) 2016 Oracle America,\
    \ Inc.\nCopyright (c) 2017 Oracle and/or its affiliates\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/annotation/javax.annotation-api/1.3.2/javax.annotation-api-1.3.2-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.annotation/javax.annotation-api@1.3.2"
  filesAnalyzed: false
  homepage: "http://jcp.org/en/jsr/detail?id=250"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.annotation-api"
  summary: "Common Annotations for the JavaTM Platform API"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final"
  copyrightText: "Copyright 2009-2013 Red Hat, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/validation/validation-api/1.1.0.Final/validation-api-1.1.0.Final.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.validation/validation-api@1.1.0.Final"
  filesAnalyzed: false
  homepage: "http://beanvalidation.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "validation-api"
  summary: "Bean Validation API"
  versionInfo: "1.1.0.Final"
- SPDXID: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final-vcs"
  copyrightText: "Copyright 2009-2013 Red Hat, Inc."
  downloadLocation: "git+https://github.com/beanvalidation/beanvalidation-api.git@4173261c6123de521d2db9cbc7a76ecf1a135ece"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.validation/validation-api@1.1.0.Final"
  filesAnalyzed: false
  homepage: "http://beanvalidation.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validation-api"
  summary: "Bean Validation API"
  versionInfo: "1.1.0.Final"
- SPDXID: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final-source-artifact"
  copyrightText: "Copyright 2009-2013 Red Hat, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/validation/validation-api/1.1.0.Final/validation-api-1.1.0.Final-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.validation/validation-api@1.1.0.Final"
  filesAnalyzed: false
  homepage: "http://beanvalidation.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validation-api"
  summary: "Bean Validation API"
  versionInfo: "1.1.0.Final"
- SPDXID: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/validation/validation-api/2.0.1.Final/validation-api-2.0.1.Final.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.validation/validation-api@2.0.1.Final"
  filesAnalyzed: false
  homepage: "http://beanvalidation.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "validation-api"
  summary: "Bean Validation API"
  versionInfo: "2.0.1.Final"
- SPDXID: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/beanvalidation/beanvalidation-api.git@95c3f9e9dde14c48fbcb1ec7869e0f0d58185c36"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.validation/validation-api@2.0.1.Final"
  filesAnalyzed: false
  homepage: "http://beanvalidation.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validation-api"
  summary: "Bean Validation API"
  versionInfo: "2.0.1.Final"
- SPDXID: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/validation/validation-api/2.0.1.Final/validation-api-2.0.1.Final-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.validation/validation-api@2.0.1.Final"
  filesAnalyzed: false
  homepage: "http://beanvalidation.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validation-api"
  summary: "Bean Validation API"
  versionInfo: "2.0.1.Final"
- SPDXID: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1996-2014 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 1996-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2006 Google Inc.\nCopyright (c) 2010-2015, 2017 Oracle and/or its affiliates\n\
    Copyright (c) 2011, 2017 Oracle and/or its affiliates\nCopyright (c) 2011-2013,\
    \ 2015, 2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/ws/rs/javax.ws.rs-api/2.1.1/javax.ws.rs-api-2.1.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/eclipse-ee4j/jaxrs-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0 OR GPL-2.0-only WITH Classpath-exception-2.0"
  name: "javax.ws.rs-api"
  summary: "Java API for RESTful Web Services"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1996-2014 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 1996-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2006 Google Inc.\nCopyright (c) 2010-2015, 2017 Oracle and/or its affiliates\n\
    Copyright (c) 2011, 2017 Oracle and/or its affiliates\nCopyright (c) 2011-2013,\
    \ 2015, 2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "git+https://github.com/eclipse-ee4j/jaxrs-api.git@2fce7ddc46c9bfe68e73f2d09487d050d1732612"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/eclipse-ee4j/jaxrs-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.ws.rs-api"
  summary: "Java API for RESTful Web Services"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc.\nCopyright\
    \ (c) 1996-2014 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 1996-2017 http://www.oracle.com' Oracle and/or its affiliates\nCopyright\
    \ (c) 2006 Google Inc.\nCopyright (c) 2010-2015, 2017 Oracle and/or its affiliates\n\
    Copyright (c) 2011, 2017 Oracle and/or its affiliates\nCopyright (c) 2011-2013,\
    \ 2015, 2017 Oracle and/or its affiliates\ncopyrighted by the Free Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/javax/ws/rs/javax.ws.rs-api/2.1.1/javax.ws.rs-api-2.1.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/javax.ws.rs/javax.ws.rs-api@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/eclipse-ee4j/jaxrs-api"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javax.ws.rs-api"
  summary: "Java API for RESTful Web Services"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-Maven-joda-time-joda-time-2.7"
  copyrightText: "Copyright 2001-2014 Stephen Colebourne"
  downloadLocation: "https://repo.maven.apache.org/maven2/joda-time/joda-time/2.7/joda-time-2.7.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/joda-time/joda-time@2.7"
  filesAnalyzed: false
  homepage: "http://www.joda.org/joda-time/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "joda-time"
  summary: "Date and time library to replace JDK date handling"
  versionInfo: "2.7"
- SPDXID: "SPDXRef-Package-Maven-joda-time-joda-time-2.7-vcs"
  copyrightText: "Copyright 2001-2014 Stephen Colebourne"
  downloadLocation: "git+https://github.com/JodaOrg/joda-time.git@780f9626fd473e20ea6bcf65a917fcbcb92cff29"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/joda-time/joda-time@2.7"
  filesAnalyzed: false
  homepage: "http://www.joda.org/joda-time/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "joda-time"
  summary: "Date and time library to replace JDK date handling"
  versionInfo: "2.7"
- SPDXID: "SPDXRef-Package-Maven-joda-time-joda-time-2.7-source-artifact"
  copyrightText: "Copyright 2001-2014 Stephen Colebourne"
  downloadLocation: "https://repo.maven.apache.org/maven2/joda-time/joda-time/2.7/joda-time-2.7-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/joda-time/joda-time@2.7"
  filesAnalyzed: false
  homepage: "http://www.joda.org/joda-time/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "joda-time"
  summary: "Date and time library to replace JDK date handling"
  versionInfo: "2.7"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.8.1"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.8.1/junit-4.8.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.8.1"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "CPL-1.0"
  licenseDeclared: "CPL-1.0"
  name: "junit"
  summary: "JUnit is a regression testing framework written by Erich Gamma and Kent\
    \ Beck. It is used by the developer who implements unit tests in Java."
  versionInfo: "4.8.1"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.8.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/KentBeck/junit.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.8.1"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a regression testing framework written by Erich Gamma and Kent\
    \ Beck. It is used by the developer who implements unit tests in Java."
  versionInfo: "4.8.1"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.8.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.8.1/junit-4.8.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.8.1"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a regression testing framework written by Erich Gamma and Kent\
    \ Beck. It is used by the developer who implements unit tests in Java."
  versionInfo: "4.8.1"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.12"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.12/junit-4.12.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.12"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "EPL-1.0"
  licenseDeclared: "EPL-1.0"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.12"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.12-vcs"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "git+https://github.com/junit-team/junit.git@64155f8a9babcfcf4263cf4d08253a1556e75481"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.12"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.12"
- SPDXID: "SPDXRef-Package-Maven-junit-junit-4.12-source-artifact"
  copyrightText: "Copyright 2013 LinkedIn Corp."
  downloadLocation: "https://repo.maven.apache.org/maven2/junit/junit/4.12/junit-4.12-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/junit/junit@4.12"
  filesAnalyzed: false
  homepage: "http://junit.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "junit"
  summary: "JUnit is a unit testing framework for Java, created by Erich Gamma and\
    \ Kent Beck."
  versionInfo: "4.12"
- SPDXID: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11"
  copyrightText: "Copyright (c) 2000-2013 INRIA, France Telecom\nCopyright (c) 2004-2011\
    \ Eugene Kuleshov"
  downloadLocation: "https://repo.maven.apache.org/maven2/net/bytebuddy/byte-buddy/1.7.11/byte-buddy-1.7.11.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.bytebuddy/byte-buddy@1.7.11"
  filesAnalyzed: false
  homepage: "http://bytebuddy.net/byte-buddy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "byte-buddy"
  summary: "Byte Buddy is a Java library for creating Java classes at run time.\n\
    \        This artifact is a build of Byte Buddy with all ASM dependencies repackaged\
    \ into its own name space."
  versionInfo: "1.7.11"
- SPDXID: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11-vcs"
  copyrightText: "Copyright (c) 2000-2013 INRIA, France Telecom\nCopyright (c) 2004-2011\
    \ Eugene Kuleshov"
  downloadLocation: "git+ssh://github.com/raphw/byte-buddy.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.bytebuddy/byte-buddy@1.7.11"
  filesAnalyzed: false
  homepage: "http://bytebuddy.net/byte-buddy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "byte-buddy"
  summary: "Byte Buddy is a Java library for creating Java classes at run time.\n\
    \        This artifact is a build of Byte Buddy with all ASM dependencies repackaged\
    \ into its own name space."
  versionInfo: "1.7.11"
- SPDXID: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11-source-artifact"
  copyrightText: "Copyright (c) 2000-2013 INRIA, France Telecom\nCopyright (c) 2004-2011\
    \ Eugene Kuleshov"
  downloadLocation: "https://repo.maven.apache.org/maven2/net/bytebuddy/byte-buddy/1.7.11/byte-buddy-1.7.11-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/net.bytebuddy/byte-buddy@1.7.11"
  filesAnalyzed: false
  homepage: "http://bytebuddy.net/byte-buddy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "byte-buddy"
  summary: "Byte Buddy is a Java library for creating Java classes at run time.\n\
    \        This artifact is a build of Byte Buddy with all ASM dependencies repackaged\
    \ into its own name space."
  versionInfo: "1.7.11"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1"
  copyrightText: "Copyright (c) 2001-2011 http://www.apache.org/' The Apache Software\
    \ Foundation\nCopyright 2001-2018 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.8.1/commons-lang3-3.8.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.8.1"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.8.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1-vcs"
  copyrightText: "Copyright (c) 2001-2011 http://www.apache.org/' The Apache Software\
    \ Foundation\nCopyright 2001-2018 The Apache Software Foundation"
  downloadLocation: "git+http://git-wip-us.apache.org/repos/asf/commons-lang.git@eb5b11a25c9e61f9b25a540682816ebb103b735c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.8.1"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.8.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1-source-artifact"
  copyrightText: "Copyright (c) 2001-2011 http://www.apache.org/' The Apache Software\
    \ Foundation\nCopyright 2001-2018 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/commons/commons-lang3/3.8.1/commons-lang3-3.8.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.commons/commons-lang3@3.8.1"
  filesAnalyzed: false
  homepage: "http://commons.apache.org/proper/commons-lang/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commons-lang3"
  summary: "Apache Commons Lang, a package of Java utility classes for the\n  classes\
    \ that are in java.lang's hierarchy, or are considered to be so\n  standard as\
    \ to justify existence in java.lang."
  versionInfo: "3.8.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-api/2.10.0/log4j-api-2.10.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-api@2.10.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "log4j-api"
  summary: "The Apache Log4j API"
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0-vcs"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/logging-log4j2.git@6275d8aac4e392eacd81d942a1b97856c92b698f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-api@2.10.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-api"
  summary: "The Apache Log4j API"
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0-source-artifact"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-api/2.10.0/log4j-api-2.10.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-api@2.10.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-api/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-api"
  summary: "The Apache Log4j API"
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.10.0/log4j-to-slf4j-2.10.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.10.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-to-slf4j/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "log4j-to-slf4j"
  summary: "The Apache Log4j binding between Log4j 2 API and SLF4J."
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0-vcs"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "git+https://git-wip-us.apache.org/repos/asf/logging-log4j2.git@6275d8aac4e392eacd81d942a1b97856c92b698f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.10.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-to-slf4j/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-to-slf4j"
  summary: "The Apache Log4j binding between Log4j 2 API and SLF4J."
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0-source-artifact"
  copyrightText: "(c) 2017 2$s\n(c) 2017 n, result\n(c) 2017 u001B\nCopyright (c)\
    \ 1990-2008 Info-ZIP\nCopyright (c) 2006 Google Inc.\nCopyright (c) 2017 n', assertEquals(expected,\
    \ baos.toString )\nCopyright (c) 2017 public\nCopyright 1999-2005 The Apache Software\
    \ Foundation\nCopyright 1999-2017 Apache Software Foundation\nCopyright 2002-2012\
    \ Ramnivas Laddad, Juergen Hoeller, Chris Beams\nCopyright 2004 Jason Paul Kitchen\n\
    Copyright 2005-2006 Tim Fennell\nCopyright 2011 John Resig\nCopyright 2011 The\
    \ Dojo Foundation\nCopyright 2012 Twitter, Inc\nCopyright 2012 Twitter, Inc. http://www.apache.org/licenses/LICENSE-2.0.txt\n\
    Copyright 2017 Remko Popma\nCopyright Terracotta, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/logging/log4j/log4j-to-slf4j/2.10.0/log4j-to-slf4j-2.10.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.logging.log4j/log4j-to-slf4j@2.10.0"
  filesAnalyzed: false
  homepage: "https://logging.apache.org/log4j/2.x/log4j-to-slf4j/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log4j-to-slf4j"
  summary: "The Apache Log4j binding between Log4j 2 API and SLF4J."
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch\nCopyright 2010-2011 Newcastle University\n\
    Copyright 2010-2012 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.client/1.0.1/org.apache.oltu.oauth2.client-1.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client@1.0.1"
  filesAnalyzed: false
  homepage: "https://oltu.apache.org/org.apache.oltu.oauth2.parent/org.apache.oltu.oauth2.client/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "org.apache.oltu.oauth2.client"
  summary: "Apache Oltu is an OAuth protocol implementation in Java."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1-vcs"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch\nCopyright 2010-2011 Newcastle University\n\
    Copyright 2010-2012 The Apache Software Foundation"
  downloadLocation: "svn+https://svn.apache.org/repos/asf/oltu@1703595"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client@1.0.1"
  filesAnalyzed: false
  homepage: "https://oltu.apache.org/org.apache.oltu.oauth2.parent/org.apache.oltu.oauth2.client/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.apache.oltu.oauth2.client"
  summary: "Apache Oltu is an OAuth protocol implementation in Java."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch\nCopyright 2010-2011 Newcastle University\n\
    Copyright 2010-2012 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.client/1.0.1/org.apache.oltu.oauth2.client-1.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.client@1.0.1"
  filesAnalyzed: false
  homepage: "https://oltu.apache.org/org.apache.oltu.oauth2.parent/org.apache.oltu.oauth2.client/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.apache.oltu.oauth2.client"
  summary: "Apache Oltu is an OAuth protocol implementation in Java."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1"
  copyrightText: "Common Copyright 2010-2015 The Apache Software Foundation\nCopyright\
    \ 2010-2011 Newcastle University"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.common/1.0.1/org.apache.oltu.oauth2.common-1.0.1.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common@1.0.1"
  filesAnalyzed: false
  homepage: "https://oltu.apache.org/org.apache.oltu.oauth2.parent/org.apache.oltu.oauth2.common/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "org.apache.oltu.oauth2.common"
  summary: "OAuth 2.0 library - Common"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1-vcs"
  copyrightText: "Common Copyright 2010-2015 The Apache Software Foundation\nCopyright\
    \ 2010-2011 Newcastle University"
  downloadLocation: "svn+https://svn.apache.org/repos/asf/oltu"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common@1.0.1"
  filesAnalyzed: false
  homepage: "https://oltu.apache.org/org.apache.oltu.oauth2.parent/org.apache.oltu.oauth2.common/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.apache.oltu.oauth2.common"
  summary: "OAuth 2.0 library - Common"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1-source-artifact"
  copyrightText: "Common Copyright 2010-2015 The Apache Software Foundation\nCopyright\
    \ 2010-2011 Newcastle University"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/oltu/oauth2/org.apache.oltu.oauth2.common/1.0.1/org.apache.oltu.oauth2.common-1.0.1-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.oltu.oauth2/org.apache.oltu.oauth2.common@1.0.1"
  filesAnalyzed: false
  homepage: "https://oltu.apache.org/org.apache.oltu.oauth2.parent/org.apache.oltu.oauth2.common/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.apache.oltu.oauth2.common"
  summary: "OAuth 2.0 library - Common"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-core-8.5.29"
  copyrightText: "(c) Copyright 2002 International Business Machines Corporation\n\
    Copyright (c) 1999-2018 Apache Software Foundation\nCopyright (c) 1999-2018 The\
    \ Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\n\
    Copyright 1999-2018 The Apache Software Foundation\nCopyright 2003-2009 Sun Microsystems,\
    \ Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/8.5.29/tomcat-embed-core-8.5.29.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.29"
  filesAnalyzed: false
  homepage: "http://tomcat.apache.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tomcat-embed-core"
  summary: "Core Tomcat implementation"
  versionInfo: "8.5.29"
- SPDXID: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-core-8.5.29-source-artifact"
  copyrightText: "(c) Copyright 2002 International Business Machines Corporation\n\
    Copyright (c) 1999-2018 Apache Software Foundation\nCopyright (c) 1999-2018 The\
    \ Apache Software Foundation\nCopyright (c) 2009-2013 Oracle and/or its affiliates\n\
    Copyright 1999-2018 The Apache Software Foundation\nCopyright 2003-2009 Sun Microsystems,\
    \ Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/tomcat/embed/tomcat-embed-core/8.5.29/tomcat-embed-core-8.5.29-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.tomcat.embed/tomcat-embed-core@8.5.29"
  filesAnalyzed: false
  homepage: "http://tomcat.apache.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tomcat-embed-core"
  summary: "Core Tomcat implementation"
  versionInfo: "8.5.29"
- SPDXID: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-el-8.5.29"
  copyrightText: "Copyright 1999-2018 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/8.5.29/tomcat-embed-el-8.5.29.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@8.5.29"
  filesAnalyzed: false
  homepage: "http://tomcat.apache.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tomcat-embed-el"
  summary: "Core Tomcat implementation"
  versionInfo: "8.5.29"
- SPDXID: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-el-8.5.29-source-artifact"
  copyrightText: "Copyright 1999-2018 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/tomcat/embed/tomcat-embed-el/8.5.29/tomcat-embed-el-8.5.29-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.tomcat.embed/tomcat-embed-el@8.5.29"
  filesAnalyzed: false
  homepage: "http://tomcat.apache.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tomcat-embed-el"
  summary: "Core Tomcat implementation"
  versionInfo: "8.5.29"
- SPDXID: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-websocket-8.5.29"
  copyrightText: "Copyright 1999-2018 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/8.5.29/tomcat-embed-websocket-8.5.29.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.29"
  filesAnalyzed: false
  homepage: "http://tomcat.apache.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tomcat-embed-websocket"
  summary: "Core Tomcat implementation"
  versionInfo: "8.5.29"
- SPDXID: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-websocket-8.5.29-source-artifact"
  copyrightText: "Copyright 1999-2018 The Apache Software Foundation"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/apache/tomcat/embed/tomcat-embed-websocket/8.5.29/tomcat-embed-websocket-8.5.29-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.apache.tomcat.embed/tomcat-embed-websocket@8.5.29"
  filesAnalyzed: false
  homepage: "http://tomcat.apache.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tomcat-embed-websocket"
  summary: "Core Tomcat implementation"
  versionInfo: "8.5.29"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/hamcrest/JavaHamcrest.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hamcrest/hamcrest-core/1.3/hamcrest-core-1.3-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hamcrest/hamcrest-core@1.3"
  filesAnalyzed: false
  homepage: "https://github.com/hamcrest/JavaHamcrest/hamcrest-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hamcrest-core"
  summary: "This is the core API of hamcrest matcher framework to be used by third-party\
    \ framework providers. This includes the a foundation set of matcher implementations\
    \ for common operations."
  versionInfo: "1.3"
- SPDXID: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final"
  copyrightText: "(c) 2011-2012 SERLI\nCopyright (c) 2004, 2006 The Linux Foundation\
    \ and its contributors\nCopyright 2009 IIZUKA Software Technologies Ltd"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hibernate/validator/hibernate-validator/6.0.9.Final/hibernate-validator-6.0.9.Final.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hibernate.validator/hibernate-validator@6.0.9.Final"
  filesAnalyzed: false
  homepage: "http://hibernate.org/validator/hibernate-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "hibernate-validator"
  summary: "Hibernate's Bean Validation (JSR-380) reference implementation."
  versionInfo: "6.0.9.Final"
- SPDXID: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final-vcs"
  copyrightText: "(c) 2011-2012 SERLI\nCopyright (c) 2004, 2006 The Linux Foundation\
    \ and its contributors\nCopyright 2009 IIZUKA Software Technologies Ltd"
  downloadLocation: "git+https://github.com/hibernate/hibernate-validator.git@a7d9a7cac86dc7c1cf24af98a391730f9e7b4fae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hibernate.validator/hibernate-validator@6.0.9.Final"
  filesAnalyzed: false
  homepage: "http://hibernate.org/validator/hibernate-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hibernate-validator"
  summary: "Hibernate's Bean Validation (JSR-380) reference implementation."
  versionInfo: "6.0.9.Final"
- SPDXID: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final-source-artifact"
  copyrightText: "(c) 2011-2012 SERLI\nCopyright (c) 2004, 2006 The Linux Foundation\
    \ and its contributors\nCopyright 2009 IIZUKA Software Technologies Ltd"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/hibernate/validator/hibernate-validator/6.0.9.Final/hibernate-validator-6.0.9.Final-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.hibernate.validator/hibernate-validator@6.0.9.Final"
  filesAnalyzed: false
  homepage: "http://hibernate.org/validator/hibernate-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hibernate-validator"
  summary: "Hibernate's Bean Validation (JSR-380) reference implementation."
  versionInfo: "6.0.9.Final"
- SPDXID: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA"
  copyrightText: "Copyright (c) 1999-2016 Shigeru Chiba\nCopyright (c) 2004 Bill Burke"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/javassist/javassist/3.21.0-GA/javassist-3.21.0-GA.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.javassist/javassist@3.21.0-GA"
  filesAnalyzed: false
  homepage: "http://www.javassist.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 OR LGPL-2.1-only OR MPL-1.1"
  name: "javassist"
  summary: "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation\n\
    \    simple.  It is a class library for editing bytecodes in Java."
  versionInfo: "3.21.0-GA"
- SPDXID: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA-vcs"
  copyrightText: "Copyright (c) 1999-2016 Shigeru Chiba\nCopyright (c) 2004 Bill Burke"
  downloadLocation: "git+ssh://github.com/jboss-javassist/javassist.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.javassist/javassist@3.21.0-GA"
  filesAnalyzed: false
  homepage: "http://www.javassist.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javassist"
  summary: "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation\n\
    \    simple.  It is a class library for editing bytecodes in Java."
  versionInfo: "3.21.0-GA"
- SPDXID: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA-source-artifact"
  copyrightText: "Copyright (c) 1999-2016 Shigeru Chiba\nCopyright (c) 2004 Bill Burke"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/javassist/javassist/3.21.0-GA/javassist-3.21.0-GA-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.javassist/javassist@3.21.0-GA"
  filesAnalyzed: false
  homepage: "http://www.javassist.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "javassist"
  summary: "Javassist (JAVA programming ASSISTant) makes Java bytecode manipulation\n\
    \    simple.  It is a class library for editing bytecodes in Java."
  versionInfo: "3.21.0-GA"
- SPDXID: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final"
  copyrightText: "Copyright (c) 2015 Red Hat, Inc.\nCopyright 2010-2011 Red Hat, Inc.,\
    \ and individual contributors\nCopyright 2010-2011, 2013, 2017 Red Hat, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/jboss/logging/jboss-logging/3.3.2.Final/jboss-logging-3.3.2.Final.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jboss.logging/jboss-logging@3.3.2.Final"
  filesAnalyzed: false
  homepage: "http://www.jboss.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jboss-logging"
  summary: "The JBoss Logging Framework"
  versionInfo: "3.3.2.Final"
- SPDXID: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final-vcs"
  copyrightText: "Copyright (c) 2015 Red Hat, Inc.\nCopyright 2010-2011 Red Hat, Inc.,\
    \ and individual contributors\nCopyright 2010-2011, 2013, 2017 Red Hat, Inc."
  downloadLocation: "git+https://github.com/jboss-logging/jboss-logging.git@526f45a6eff90ed3db7c0a0092f2c9cc987cb7cc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jboss.logging/jboss-logging@3.3.2.Final"
  filesAnalyzed: false
  homepage: "http://www.jboss.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jboss-logging"
  summary: "The JBoss Logging Framework"
  versionInfo: "3.3.2.Final"
- SPDXID: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final-source-artifact"
  copyrightText: "Copyright (c) 2015 Red Hat, Inc.\nCopyright 2010-2011 Red Hat, Inc.,\
    \ and individual contributors\nCopyright 2010-2011, 2013, 2017 Red Hat, Inc."
  downloadLocation: "https://repo.maven.apache.org/maven2/org/jboss/logging/jboss-logging/3.3.2.Final/jboss-logging-3.3.2.Final-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.jboss.logging/jboss-logging@3.3.2.Final"
  filesAnalyzed: false
  homepage: "http://www.jboss.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jboss-logging"
  summary: "The JBoss Logging Framework"
  versionInfo: "3.3.2.Final"
- SPDXID: "SPDXRef-Package-Maven-org.json-json-20140107"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/json/json/20140107/json-20140107.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.json/json@20140107"
  filesAnalyzed: false
  homepage: "https://github.com/douglascrockford/JSON-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "JSON"
  name: "json"
  summary: "JSON is a light-weight, language independent, data interchange format.\n\
    \t\tSee http://www.JSON.org/\n\n\t\tThe files in this package implement JSON encoders/decoders\
    \ in Java.\n\t\tIt also includes the capability to convert between JSON and XML,\
    \ HTTP\n\t\theaders, Cookies, and CDL.\n\n\t\tThis is a reference implementation.\
    \ There is a large number of JSON packages\n\t\tin Java. Perhaps someday the Java\
    \ community will standardize on one. Until\n\t\tthen, choose carefully.\n\n\t\t\
    The license includes this restriction: \"The software shall be used for good,\n\
    \t\tnot evil.\" If your conscience cannot live with that, then choose a different\n\
    \t\tpackage.\n\n\t\tThe package compiles on Java 1.2 thru Java 1.4."
  versionInfo: "20140107"
- SPDXID: "SPDXRef-Package-Maven-org.json-json-20140107-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/douglascrockford/JSON-java.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.json/json@20140107"
  filesAnalyzed: false
  homepage: "https://github.com/douglascrockford/JSON-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json"
  summary: "JSON is a light-weight, language independent, data interchange format.\n\
    \t\tSee http://www.JSON.org/\n\n\t\tThe files in this package implement JSON encoders/decoders\
    \ in Java.\n\t\tIt also includes the capability to convert between JSON and XML,\
    \ HTTP\n\t\theaders, Cookies, and CDL.\n\n\t\tThis is a reference implementation.\
    \ There is a large number of JSON packages\n\t\tin Java. Perhaps someday the Java\
    \ community will standardize on one. Until\n\t\tthen, choose carefully.\n\n\t\t\
    The license includes this restriction: \"The software shall be used for good,\n\
    \t\tnot evil.\" If your conscience cannot live with that, then choose a different\n\
    \t\tpackage.\n\n\t\tThe package compiles on Java 1.2 thru Java 1.4."
  versionInfo: "20140107"
- SPDXID: "SPDXRef-Package-Maven-org.json-json-20140107-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/json/json/20140107/json-20140107-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.json/json@20140107"
  filesAnalyzed: false
  homepage: "https://github.com/douglascrockford/JSON-java"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json"
  summary: "JSON is a light-weight, language independent, data interchange format.\n\
    \t\tSee http://www.JSON.org/\n\n\t\tThe files in this package implement JSON encoders/decoders\
    \ in Java.\n\t\tIt also includes the capability to convert between JSON and XML,\
    \ HTTP\n\t\theaders, Cookies, and CDL.\n\n\t\tThis is a reference implementation.\
    \ There is a large number of JSON packages\n\t\tin Java. Perhaps someday the Java\
    \ community will standardize on one. Until\n\t\tthen, choose carefully.\n\n\t\t\
    The license includes this restriction: \"The software shall be used for good,\n\
    \t\tnot evil.\" If your conscience cannot live with that, then choose a different\n\
    \t\tpackage.\n\n\t\tThe package compiles on Java 1.2 thru Java 1.4."
  versionInfo: "20140107"
- SPDXID: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final"
  copyrightText: "Copyright 2012-2017 Gunnar Morling (http://www.gunnarmorling.de/)\
    \ and/or other contributors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/mapstruct/mapstruct/1.2.0.Final/mapstruct-1.2.0.Final.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.mapstruct/mapstruct@1.2.0.Final"
  filesAnalyzed: false
  homepage: "http://mapstruct.org/mapstruct/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "mapstruct"
  summary: "An annotation processor for generating type-safe bean mappers"
  versionInfo: "1.2.0.Final"
- SPDXID: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final-vcs"
  copyrightText: "Copyright 2012-2017 Gunnar Morling (http://www.gunnarmorling.de/)\
    \ and/or other contributors"
  downloadLocation: "git+https://github.com/mapstruct/mapstruct.git@a2176493e75f894324afae5905eb535cd98f161a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.mapstruct/mapstruct@1.2.0.Final"
  filesAnalyzed: false
  homepage: "http://mapstruct.org/mapstruct/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mapstruct"
  summary: "An annotation processor for generating type-safe bean mappers"
  versionInfo: "1.2.0.Final"
- SPDXID: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final-source-artifact"
  copyrightText: "Copyright 2012-2017 Gunnar Morling (http://www.gunnarmorling.de/)\
    \ and/or other contributors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/mapstruct/mapstruct/1.2.0.Final/mapstruct-1.2.0.Final-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.mapstruct/mapstruct@1.2.0.Final"
  filesAnalyzed: false
  homepage: "http://mapstruct.org/mapstruct/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mapstruct"
  summary: "An annotation processor for generating type-safe bean mappers"
  versionInfo: "1.2.0.Final"
- SPDXID: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/openapitools/jackson-databind-nullable/0.1.0/jackson-databind-nullable-0.1.0.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.openapitools/jackson-databind-nullable@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/OpenAPITools/jackson-databind-nullable"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "jackson-databind-nullable"
  summary: "JsonNullable wrapper class and Jackson module to support fields with meaningful\
    \ null values."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/OpenAPITools/jackson-databind-nullable.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.openapitools/jackson-databind-nullable@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/OpenAPITools/jackson-databind-nullable"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind-nullable"
  summary: "JsonNullable wrapper class and Jackson module to support fields with meaningful\
    \ null values."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/openapitools/jackson-databind-nullable/0.1.0/jackson-databind-nullable-0.1.0-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.openapitools/jackson-databind-nullable@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/OpenAPITools/jackson-databind-nullable"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jackson-databind-nullable"
  summary: "JsonNullable wrapper class and Jackson module to support fields with meaningful\
    \ null values."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/reflections/reflections/0.9.11/reflections-0.9.11.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.reflections/reflections@0.9.11"
  filesAnalyzed: false
  homepage: "http://github.com/ronmamo/reflections"
  licenseConcluded: "MIT"
  licenseDeclared: "BSD-3-Clause AND WTFPL"
  name: "reflections"
  summary: "Reflections - a Java runtime metadata analysis"
  versionInfo: "0.9.11"
- SPDXID: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11-vcs"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>"
  downloadLocation: "git+https://github.com/ronmamo/reflections.git@c95609a4e83e1f3fc71e4b2fc58b17352a16eef7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.reflections/reflections@0.9.11"
  filesAnalyzed: false
  homepage: "http://github.com/ronmamo/reflections"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "reflections"
  summary: "Reflections - a Java runtime metadata analysis"
  versionInfo: "0.9.11"
- SPDXID: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11-source-artifact"
  copyrightText: "Copyright (c) 2004 Sam Hocevar <sam@hocevar.net>"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/reflections/reflections/0.9.11/reflections-0.9.11-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.reflections/reflections@0.9.11"
  filesAnalyzed: false
  homepage: "http://github.com/ronmamo/reflections"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "reflections"
  summary: "Reflections - a Java runtime metadata analysis"
  versionInfo: "0.9.11"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/jul-to-slf4j/1.7.25/jul-to-slf4j-1.7.25.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/jul-to-slf4j@1.7.25"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jul-to-slf4j"
  summary: "JUL to SLF4J bridge"
  versionInfo: "1.7.25"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25-vcs"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "git+ssh://github.com/qos-ch/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/jul-to-slf4j@1.7.25"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jul-to-slf4j"
  summary: "JUL to SLF4J bridge"
  versionInfo: "1.7.25"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25-source-artifact"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/jul-to-slf4j/1.7.25/jul-to-slf4j-1.7.25-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/jul-to-slf4j@1.7.25"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jul-to-slf4j"
  summary: "JUL to SLF4J bridge"
  versionInfo: "1.7.25"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.7/slf4j-api-1.7.7.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.7"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.7"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7-vcs"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "git+ssh://github.com/ceki/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.7"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.7"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7-source-artifact"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.7/slf4j-api-1.7.7-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.7"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.7"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.25/slf4j-api-1.7.25.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.25"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.25"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25-vcs"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "git+ssh://github.com/qos-ch/slf4j.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.25"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.25"
- SPDXID: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25-source-artifact"
  copyrightText: "Copyright (c) 2004-2011 QOS.ch"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/slf4j/slf4j-api/1.7.25/slf4j-api-1.7.25-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.slf4j/slf4j-api@1.7.25"
  filesAnalyzed: false
  homepage: "http://www.slf4j.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "slf4j-api"
  summary: "The slf4j API"
  versionInfo: "1.7.25"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-aop/5.0.5.RELEASE/spring-aop-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-aop@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-aop"
  summary: "Spring AOP"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-aop@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-aop"
  summary: "Spring AOP"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-aop/5.0.5.RELEASE/spring-aop-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-aop@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-aop"
  summary: "Spring AOP"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-beans/5.0.5.RELEASE/spring-beans-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-beans@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-beans"
  summary: "Spring Beans"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-beans@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-beans"
  summary: "Spring Beans"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-beans/5.0.5.RELEASE/spring-beans-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-beans@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-beans"
  summary: "Spring Beans"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-context/5.0.5.RELEASE/spring-context-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-context@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-context"
  summary: "Spring Context"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-context@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-context"
  summary: "Spring Context"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-context/5.0.5.RELEASE/spring-context-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-context@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-context"
  summary: "Spring Context"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE"
  copyrightText: "Copyright (c) 2000-2013 INRIA, France Telecom\nCopyright 2002-2018\
    \ the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-core/5.0.5.RELEASE/spring-core-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-core@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-core"
  summary: "Spring Core"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright (c) 2000-2013 INRIA, France Telecom\nCopyright 2002-2018\
    \ the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-core@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-core"
  summary: "Spring Core"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright (c) 2000-2013 INRIA, France Telecom\nCopyright 2002-2018\
    \ the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-core/5.0.5.RELEASE/spring-core-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-core@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-core"
  summary: "Spring Core"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-expression/5.0.5.RELEASE/spring-expression-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-expression@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-expression"
  summary: "Spring Expression Language (SpEL)"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-expression@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-expression"
  summary: "Spring Expression Language (SpEL)"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-expression/5.0.5.RELEASE/spring-expression-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-expression@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-expression"
  summary: "Spring Expression Language (SpEL)"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-jcl/5.0.5.RELEASE/spring-jcl-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-jcl@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-jcl"
  summary: "Spring Commons Logging Bridge"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-jcl@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-jcl"
  summary: "Spring Commons Logging Bridge"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-jcl/5.0.5.RELEASE/spring-jcl-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-jcl@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-jcl"
  summary: "Spring Commons Logging Bridge"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE"
  copyrightText: "Copyright 2002 201 the original author or authors\nCopyright 2002-2018\
    \ the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-web/5.0.5.RELEASE/spring-web-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-web@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-web"
  summary: "Spring Web"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002 201 the original author or authors\nCopyright 2002-2018\
    \ the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-web@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-web"
  summary: "Spring Web"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002 201 the original author or authors\nCopyright 2002-2018\
    \ the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-web/5.0.5.RELEASE/spring-web-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-web@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-web"
  summary: "Spring Web"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-webmvc/5.0.5.RELEASE/spring-webmvc-5.0.5.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-webmvc@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-webmvc"
  summary: "Spring Web MVC"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE-vcs"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-framework.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-webmvc@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-webmvc"
  summary: "Spring Web MVC"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE-source-artifact"
  copyrightText: "Copyright 2002-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/spring-webmvc/5.0.5.RELEASE/spring-webmvc-5.0.5.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework/spring-webmvc@5.0.5.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-framework"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-webmvc"
  summary: "Spring Web MVC"
  versionInfo: "5.0.5.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE"
  copyrightText: "Copyright 2012-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot/2.0.1.RELEASE/spring-boot-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot"
  summary: "Spring Boot"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE-vcs"
  copyrightText: "Copyright 2012-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot"
  summary: "Spring Boot"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE-source-artifact"
  copyrightText: "Copyright 2012-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot/2.0.1.RELEASE/spring-boot-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot"
  summary: "Spring Boot"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE"
  copyrightText: "Copyright 2012-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-autoconfigure/2.0.1.RELEASE/spring-boot-autoconfigure-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-autoconfigure"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot-autoconfigure"
  summary: "Spring Boot AutoConfigure"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE-vcs"
  copyrightText: "Copyright 2012-2018 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-autoconfigure"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-autoconfigure"
  summary: "Spring Boot AutoConfigure"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE-source-artifact"
  copyrightText: "Copyright 2012-2018 the original author or authors"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-autoconfigure/2.0.1.RELEASE/spring-boot-autoconfigure-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-autoconfigure@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-autoconfigure"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-autoconfigure"
  summary: "Spring Boot AutoConfigure"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter/2.0.1.RELEASE/spring-boot-starter-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot-starter"
  summary: "Core starter, including auto-configuration support, logging and YAML"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter"
  summary: "Core starter, including auto-configuration support, logging and YAML"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter/2.0.1.RELEASE/spring-boot-starter-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter"
  summary: "Core starter, including auto-configuration support, logging and YAML"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-json/2.0.1.RELEASE/spring-boot-starter-json-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot-starter-json"
  summary: "Starter for reading and writing json"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-json"
  summary: "Starter for reading and writing json"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-json/2.0.1.RELEASE/spring-boot-starter-json-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-json@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-json"
  summary: "Starter for reading and writing json"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-logging/2.0.1.RELEASE/spring-boot-starter-logging-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-logging"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot-starter-logging"
  summary: "Starter for logging using Logback. Default logging starter"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-logging"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-logging"
  summary: "Starter for logging using Logback. Default logging starter"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-logging/2.0.1.RELEASE/spring-boot-starter-logging-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-logging@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-logging"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-logging"
  summary: "Starter for logging using Logback. Default logging starter"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/2.0.1.RELEASE/spring-boot-starter-tomcat-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-tomcat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot-starter-tomcat"
  summary: "Starter for using Tomcat as the embedded servlet container. Default\n\t\
    \tservlet container starter used by spring-boot-starter-web"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-tomcat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-tomcat"
  summary: "Starter for using Tomcat as the embedded servlet container. Default\n\t\
    \tservlet container starter used by spring-boot-starter-web"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-tomcat/2.0.1.RELEASE/spring-boot-starter-tomcat-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-tomcat@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-tomcat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-tomcat"
  summary: "Starter for using Tomcat as the embedded servlet container. Default\n\t\
    \tservlet container starter used by spring-boot-starter-web"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-web/2.0.1.RELEASE/spring-boot-starter-web-2.0.1.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-web"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-boot-starter-web"
  summary: "Starter for building web, including RESTful, applications using Spring\n\
    \t\tMVC. Uses Tomcat as the default embedded container"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/spring-projects/spring-boot.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-web"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-web"
  summary: "Starter for building web, including RESTful, applications using Spring\n\
    \t\tMVC. Uses Tomcat as the default embedded container"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/springframework/boot/spring-boot-starter-web/2.0.1.RELEASE/spring-boot-starter-web-2.0.1.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.boot/spring-boot-starter-web@2.0.1.RELEASE"
  filesAnalyzed: false
  homepage: "https://projects.spring.io/spring-boot/#/spring-boot-parent/spring-boot-starters/spring-boot-starter-web"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-boot-starter-web"
  summary: "Starter for building web, including RESTful, applications using Spring\n\
    \t\tMVC. Uses Tomcat as the default embedded container"
  versionInfo: "2.0.1.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE"
  copyrightText: "Copyright 2008-2012, 2015 the original author or authors"
  downloadLocation: "https://repo.spring.io/libs-release/org/springframework/plugin/spring-plugin-core/1.2.0.RELEASE/spring-plugin-core-1.2.0.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.plugin/spring-plugin-core@1.2.0.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-plugin/spring-plugin-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-plugin-core"
  summary: "Core plugin infrastructure"
  versionInfo: "1.2.0.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE-vcs"
  copyrightText: "Copyright 2008-2012, 2015 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-plugin.git@ee53d9f3fad60c278fb21decf30f8c1bf86e7fd6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.plugin/spring-plugin-core@1.2.0.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-plugin/spring-plugin-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-plugin-core"
  summary: "Core plugin infrastructure"
  versionInfo: "1.2.0.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE-source-artifact"
  copyrightText: "Copyright 2008-2012, 2015 the original author or authors"
  downloadLocation: "https://repo.spring.io/libs-release/org/springframework/plugin/spring-plugin-core/1.2.0.RELEASE/spring-plugin-core-1.2.0.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.plugin/spring-plugin-core@1.2.0.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-plugin/spring-plugin-core"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-plugin-core"
  summary: "Core plugin infrastructure"
  versionInfo: "1.2.0.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE"
  copyrightText: "Copyright 2008-2012, 2015 the original author or authors"
  downloadLocation: "https://repo.spring.io/libs-release/org/springframework/plugin/spring-plugin-metadata/1.2.0.RELEASE/spring-plugin-metadata-1.2.0.RELEASE.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.plugin/spring-plugin-metadata@1.2.0.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-plugin/spring-plugin-metadata"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spring-plugin-metadata"
  summary: "Extension package for metadata based plugins"
  versionInfo: "1.2.0.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE-vcs"
  copyrightText: "Copyright 2008-2012, 2015 the original author or authors"
  downloadLocation: "git+https://github.com/spring-projects/spring-plugin.git@ee53d9f3fad60c278fb21decf30f8c1bf86e7fd6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.plugin/spring-plugin-metadata@1.2.0.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-plugin/spring-plugin-metadata"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-plugin-metadata"
  summary: "Extension package for metadata based plugins"
  versionInfo: "1.2.0.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE-source-artifact"
  copyrightText: "Copyright 2008-2012, 2015 the original author or authors"
  downloadLocation: "https://repo.spring.io/libs-release/org/springframework/plugin/spring-plugin-metadata/1.2.0.RELEASE/spring-plugin-metadata-1.2.0.RELEASE-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.springframework.plugin/spring-plugin-metadata@1.2.0.RELEASE"
  filesAnalyzed: false
  homepage: "https://github.com/spring-projects/spring-plugin/spring-plugin-metadata"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spring-plugin-metadata"
  summary: "Extension package for metadata based plugins"
  versionInfo: "1.2.0.RELEASE"
- SPDXID: "SPDXRef-Package-Maven-org.testng-testng-6.8.8"
  copyrightText: "Copyright (c) 2000, 2004 IBM Corporation and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/testng/testng/6.8.8/testng-6.8.8.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.testng/testng@6.8.8"
  filesAnalyzed: false
  homepage: "http://testng.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "testng"
  summary: "TestNG is a testing framework."
  versionInfo: "6.8.8"
- SPDXID: "SPDXRef-Package-Maven-org.testng-testng-6.8.8-vcs"
  copyrightText: "Copyright (c) 2000, 2004 IBM Corporation and others"
  downloadLocation: "git+ssh://github.com/cbeust/testng.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.testng/testng@6.8.8"
  filesAnalyzed: false
  homepage: "http://testng.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "testng"
  summary: "TestNG is a testing framework."
  versionInfo: "6.8.8"
- SPDXID: "SPDXRef-Package-Maven-org.testng-testng-6.8.8-source-artifact"
  copyrightText: "Copyright (c) 2000, 2004 IBM Corporation and others"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/testng/testng/6.8.8/testng-6.8.8-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.testng/testng@6.8.8"
  filesAnalyzed: false
  homepage: "http://testng.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "testng"
  summary: "TestNG is a testing framework."
  versionInfo: "6.8.8"
- SPDXID: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8"
  copyrightText: "Copyright (c) 2007 present Stephen Colebourne & Michael Nascimento\
    \ Santos"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/threeten/threetenbp/1.3.8/threetenbp-1.3.8.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.threeten/threetenbp@1.3.8"
  filesAnalyzed: false
  homepage: "https://www.threeten.org/threetenbp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "threetenbp"
  summary: "Backport of JSR-310 from JDK 8 to JDK 7 and JDK 6. NOT an implementation\
    \ of the JSR."
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8-vcs"
  copyrightText: "Copyright (c) 2007 present Stephen Colebourne & Michael Nascimento\
    \ Santos"
  downloadLocation: "git+https://github.com/ThreeTen/threetenbp.git@6af6ac378cf958aa5a058280225f9622c0e5fab4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.threeten/threetenbp@1.3.8"
  filesAnalyzed: false
  homepage: "https://www.threeten.org/threetenbp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "threetenbp"
  summary: "Backport of JSR-310 from JDK 8 to JDK 7 and JDK 6. NOT an implementation\
    \ of the JSR."
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8-source-artifact"
  copyrightText: "Copyright (c) 2007 present Stephen Colebourne & Michael Nascimento\
    \ Santos"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/threeten/threetenbp/1.3.8/threetenbp-1.3.8-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.threeten/threetenbp@1.3.8"
  filesAnalyzed: false
  homepage: "https://www.threeten.org/threetenbp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "threetenbp"
  summary: "Backport of JSR-310 from JDK 8 to JDK 7 and JDK 6. NOT an implementation\
    \ of the JSR."
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19"
  copyrightText: "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008 http://www.snakeyaml.org\n\
    Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/yaml/snakeyaml/1.19/snakeyaml-1.19.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.yaml/snakeyaml@1.19"
  filesAnalyzed: false
  homepage: "http://www.snakeyaml.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "snakeyaml"
  summary: "YAML 1.1 parser and emitter for Java"
  versionInfo: "1.19"
- SPDXID: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19-vcs"
  copyrightText: "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008 http://www.snakeyaml.org\n\
    Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland"
  downloadLocation: "hg+http://bitbucket.org/asomov/snakeyaml"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.yaml/snakeyaml@1.19"
  filesAnalyzed: false
  homepage: "http://www.snakeyaml.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "snakeyaml"
  summary: "YAML 1.1 parser and emitter for Java"
  versionInfo: "1.19"
- SPDXID: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19-source-artifact"
  copyrightText: "Copyright (c) 2008 Google Inc.\nCopyright (c) 2008 http://www.snakeyaml.org\n\
    Copyright 2003-2010 Christian d'Heureuse, Inventec Informatik AG, Zurich, Switzerland"
  downloadLocation: "https://repo.maven.apache.org/maven2/org/yaml/snakeyaml/1.19/snakeyaml-1.19-sources.jar"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:maven/org.yaml/snakeyaml@1.19"
  filesAnalyzed: false
  homepage: "http://www.snakeyaml.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "snakeyaml"
  summary: "YAML 1.1 parser and emitter for Java"
  versionInfo: "1.19"
- SPDXID: "SPDXRef-Package-NPM-agent-base-4.3.0"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/agent-base@4.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-agent-base#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "agent-base"
  summary: "Turn a function into an `http.Agent` instance"
  versionInfo: "4.3.0"
- SPDXID: "SPDXRef-Package-NPM-agent-base-4.3.0-vcs"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "git+https://github.com/TooTallNate/node-agent-base.git@560f111674af84dec46a4c3070ddf3b22edd3e76"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/agent-base@4.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-agent-base#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "agent-base"
  summary: "Turn a function into an `http.Agent` instance"
  versionInfo: "4.3.0"
- SPDXID: "SPDXRef-Package-NPM-agent-base-4.3.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "https://registry.npmjs.org/agent-base/-/agent-base-4.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/agent-base@4.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-agent-base#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "agent-base"
  summary: "Turn a function into an `http.Agent` instance"
  versionInfo: "4.3.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-colors-3.2.3"
  copyrightText: "Copyright (c) 2015 present, Brian Woodward\nCopyright (c) 2018 Brian\
    \ Woodward (https://github.com/doowb)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-colors@3.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/doowb/ansi-colors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-colors"
  summary: "Easily add ANSI colors to your text and symbols in the terminal. A faster\
    \ drop-in replacement for chalk, kleur and turbocolor (without the dependencies\
    \ and rendering bugs)."
  versionInfo: "3.2.3"
- SPDXID: "SPDXRef-Package-NPM-ansi-colors-3.2.3-vcs"
  copyrightText: "Copyright (c) 2015 present, Brian Woodward\nCopyright (c) 2018 Brian\
    \ Woodward (https://github.com/doowb)"
  downloadLocation: "git+https://github.com/doowb/ansi-colors.git@d2a3fcdcd6babdd8c9429fa9277a858e2fc97e3b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-colors@3.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/doowb/ansi-colors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-colors"
  summary: "Easily add ANSI colors to your text and symbols in the terminal. A faster\
    \ drop-in replacement for chalk, kleur and turbocolor (without the dependencies\
    \ and rendering bugs)."
  versionInfo: "3.2.3"
- SPDXID: "SPDXRef-Package-NPM-ansi-colors-3.2.3-source-artifact"
  copyrightText: "Copyright (c) 2015 present, Brian Woodward\nCopyright (c) 2018 Brian\
    \ Woodward (https://github.com/doowb)"
  downloadLocation: "https://registry.npmjs.org/ansi-colors/-/ansi-colors-3.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-colors@3.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/doowb/ansi-colors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-colors"
  summary: "Easily add ANSI colors to your text and symbols in the terminal. A faster\
    \ drop-in replacement for chalk, kleur and turbocolor (without the dependencies\
    \ and rendering bugs)."
  versionInfo: "3.2.3"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-3.0.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-regex.git@0a8cc19946c03c38520fe8c086b8adb66f9cce0b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-3.0.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-regex/-/ansi-regex-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-4.1.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-4.1.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-regex.git@a079ab2d30cfb752a3f247dcf358d0a591c288c5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-4.1.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-regex/-/ansi-regex-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-styles.git@de7527a86c1cf49906b0eb32a0de1402d849ccc2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-anymatch-3.1.1"
  copyrightText: "Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/anymatch@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/anymatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "anymatch"
  summary: "Matches strings against configurable strings, globs, regular expressions,\
    \ and/or functions"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-anymatch-3.1.1-vcs"
  copyrightText: "Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/micromatch/anymatch.git@e0ec3c077d6fd64753b0c9f149614f78c9d54285"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/anymatch@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/anymatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "anymatch"
  summary: "Matches strings against configurable strings, globs, regular expressions,\
    \ and/or functions"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-anymatch-3.1.1-source-artifact"
  copyrightText: "Copyright (c) 2019 Elan Shanker, Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/anymatch/-/anymatch-3.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/anymatch@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/anymatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "anymatch"
  summary: "Matches strings against configurable strings, globs, regular expressions,\
    \ and/or functions"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10-vcs"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/argparse.git@ea45e14bad13b9e4a10af28f11fb7e731079ab72"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10-source-artifact"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2018 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4-vcs"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2018 Joyent, Inc."
  downloadLocation: "git+https://github.com/joyent/node-asn1.git@a80f9f24f17a915a8b8634cb72cd55af3f724f6d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4-source-artifact"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2018 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/balanced-match.git@d701a549a7653a874eebce7eca25d3577dc868ac"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-base64-js-1.3.1"
  copyrightText: "Copyright (c) 2014 Jameson Little"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/base64-js@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/beatgammit/base64-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "base64-js"
  summary: "Base64 encoding/decoding in pure JS"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-base64-js-1.3.1-vcs"
  copyrightText: "Copyright (c) 2014 Jameson Little"
  downloadLocation: "git+https://github.com/beatgammit/base64-js.git@08a344d6ca13772acc42df2515312ceac75b5456"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/base64-js@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/beatgammit/base64-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "base64-js"
  summary: "Base64 encoding/decoding in pure JS"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-base64-js-1.3.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Jameson Little"
  downloadLocation: "https://registry.npmjs.org/base64-js/-/base64-js-1.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/base64-js@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/beatgammit/base64-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "base64-js"
  summary: "Base64 encoding/decoding in pure JS"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "git+https://github.com/joyent/node-bcrypt-pbkdf.git@15fa7399a1090ba70d855764f7ace23003bf45f3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/binary-extensions@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/binary-extensions#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "binary-extensions"
  summary: "List of binary file extensions"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-binary-extensions-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/sindresorhus/binary-extensions.git@11e076d96c41369015cc3c338428f7f456d3a92f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/binary-extensions@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/binary-extensions#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "binary-extensions"
  summary: "List of binary file extensions"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-binary-extensions-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/binary-extensions/-/binary-extensions-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/binary-extensions@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/binary-extensions#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "binary-extensions"
  summary: "List of binary file extensions"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-bl-4.0.2"
  copyrightText: "Copyright (c) 2013-2019 bl contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bl@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/bl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bl"
  summary: "Buffer List: collect buffers and access with a standard readable Buffer\
    \ interface, streamable too!"
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-bl-4.0.2-vcs"
  copyrightText: "Copyright (c) 2013-2019 bl contributors"
  downloadLocation: "git+https://github.com/rvagg/bl.git@5059a24564be3f123e1641d1f0da3109e7e2b632"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bl@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/bl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bl"
  summary: "Buffer List: collect buffers and access with a standard readable Buffer\
    \ interface, streamable too!"
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-bl-4.0.2-source-artifact"
  copyrightText: "Copyright (c) 2013-2019 bl contributors"
  downloadLocation: "https://registry.npmjs.org/bl/-/bl-4.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bl@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/bl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bl"
  summary: "Buffer List: collect buffers and access with a standard readable Buffer\
    \ interface, streamable too!"
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/brace-expansion.git@01a21de7441549d26ac0c0a9ff91385d16e5c21c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-braces-3.0.2"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/braces@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/braces"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "braces"
  summary: "Bash-like brace expansion, implemented in JavaScript. Safer than other\
    \ brace expansion libs, with complete support for the Bash 4.3 braces specification,\
    \ without sacrificing speed."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-braces-3.0.2-vcs"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/braces.git@25791512d219b284bd62bb068cae85d8e68bd05b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/braces@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/braces"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "braces"
  summary: "Bash-like brace expansion, implemented in JavaScript. Safer than other\
    \ brace expansion libs, with complete support for the Bash 4.3 braces specification,\
    \ without sacrificing speed."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-braces-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/braces/-/braces-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/braces@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/braces"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "braces"
  summary: "Bash-like brace expansion, implemented in JavaScript. Safer than other\
    \ brace expansion libs, with complete support for the Bash 4.3 braces specification,\
    \ without sacrificing speed."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-browser-stdout-1.3.1"
  copyrightText: "Copyright 2018 kumavis"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browser-stdout@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/kumavis/browser-stdout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "browser-stdout"
  summary: "`process.stdout` in your browser."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-browser-stdout-1.3.1-vcs"
  copyrightText: "Copyright 2018 kumavis"
  downloadLocation: "git+ssh://github.com/kumavis/browser-stdout.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browser-stdout@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/kumavis/browser-stdout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "browser-stdout"
  summary: "`process.stdout` in your browser."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-browser-stdout-1.3.1-source-artifact"
  copyrightText: "Copyright 2018 kumavis"
  downloadLocation: "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browser-stdout@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/kumavis/browser-stdout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "browser-stdout"
  summary: "`process.stdout` in your browser."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-buffer-5.5.0"
  copyrightText: "Copyright (c) Feross Aboukhadijeh (http://feross.org), and other\
    \ contributors\nCopyright (c) Feross Aboukhadijeh, and other contributors\nCopyright\
    \ Joyent, Inc. and other Node contributors\nCopyright Joyent, Inc. and other Node\
    \ contributors.var Buffer"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "buffer"
  summary: "Node.js Buffer API, for the browser"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-5.5.0-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh (http://feross.org), and other\
    \ contributors\nCopyright (c) Feross Aboukhadijeh, and other contributors\nCopyright\
    \ Joyent, Inc. and other Node contributors\nCopyright Joyent, Inc. and other Node\
    \ contributors.var Buffer"
  downloadLocation: "git+https://github.com/feross/buffer.git@b0a6de5f2131c3e339f14801bb342d16d580ac5f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer"
  summary: "Node.js Buffer API, for the browser"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-5.5.0-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh (http://feross.org), and other\
    \ contributors\nCopyright (c) Feross Aboukhadijeh, and other contributors\nCopyright\
    \ Joyent, Inc. and other Node contributors\nCopyright Joyent, Inc. and other Node\
    \ contributors.var Buffer"
  downloadLocation: "https://registry.npmjs.org/buffer/-/buffer-5.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer"
  summary: "Node.js Buffer API, for the browser"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.1"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.1-vcs"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "git+https://github.com/LinusU/buffer-from.git@53f464194ae30e806f6faef635202b4dfd404ed5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/builtin-modules@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/builtin-modules#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "builtin-modules"
  summary: "List of the Node.js builtin modules"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-builtin-modules-1.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/builtin-modules.git@0ea253452b1d8cb3a70d16464f909dbc0bc370fe"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/builtin-modules@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/builtin-modules#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "builtin-modules"
  summary: "List of the Node.js builtin modules"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-builtin-modules-1.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/builtin-modules/-/builtin-modules-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/builtin-modules@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/builtin-modules#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "builtin-modules"
  summary: "List of the Node.js builtin modules"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-5.3.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@5.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase:\
    \ `foo-bar` → `fooBar`"
  versionInfo: "5.3.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-5.3.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase.git@cbe5a519ec6745adbb5283d5ee8c5c9889050d74"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@5.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase:\
    \ `foo-bar` → `fooBar`"
  versionInfo: "5.3.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-5.3.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/camelcase/-/camelcase-5.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@5.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase or PascalCase:\
    \ `foo-bar` → `fooBar`"
  versionInfo: "5.3.1"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/chalk.git@9776a2ae5b5b1712ccf16416b55f47e575a81fb9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chokidar-3.3.0"
  copyrightText: "(c) Paul Miller <https://paulmillr.com>\nCopyright (c) 2012-2019\
    \ Paul Miller (https://paulmillr.com), Elan Shanker"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chokidar@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/chokidar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chokidar"
  summary: "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-chokidar-3.3.0-vcs"
  copyrightText: "(c) Paul Miller <https://paulmillr.com>\nCopyright (c) 2012-2019\
    \ Paul Miller (https://paulmillr.com), Elan Shanker"
  downloadLocation: "git+https://github.com/paulmillr/chokidar.git@ccf759aac9af8a484924aeacd1e1a5280f508a75"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chokidar@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/chokidar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chokidar"
  summary: "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-chokidar-3.3.0-source-artifact"
  copyrightText: "(c) Paul Miller <https://paulmillr.com>\nCopyright (c) 2012-2019\
    \ Paul Miller (https://paulmillr.com), Elan Shanker"
  downloadLocation: "https://registry.npmjs.org/chokidar/-/chokidar-3.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chokidar@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/chokidar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chokidar"
  summary: "A neat wrapper around node.js fs.watch / fs.watchFile / fsevents."
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-chownr-1.1.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chownr@1.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/chownr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "chownr"
  summary: "like `chown -R`"
  versionInfo: "1.1.4"
- SPDXID: "SPDXRef-Package-NPM-chownr-1.1.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/chownr.git@814f6422241dcc1bbb324fa29cd6d9f6dc2141ae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chownr@1.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/chownr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chownr"
  summary: "like `chown -R`"
  versionInfo: "1.1.4"
- SPDXID: "SPDXRef-Package-NPM-chownr-1.1.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/chownr/-/chownr-1.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chownr@1.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/chownr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chownr"
  summary: "like `chown -R`"
  versionInfo: "1.1.4"
- SPDXID: "SPDXRef-Package-NPM-circular-json-0.5.9"
  copyrightText: "Copyright (c) 2013-2017 by Andrea Giammarchi"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/circular-json@0.5.9"
  filesAnalyzed: false
  homepage: "https://github.com/WebReflection/circular-json"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "circular-json"
  summary: "JSON does not handle circular references. This version does"
  versionInfo: "0.5.9"
- SPDXID: "SPDXRef-Package-NPM-circular-json-0.5.9-vcs"
  copyrightText: "Copyright (c) 2013-2017 by Andrea Giammarchi"
  downloadLocation: "git+https://github.com/WebReflection/circular-json.git@ceab9c16070d3fc63f193bc10124eccb20424990"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/circular-json@0.5.9"
  filesAnalyzed: false
  homepage: "https://github.com/WebReflection/circular-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "circular-json"
  summary: "JSON does not handle circular references. This version does"
  versionInfo: "0.5.9"
- SPDXID: "SPDXRef-Package-NPM-circular-json-0.5.9-source-artifact"
  copyrightText: "Copyright (c) 2013-2017 by Andrea Giammarchi"
  downloadLocation: "https://registry.npmjs.org/circular-json/-/circular-json-0.5.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/circular-json@0.5.9"
  filesAnalyzed: false
  homepage: "https://github.com/WebReflection/circular-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "circular-json"
  summary: "JSON does not handle circular references. This version does"
  versionInfo: "0.5.9"
- SPDXID: "SPDXRef-Package-NPM-cliui-5.0.0"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cliui@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/cliui#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "cliui"
  summary: "easily create complex multi-column command-line-interfaces"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-cliui-5.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "git+ssh://github.com/yargs/cliui.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cliui@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/cliui#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cliui"
  summary: "easily create complex multi-column command-line-interfaces"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-cliui-5.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "https://registry.npmjs.org/cliui/-/cliui-5.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cliui@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/cliui#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cliui"
  summary: "easily create complex multi-column command-line-interfaces"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3-vcs"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "git+https://github.com/Qix-/color-convert.git@99dc5da127d3d17d0ff8d13a995fd2d6aab404aa"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3-source-artifact"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "git+ssh://github.com/dfcreative/color-name.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-commander-2.20.3"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.20.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.20.3"
- SPDXID: "SPDXRef-Package-NPM-commander-2.20.3-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/commander.js.git@6b8499b24f4f6498ad630c50c8a00c9579a8536b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.20.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.20.3"
- SPDXID: "SPDXRef-Package-NPM-commander-2.20.3-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/commander/-/commander-2.20.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.20.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.20.3"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/node-concat-map.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  copyrightText: "Copyright (c) 2013 Max Ogden"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-stream@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/maxogden/concat-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "concat-stream"
  summary: "writable stream that concatenates strings or binary data and calls a callback\
    \ with the result"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-concat-stream-2.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Max Ogden"
  downloadLocation: "git+ssh://github.com/maxogden/concat-stream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-stream@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/maxogden/concat-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-stream"
  summary: "writable stream that concatenates strings or binary data and calls a callback\
    \ with the result"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-concat-stream-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Max Ogden"
  downloadLocation: "https://registry.npmjs.org/concat-stream/-/concat-stream-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-stream@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/maxogden/concat-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-stream"
  summary: "writable stream that concatenates strings or binary data and calls a callback\
    \ with the result"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-copy-dir-1.2.0"
  copyrightText: "Copyright (c) 2016 Pillys"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/copy-dir@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillys/copy-dir"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "copy-dir"
  summary: "copy-dir"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-copy-dir-1.2.0-vcs"
  copyrightText: "Copyright (c) 2016 Pillys"
  downloadLocation: "git+https://github.com/pillys/copy-dir.git@e43950edccd07a8ad0bf391dafce43637aacdbe1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/copy-dir@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillys/copy-dir"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "copy-dir"
  summary: "copy-dir"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-copy-dir-1.2.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Pillys"
  downloadLocation: "https://registry.npmjs.org/copy-dir/-/copy-dir-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/copy-dir@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillys/copy-dir"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "copy-dir"
  summary: "copy-dir"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-debug-3.1.0"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-debug-3.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@f073e056f33efdd5b311381eb6bca2bc850745bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-debug-3.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-debug-3.2.6"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.2.6"
- SPDXID: "SPDXRef-Package-NPM-debug-3.2.6-vcs"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@a7a17c9955460435592de2a4d3c722e9b32047a8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.2.6"
- SPDXID: "SPDXRef-Package-NPM-debug-3.2.6-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-3.2.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.2.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.2.6"
- SPDXID: "SPDXRef-Package-NPM-debug-4.1.1"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-debug-4.1.1-vcs"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@68b4dc8d8549d3924673c38fccc5d594f0a38da1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-debug-4.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-4.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/decamelize.git@95980ab6fb44c40eaca7792bdf93aff7c210c805"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-define-properties-1.1.3"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/define-properties@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/define-properties#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "define-properties"
  summary: "Define multiple non-enumerable properties at once. Uses `Object.defineProperty`\
    \ when available; falls back to standard assignment in older engines."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-define-properties-1.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/define-properties.git@e5478e3d2880b90a97daa62d76abed34d91154dd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/define-properties@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/define-properties#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "define-properties"
  summary: "Define multiple non-enumerable properties at once. Uses `Object.defineProperty`\
    \ when available; falls back to standard assignment in older engines."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-define-properties-1.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/define-properties@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/define-properties#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "define-properties"
  summary: "Define multiple non-enumerable properties at once. Uses `Object.defineProperty`\
    \ when available; falls back to standard assignment in older engines."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-diff-3.5.0"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@3.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "3.5.0"
- SPDXID: "SPDXRef-Package-NPM-diff-3.5.0-vcs"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "git+https://github.com/kpdecker/jsdiff.git@e9ab94893a77f1f7d7ea8483b873083e6c6a390a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@3.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "3.5.0"
- SPDXID: "SPDXRef-Package-NPM-diff-3.5.0-source-artifact"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/diff/-/diff-3.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@3.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "3.5.0"
- SPDXID: "SPDXRef-Package-NPM-diff-4.0.2"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-diff-4.0.2-vcs"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "git+https://github.com/kpdecker/jsdiff.git@94b63ff1e152d5611d1571a13a3e06f1d723f4cd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-diff-4.0.2-source-artifact"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/diff/-/diff-4.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@4.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "4.0.2"
- SPDXID: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/docker-modem@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/apocas/docker-modem#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "docker-modem"
  summary: "Docker remote API network layer module."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-docker-modem-2.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/apocas/docker-modem.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/docker-modem@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/apocas/docker-modem#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "docker-modem"
  summary: "Docker remote API network layer module."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-docker-modem-2.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/docker-modem/-/docker-modem-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/docker-modem@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/apocas/docker-modem#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "docker-modem"
  summary: "Docker remote API network layer module."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-dockerode-3.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dockerode@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/apocas/dockerode#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "dockerode"
  summary: "Docker Remote API module."
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-dockerode-3.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/apocas/dockerode.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dockerode@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/apocas/dockerode#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dockerode"
  summary: "Docker Remote API module."
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-dockerode-3.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/dockerode/-/dockerode-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dockerode@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/apocas/dockerode#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dockerode"
  summary: "Docker Remote API module."
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-emoji-regex-7.0.3"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/emoji-regex@7.0.3"
  filesAnalyzed: false
  homepage: "https://mths.be/emoji-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "emoji-regex"
  summary: "A regular expression to match all Emoji-only symbols as per the Unicode\
    \ Standard."
  versionInfo: "7.0.3"
- SPDXID: "SPDXRef-Package-NPM-emoji-regex-7.0.3-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/mathiasbynens/emoji-regex.git@3cbaf44e18f4996464ce97f1484ef425bbe8864a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/emoji-regex@7.0.3"
  filesAnalyzed: false
  homepage: "https://mths.be/emoji-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "emoji-regex"
  summary: "A regular expression to match all Emoji-only symbols as per the Unicode\
    \ Standard."
  versionInfo: "7.0.3"
- SPDXID: "SPDXRef-Package-NPM-emoji-regex-7.0.3-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/emoji-regex/-/emoji-regex-7.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/emoji-regex@7.0.3"
  filesAnalyzed: false
  homepage: "https://mths.be/emoji-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "emoji-regex"
  summary: "A regular expression to match all Emoji-only symbols as per the Unicode\
    \ Standard."
  versionInfo: "7.0.3"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.4-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/end-of-stream.git@e104395e50015a6436d9747b4b1c2a617b267769"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.4-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  copyrightText: "(c) Object C\nCopyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es-abstract@1.17.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/es-abstract#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "es-abstract"
  summary: "ECMAScript spec abstract operations."
  versionInfo: "1.17.5"
- SPDXID: "SPDXRef-Package-NPM-es-abstract-1.17.5-vcs"
  copyrightText: "(c) Object C\nCopyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/es-abstract.git@3641bbb4196ad6bc31d443bd2fbdb81c61fb664e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es-abstract@1.17.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/es-abstract#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es-abstract"
  summary: "ECMAScript spec abstract operations."
  versionInfo: "1.17.5"
- SPDXID: "SPDXRef-Package-NPM-es-abstract-1.17.5-source-artifact"
  copyrightText: "(c) Object C\nCopyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/es-abstract/-/es-abstract-1.17.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es-abstract@1.17.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/es-abstract#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es-abstract"
  summary: "ECMAScript spec abstract operations."
  versionInfo: "1.17.5"
- SPDXID: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es-to-primitive@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/es-to-primitive#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "es-to-primitive"
  summary: "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-es-to-primitive-1.2.1-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/es-to-primitive.git@fc864b766689e70707a0b86a136b0ec0021e4d17"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es-to-primitive@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/es-to-primitive#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es-to-primitive"
  summary: "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-es-to-primitive-1.2.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/es-to-primitive/-/es-to-primitive-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es-to-primitive@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/es-to-primitive#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es-to-primitive"
  summary: "ECMAScript “ToPrimitive” algorithm. Provides ES5 and ES2015 versions."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-es6-promise-4.2.8"
  copyrightText: "Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es6-promise@4.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/stefanpenner/es6-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "es6-promise"
  summary: "A lightweight library that provides tools for organizing asynchronous\
    \ code"
  versionInfo: "4.2.8"
- SPDXID: "SPDXRef-Package-NPM-es6-promise-4.2.8-vcs"
  copyrightText: "Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors"
  downloadLocation: "git+https://github.com/stefanpenner/es6-promise.git@1e68dce6f674e5613f4a1797aedd55dc70ac1dcb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es6-promise@4.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/stefanpenner/es6-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es6-promise"
  summary: "A lightweight library that provides tools for organizing asynchronous\
    \ code"
  versionInfo: "4.2.8"
- SPDXID: "SPDXRef-Package-NPM-es6-promise-4.2.8-source-artifact"
  copyrightText: "Copyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner and contributors"
  downloadLocation: "https://registry.npmjs.org/es6-promise/-/es6-promise-4.2.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es6-promise@4.2.8"
  filesAnalyzed: false
  homepage: "https://github.com/stefanpenner/es6-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es6-promise"
  summary: "A lightweight library that provides tools for organizing asynchronous\
    \ code"
  versionInfo: "4.2.8"
- SPDXID: "SPDXRef-Package-NPM-es6-promisify-5.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es6-promisify@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/digitaldesignlabs/es6-promisify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "es6-promisify"
  summary: "Converts callback-based functions to ES6 Promises"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-es6-promisify-5.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/digitaldesignlabs/es6-promisify.git@7eb2f5e9ae858742d495978efebafaee6719da97"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es6-promisify@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/digitaldesignlabs/es6-promisify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es6-promisify"
  summary: "Converts callback-based functions to ES6 Promises"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-es6-promisify-5.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/es6-promisify/-/es6-promisify-5.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/es6-promisify@5.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/digitaldesignlabs/es6-promisify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "es6-promisify"
  summary: "Converts callback-based functions to ES6 Promises"
  versionInfo: "5.0.0"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/escape-string-regexp.git@db124a3e1aae9d692c4899e42a5c6c3e329eaa20"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-esprima-4.0.1"
  copyrightText: "(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2010-2014\
    \ Google, Inc. http://angularjs.org\n(c) 2011-2013 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors Backbone\n(c) 2016 r\nCopyright (c) 2005-2007\
    \ Sam Stephenson\nCopyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright\
    \ (c) 2006-2012 Valerio Proietti (http://mad4milk.net/)\nCopyright (c) 2010 Cowboy\
    \ Ben Alman\nCopyright 2005, 2010, 2012, 2014 jQuery Foundation, Inc. and other\
    \ contributors\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors\nCopyright 2013 Yahoo! Inc.\n\
    Copyright JS Foundation and other contributors, https://js.foundation\ncopyright\
    \ (c) 2012 Scott Jehl, Paul Irish, Nicholas Zakas\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@4.0.1"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-2-Clause"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-esprima-4.0.1-vcs"
  copyrightText: "(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2010-2014\
    \ Google, Inc. http://angularjs.org\n(c) 2011-2013 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors Backbone\n(c) 2016 r\nCopyright (c) 2005-2007\
    \ Sam Stephenson\nCopyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright\
    \ (c) 2006-2012 Valerio Proietti (http://mad4milk.net/)\nCopyright (c) 2010 Cowboy\
    \ Ben Alman\nCopyright 2005, 2010, 2012, 2014 jQuery Foundation, Inc. and other\
    \ contributors\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors\nCopyright 2013 Yahoo! Inc.\n\
    Copyright JS Foundation and other contributors, https://js.foundation\ncopyright\
    \ (c) 2012 Scott Jehl, Paul Irish, Nicholas Zakas\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "git+https://github.com/jquery/esprima.git@0ed4b8afdf2abd416f738977672c6232836f410a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@4.0.1"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-esprima-4.0.1-source-artifact"
  copyrightText: "(c) 2007-2008 Steven Levithan <http://stevenlevithan.com/regex/xregexp/>\n\
    (c) 2009-2013 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\
    \ Underscore\n(c) 2010-2011 Jeremy Ashkenas, DocumentCloud Inc.\n(c) 2010-2014\
    \ Google, Inc. http://angularjs.org\n(c) 2011-2013 Jeremy Ashkenas, DocumentCloud\
    \ and Investigative Reporters & Editors Backbone\n(c) 2016 r\nCopyright (c) 2005-2007\
    \ Sam Stephenson\nCopyright (c) 2006 Dean Edwards, GNU Lesser General\nCopyright\
    \ (c) 2006-2012 Valerio Proietti (http://mad4milk.net/)\nCopyright (c) 2010 Cowboy\
    \ Ben Alman\nCopyright 2005, 2010, 2012, 2014 jQuery Foundation, Inc. and other\
    \ contributors\nCopyright 2010-2012 Mathias Bynens <http://mths.be/>\nCopyright\
    \ 2012-2013 jQuery Foundation and other contributors\nCopyright 2013 Yahoo! Inc.\n\
    Copyright JS Foundation and other contributors, https://js.foundation\ncopyright\
    \ (c) 2012 Scott Jehl, Paul Irish, Nicholas Zakas\ncopyright Robert Kieffer <http://broofa.com/>"
  downloadLocation: "https://registry.npmjs.org/esprima/-/esprima-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/esprima@4.0.1"
  filesAnalyzed: false
  homepage: "http://esprima.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "esprima"
  summary: "ECMAScript parsing infrastructure for multipurpose analysis"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0"
  copyrightText: "(c) JS Foundation and other contributors\nCopyright (c) 2016 Daniel\
    \ Eden\nCopyright (c) 2017 Amit Kumar Gupta\nCopyright 2011-2017 The Bootstrap\
    \ Authors\nCopyright 2011-2017 Twitter, Inc.\nCopyright 2013 Timothy J Fontaine\
    \ <tjfontaine@gmail.com>\nCopyright 2013-2016 jquery-confirm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-xml-parser@3.13.0"
  filesAnalyzed: false
  homepage: "https://github.com/NaturalIntelligence/fast-xml-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fast-xml-parser"
  summary: "Validate XML or Parse XML to JS/JSON very fast without C/C++ based libraries"
  versionInfo: "3.13.0"
- SPDXID: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0-vcs"
  copyrightText: "(c) JS Foundation and other contributors\nCopyright (c) 2016 Daniel\
    \ Eden\nCopyright (c) 2017 Amit Kumar Gupta\nCopyright 2011-2017 The Bootstrap\
    \ Authors\nCopyright 2011-2017 Twitter, Inc.\nCopyright 2013 Timothy J Fontaine\
    \ <tjfontaine@gmail.com>\nCopyright 2013-2016 jquery-confirm"
  downloadLocation: "git+https://github.com/NaturalIntelligence/fast-xml-parser.git@306c514e8c7043e78238c6fecd929d6165fc4dcd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-xml-parser@3.13.0"
  filesAnalyzed: false
  homepage: "https://github.com/NaturalIntelligence/fast-xml-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-xml-parser"
  summary: "Validate XML or Parse XML to JS/JSON very fast without C/C++ based libraries"
  versionInfo: "3.13.0"
- SPDXID: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0-source-artifact"
  copyrightText: "(c) JS Foundation and other contributors\nCopyright (c) 2016 Daniel\
    \ Eden\nCopyright (c) 2017 Amit Kumar Gupta\nCopyright 2011-2017 The Bootstrap\
    \ Authors\nCopyright 2011-2017 Twitter, Inc.\nCopyright 2013 Timothy J Fontaine\
    \ <tjfontaine@gmail.com>\nCopyright 2013-2016 jquery-confirm"
  downloadLocation: "https://registry.npmjs.org/fast-xml-parser/-/fast-xml-parser-3.13.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-xml-parser@3.13.0"
  filesAnalyzed: false
  homepage: "https://github.com/NaturalIntelligence/fast-xml-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-xml-parser"
  summary: "Validate XML or Parse XML to JS/JSON very fast without C/C++ based libraries"
  versionInfo: "3.13.0"
- SPDXID: "SPDXRef-Package-NPM-fill-range-7.0.1"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fill-range@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/fill-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fill-range"
  summary: "Fill in a range of numbers or letters, optionally passing an increment\
    \ or `step` to use, or create a regex-compatible range with `options.toRegex`"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-fill-range-7.0.1-vcs"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/fill-range.git@39f421b499d5c97b62e955c179fa34c062aab2a5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fill-range@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/fill-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fill-range"
  summary: "Fill in a range of numbers or letters, optionally passing an increment\
    \ or `step` to use, or create a regex-compatible range with `options.toRegex`"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-fill-range-7.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/fill-range/-/fill-range-7.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fill-range@7.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/fill-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fill-range"
  summary: "Fill in a range of numbers or letters, optionally passing an increment\
    \ or `step` to use, or create a regex-compatible range with `options.toRegex`"
  versionInfo: "7.0.1"
- SPDXID: "SPDXRef-Package-NPM-find-up-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "find-up"
  summary: "Find a file or directory by walking up parent directories"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-find-up-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/find-up.git@2319b79a9e728fc13fc1a1a15e84bf5df100719e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "find-up"
  summary: "Find a file or directory by walking up parent directories"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-find-up-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/find-up/-/find-up-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "find-up"
  summary: "Find a file or directory by walking up parent directories"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-flat-4.1.0"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/flat@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/flat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "flat"
  summary: "Take a nested Javascript object and flatten it, or unflatten an object\
    \ with delimited keys"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-flat-4.1.0-vcs"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "git+https://github.com/hughsk/flat.git@32432ddde3f08c44cc9e9e4f01616cd3fbf355bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/flat@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/flat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "flat"
  summary: "Take a nested Javascript object and flatten it, or unflatten an object\
    \ with delimited keys"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-flat-4.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "https://registry.npmjs.org/flat/-/flat-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/flat@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/flat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "flat"
  summary: "Take a nested Javascript object and flatten it, or unflatten an object\
    \ with delimited keys"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-fs-constants-1.0.0"
  copyrightText: "Copyright (c) 2018 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-constants@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/fs-constants"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fs-constants"
  summary: "Require constants across node and the browser"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs-constants-1.0.0-vcs"
  copyrightText: "Copyright (c) 2018 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/fs-constants.git@3636fd76cf948ebfc143c1913af6d3c4450b1c46"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-constants@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/fs-constants"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs-constants"
  summary: "Require constants across node and the browser"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs-constants-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2018 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/fs-constants/-/fs-constants-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-constants@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/fs-constants"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs-constants"
  summary: "Require constants across node and the browser"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/isaacs/fs.realpath.git@03e7c884431fe185dfebbc9b771aeca339c1807a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "git+https://github.com/Raynos/function-bind.git@1213f807066d1cb8d39a0592d5118f4b1f03de4a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-get-caller-file-2.0.5"
  copyrightText: "Copyright 2018 Stefan Penner"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-caller-file@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/stefanpenner/get-caller-file#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "get-caller-file"
  summary: "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file)\
    \ [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.a"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-get-caller-file-2.0.5-vcs"
  copyrightText: "Copyright 2018 Stefan Penner"
  downloadLocation: "git+https://github.com/stefanpenner/get-caller-file.git@2383bf9e98ed3c568ff69d7586cf59c0f1dcb9d3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-caller-file@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/stefanpenner/get-caller-file#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-caller-file"
  summary: "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file)\
    \ [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.a"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-get-caller-file-2.0.5-source-artifact"
  copyrightText: "Copyright 2018 Stefan Penner"
  downloadLocation: "https://registry.npmjs.org/get-caller-file/-/get-caller-file-2.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-caller-file@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/stefanpenner/get-caller-file#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-caller-file"
  summary: "[![Build Status](https://travis-ci.org/stefanpenner/get-caller-file.svg?branch=master)](https://travis-ci.org/stefanpenner/get-caller-file)\
    \ [![Build status](https://ci.appveyor.com/api/projects/status/ol2q94g1932cy14a/branch/master?svg=true)](https://ci.a"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.3"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@8882c8fccabbe459465e73cc2581e121a5fdd25b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.3"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-7.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.3"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.6"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.6"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.6-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@f5a57d3d6e19b324522a3fa5bdd5075fd1aa79d1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.6"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.6-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-7.1.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.6"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-5.1.1"
  copyrightText: "Copyright (c) 2015, 2019 Elan Shanker"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@5.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-parent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "glob-parent"
  summary: "Extract the non-magic parent path from a glob string."
  versionInfo: "5.1.1"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-5.1.1-vcs"
  copyrightText: "Copyright (c) 2015, 2019 Elan Shanker"
  downloadLocation: "git+https://github.com/gulpjs/glob-parent.git@6ce8d11f2f1ed8e80a9526b1dc8cf3aa71f43474"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@5.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-parent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-parent"
  summary: "Extract the non-magic parent path from a glob string."
  versionInfo: "5.1.1"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-5.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015, 2019 Elan Shanker"
  downloadLocation: "https://registry.npmjs.org/glob-parent/-/glob-parent-5.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@5.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-parent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-parent"
  summary: "Extract the non-magic parent path from a glob string."
  versionInfo: "5.1.1"
- SPDXID: "SPDXRef-Package-NPM-growl-1.10.5"
  copyrightText: "Copyright (c) 2009 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2016 Joshua Boy Nicolai Appelman <joshua@jbna.nl>\nCopyright TJ Holowaychuk\
    \ <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/growl@1.10.5"
  filesAnalyzed: false
  homepage: "https://github.com/tj/node-growl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "growl"
  summary: "Growl unobtrusive notifications"
  versionInfo: "1.10.5"
- SPDXID: "SPDXRef-Package-NPM-growl-1.10.5-vcs"
  copyrightText: "Copyright (c) 2009 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2016 Joshua Boy Nicolai Appelman <joshua@jbna.nl>\nCopyright TJ Holowaychuk\
    \ <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/node-growl.git@95393c8da0d8bab06522a5eb36658a639c24a621"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/growl@1.10.5"
  filesAnalyzed: false
  homepage: "https://github.com/tj/node-growl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "growl"
  summary: "Growl unobtrusive notifications"
  versionInfo: "1.10.5"
- SPDXID: "SPDXRef-Package-NPM-growl-1.10.5-source-artifact"
  copyrightText: "Copyright (c) 2009 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2016 Joshua Boy Nicolai Appelman <joshua@jbna.nl>\nCopyright TJ Holowaychuk\
    \ <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/growl/-/growl-1.10.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/growl@1.10.5"
  filesAnalyzed: false
  homepage: "https://github.com/tj/node-growl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "growl"
  summary: "Growl unobtrusive notifications"
  versionInfo: "1.10.5"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-vcs"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "git+https://github.com/tarruda/has.git@4edf96f2dec87ad6b6e68482e8f6d7c8eb7e07e6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-flag.git@8b2ca7e693b2c742b29f2399194077b64b9ff781"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.1"
  copyrightText: "Copyright (c) 2016 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.1-vcs"
  copyrightText: "Copyright (c) 2016 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/has-symbols.git@132fe9ce5c2e443e0570606d4568a242eb86b5f5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2016 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-he-1.2.0"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/he@1.2.0"
  filesAnalyzed: false
  homepage: "https://mths.be/he"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "he"
  summary: "A robust HTML entities encoder/decoder with full Unicode support."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-he-1.2.0-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/mathiasbynens/he.git@36afe179392226cf1b6ccdb16ebbb7a5a844d93a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/he@1.2.0"
  filesAnalyzed: false
  homepage: "https://mths.be/he"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "he"
  summary: "A robust HTML entities encoder/decoder with full Unicode support."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-he-1.2.0-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/he/-/he-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/he@1.2.0"
  filesAnalyzed: false
  homepage: "https://mths.be/he"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "he"
  summary: "A robust HTML entities encoder/decoder with full Unicode support."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-proxy-agent@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-http-proxy-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "http-proxy-agent"
  summary: "An HTTP(s) proxy `http.Agent` implementation for HTTP"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0-vcs"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "git+https://github.com/TooTallNate/node-http-proxy-agent.git@65307ac8fe4e6ce1a2685d21ec4affa4c2a0a30d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-proxy-agent@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-http-proxy-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-proxy-agent"
  summary: "An HTTP(s) proxy `http.Agent` implementation for HTTP"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "https://registry.npmjs.org/http-proxy-agent/-/http-proxy-agent-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-proxy-agent@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-http-proxy-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-proxy-agent"
  summary: "An HTTP(s) proxy `http.Agent` implementation for HTTP"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/https-proxy-agent@2.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-https-proxy-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "https-proxy-agent"
  summary: "An HTTP(s) proxy `http.Agent` implementation for HTTPS"
  versionInfo: "2.2.4"
- SPDXID: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4-vcs"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "git+https://github.com/TooTallNate/node-https-proxy-agent.git@4c4cce8cb60fd3ac6171e4428f972698eb49f45a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/https-proxy-agent@2.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-https-proxy-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "https-proxy-agent"
  summary: "An HTTP(s) proxy `http.Agent` implementation for HTTPS"
  versionInfo: "2.2.4"
- SPDXID: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4-source-artifact"
  copyrightText: "Copyright (c) 2013 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "https://registry.npmjs.org/https-proxy-agent/-/https-proxy-agent-2.2.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/https-proxy-agent@2.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/node-https-proxy-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "https-proxy-agent"
  summary: "An HTTP(s) proxy `http.Agent` implementation for HTTPS"
  versionInfo: "2.2.4"
- SPDXID: "SPDXRef-Package-NPM-ieee754-1.1.13"
  copyrightText: "Copyright (c) 2008 Fair Oaks Labs, Inc.\nCopyright 2008 Fair Oaks\
    \ Labs, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ieee754@1.1.13"
  filesAnalyzed: false
  homepage: "https://github.com/feross/ieee754#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "ieee754"
  summary: "Read/write IEEE754 floating point numbers from/to a Buffer or array-like\
    \ object"
  versionInfo: "1.1.13"
- SPDXID: "SPDXRef-Package-NPM-ieee754-1.1.13-vcs"
  copyrightText: "Copyright (c) 2008 Fair Oaks Labs, Inc.\nCopyright 2008 Fair Oaks\
    \ Labs, Inc."
  downloadLocation: "git+https://github.com/feross/ieee754.git@4971f0e802c2cbdfad7791bd223c53e37b4ebb85"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ieee754@1.1.13"
  filesAnalyzed: false
  homepage: "https://github.com/feross/ieee754#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ieee754"
  summary: "Read/write IEEE754 floating point numbers from/to a Buffer or array-like\
    \ object"
  versionInfo: "1.1.13"
- SPDXID: "SPDXRef-Package-NPM-ieee754-1.1.13-source-artifact"
  copyrightText: "Copyright (c) 2008 Fair Oaks Labs, Inc.\nCopyright 2008 Fair Oaks\
    \ Labs, Inc."
  downloadLocation: "https://registry.npmjs.org/ieee754/-/ieee754-1.1.13.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ieee754@1.1.13"
  filesAnalyzed: false
  homepage: "https://github.com/feross/ieee754#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ieee754"
  summary: "Read/write IEEE754 floating point numbers from/to a Buffer or array-like\
    \ object"
  versionInfo: "1.1.13"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/inflight.git@a547881738c8f57b27795e584071d67cf6ac1a57"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/inherits.git@e05d0fb27c61a3ec687214f0476386b765364d5f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/inherits.git@9a2c29400c6d491e0b7beefe0c32efa3b462545d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-binary-path@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-binary-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-binary-path"
  summary: "Check if a file path is a binary file"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-binary-path-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-binary-path.git@efe99d8b3d0ef825925e8b986d047e39bee173c3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-binary-path@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-binary-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-binary-path"
  summary: "Check if a file path is a binary file"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-binary-path-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com), Paul Miller (https://paulmillr.com)\n\
    Copyright (c) 2019 Sindre Sorhus <sindresorhus@gmail.com> (https://sindresorhus.com),\
    \ Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/is-binary-path/-/is-binary-path-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-binary-path@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-binary-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-binary-path"
  summary: "Check if a file path is a binary file"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-2.0.4"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-2.0.4-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/is-buffer.git@65d2f6ba6c4e336be90c3cb6a656a69ce8f24210"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-2.0.4-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/is-buffer/-/is-buffer-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-is-callable-1.1.5"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-callable@1.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-callable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-callable"
  summary: "Is this JS value callable? Works with Functions and GeneratorFunctions,\
    \ despite ES6 @@toStringTag."
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-NPM-is-callable-1.1.5-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/is-callable.git@d7faa7acdf76c41851e6b05b1c77bd5a3dde01f4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-callable@1.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-callable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-callable"
  summary: "Is this JS value callable? Works with Functions and GeneratorFunctions,\
    \ despite ES6 @@toStringTag."
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-NPM-is-callable-1.1.5-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/is-callable/-/is-callable-1.1.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-callable@1.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-callable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-callable"
  summary: "Is this JS value callable? Works with Functions and GeneratorFunctions,\
    \ despite ES6 @@toStringTag."
  versionInfo: "1.1.5"
- SPDXID: "SPDXRef-Package-NPM-is-date-object-1.0.2"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-date-object@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-date-object#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-date-object"
  summary: "Is this value a JS Date object? This module works cross-realm/iframe,\
    \ and despite ES6 @@toStringTag."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-date-object-1.0.2-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/is-date-object.git@e7e895d71f6820547627ce21a719632c17f3700f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-date-object@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-date-object#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-date-object"
  summary: "Is this value a JS Date object? This module works cross-realm/iframe,\
    \ and despite ES6 @@toStringTag."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-date-object-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/is-date-object/-/is-date-object-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-date-object@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-date-object#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-date-object"
  summary: "Is this value a JS Date object? This module works cross-realm/iframe,\
    \ and despite ES6 @@toStringTag."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1-vcs"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-extglob.git@10a74787acbe79abf02141c5d487950d1b197b15"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-fullwidth-code-point@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-fullwidth-code-point"
  summary: "Check if the character represented by a given Unicode code point is fullwidth"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-fullwidth-code-point.git@e94a78056056c5546f2bf4c4cf812a2163a46dae"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-fullwidth-code-point@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-fullwidth-code-point"
  summary: "Check if the character represented by a given Unicode code point is fullwidth"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-fullwidth-code-point/-/is-fullwidth-code-point-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-fullwidth-code-point@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-fullwidth-code-point#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-fullwidth-code-point"
  summary: "Check if the character represented by a given Unicode code point is fullwidth"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-glob-4.0.1"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-glob-4.0.1-vcs"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/is-glob.git@4ac6a0cb019fa39141457946c2d455f281f73659"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-glob-4.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2019 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-glob/-/is-glob-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-number-7.0.0"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2018\
    \ Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-number@7.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-number"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-number"
  summary: "Returns true if a number or string value is a finite number. Useful for\
    \ regex matches, parsing, user input, etc."
  versionInfo: "7.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-number-7.0.0-vcs"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2018\
    \ Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-number.git@98e8ff1da1a89f93d1397a24d7413ed15421c139"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-number@7.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-number"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-number"
  summary: "Returns true if a number or string value is a finite number. Useful for\
    \ regex matches, parsing, user input, etc."
  versionInfo: "7.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-number-7.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 present, Jon Schlinkert\nCopyright (c) 2014-2018\
    \ Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-number/-/is-number-7.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-number@7.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-number"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-number"
  summary: "Returns true if a number or string value is a finite number. Useful for\
    \ regex matches, parsing, user input, etc."
  versionInfo: "7.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-regex-1.0.5"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-regex@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-regex"
  summary: "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-is-regex-1.0.5-vcs"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/is-regex.git@840278ad33eb09c12a47d819b86274287b3144d5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-regex@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-regex"
  summary: "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-is-regex-1.0.5-source-artifact"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/is-regex/-/is-regex-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-regex@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/is-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-regex"
  summary: "Is this value a JS regex? Works cross-realm/iframe, and despite ES6 @@toStringTag"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-is-symbol-1.0.3"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-symbol@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/is-symbol#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-symbol"
  summary: "Determine if a value is an ES6 Symbol or not."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-is-symbol-1.0.3-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/inspect-js/is-symbol.git@f42e0be5f676e6c82c83c9cad70f1fbb3b81c8ca"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-symbol@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/is-symbol#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-symbol"
  summary: "Determine if a value is an ES6 Symbol or not."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-is-symbol-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/is-symbol/-/is-symbol-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-symbol@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/is-symbol#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-symbol"
  summary: "Determine if a value is an ES6 Symbol or not."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-isexe-2.0.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isexe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/isexe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "isexe"
  summary: "Minimal module to check if a file is executable."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-isexe-2.0.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/isexe.git@10f8be491aab2e158c7e20df64a7f90ab5b5475c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isexe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/isexe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isexe"
  summary: "Minimal module to check if a file is executable."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-isexe-2.0.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/isexe/-/isexe-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isexe@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/isexe#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isexe"
  summary: "Minimal module to check if a file is executable."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-tokens-4.0.0"
  copyrightText: "Copyright (c) 2014-2018 Simon Lydell\nCopyright 2014-2018 Simon\
    \ Lydell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-tokens@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lydell/js-tokens#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "js-tokens"
  summary: "A regex that tokenizes JavaScript."
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-tokens-4.0.0-vcs"
  copyrightText: "Copyright (c) 2014-2018 Simon Lydell\nCopyright 2014-2018 Simon\
    \ Lydell"
  downloadLocation: "git+https://github.com/lydell/js-tokens.git@0eb6e9daee32160ab0fca979b6dc91a1991b720c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-tokens@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lydell/js-tokens#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-tokens"
  summary: "A regex that tokenizes JavaScript."
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-tokens-4.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2018 Simon Lydell\nCopyright 2014-2018 Simon\
    \ Lydell"
  downloadLocation: "https://registry.npmjs.org/js-tokens/-/js-tokens-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-tokens@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/lydell/js-tokens#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-tokens"
  summary: "A regex that tokenizes JavaScript."
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011-2015 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@3.13.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "3.13.1"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-3.13.1-vcs"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011-2015 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/js-yaml.git@665aadda42349dcae869f12040d9b10ef18d12da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@3.13.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "3.13.1"
- SPDXID: "SPDXRef-Package-NPM-js-yaml-3.13.1-source-artifact"
  copyrightText: "Copyright (c) 2011 Aleksey V Zapparov\nCopyright (c) 2011 Vitaly\
    \ Puzrin\nCopyright (c) 2011-2015 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/js-yaml/-/js-yaml-3.13.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/js-yaml@3.13.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/js-yaml"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "js-yaml"
  summary: "YAML 1.2 parser and serializer"
  versionInfo: "3.13.1"
- SPDXID: "SPDXRef-Package-NPM-locate-path-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/locate-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/locate-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "locate-path"
  summary: "Get the first path that exists on disk of multiple paths"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-locate-path-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/locate-path.git@d6f19ffa31544161ee94118963deb3b683418151"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/locate-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/locate-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "locate-path"
  summary: "Get the first path that exists on disk of multiple paths"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-locate-path-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/locate-path/-/locate-path-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/locate-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/locate-path#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "locate-path"
  summary: "Get the first path that exists on disk of multiple paths"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.19"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.19"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.19"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.19-vcs"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@d7fbc52ee0466a6d248f047b5d5c3e6d1e099056"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.19"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.19"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.19-source-artifact"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright OpenJS Foundation and other contributors <https://openjsf.org/>\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-4.17.19.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.19"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.19"
- SPDXID: "SPDXRef-Package-NPM-log-symbols-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/log-symbols@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/log-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "log-symbols"
  summary: "Colored symbols for various log levels. Example: `✔︎ Success`"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-log-symbols-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/log-symbols.git@1f4ac6ef31cb4c7c4c4c67b7d6f9db712d4c0186"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/log-symbols@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/log-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log-symbols"
  summary: "Colored symbols for various log levels. Example: `✔︎ Success`"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-log-symbols-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/log-symbols/-/log-symbols-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/log-symbols@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/log-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "log-symbols"
  summary: "Colored symbols for various log levels. Example: `✔︎ Success`"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/minimatch.git@e46989a323d5f0aa4781eff5e2e6e7aafa223321"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/minimist.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/minimist/-/minimist-1.2.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.3-vcs"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "git+https://github.com/substack/node-mkdirp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.3-source-artifact"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.3"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.3"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.4"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.4-vcs"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "git+https://github.com/substack/node-mkdirp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.4-source-artifact"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-mocha-7.1.1"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2011-2020 OpenJS Foundation and contributors, https://openjsf.org\nCopyright\
    \ 2011-2020 OpenJS Foundation and contributors\nCopyright https://openjsf.org\
    \ rel external noopener OpenJS Foundation\ncopyright 2016-2018 JS Foundation (https://js.foundation)\
    \ and contributors\ncopyright year ( josephlin55555 (https://github.com/josephlin55555))"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mocha@7.1.1"
  filesAnalyzed: false
  homepage: "https://mochajs.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mocha"
  summary: "simple, flexible, fun test framework"
  versionInfo: "7.1.1"
- SPDXID: "SPDXRef-Package-NPM-mocha-7.1.1-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2011-2020 OpenJS Foundation and contributors, https://openjsf.org\nCopyright\
    \ 2011-2020 OpenJS Foundation and contributors\nCopyright https://openjsf.org\
    \ rel external noopener OpenJS Foundation\ncopyright 2016-2018 JS Foundation (https://js.foundation)\
    \ and contributors\ncopyright year ( josephlin55555 (https://github.com/josephlin55555))"
  downloadLocation: "git+https://github.com/mochajs/mocha.git@7c09e634267ddc18d1ec08a4bfd999efa317d684"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mocha@7.1.1"
  filesAnalyzed: false
  homepage: "https://mochajs.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mocha"
  summary: "simple, flexible, fun test framework"
  versionInfo: "7.1.1"
- SPDXID: "SPDXRef-Package-NPM-mocha-7.1.1-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2011-2020 OpenJS Foundation and contributors, https://openjsf.org\nCopyright\
    \ 2011-2020 OpenJS Foundation and contributors\nCopyright https://openjsf.org\
    \ rel external noopener OpenJS Foundation\ncopyright 2016-2018 JS Foundation (https://js.foundation)\
    \ and contributors\ncopyright year ( josephlin55555 (https://github.com/josephlin55555))"
  downloadLocation: "https://registry.npmjs.org/mocha/-/mocha-7.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mocha@7.1.1"
  filesAnalyzed: false
  homepage: "https://mochajs.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mocha"
  summary: "simple, flexible, fun test framework"
  versionInfo: "7.1.1"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@9b88d1568a52ec9bb67ecc8d2aa224fa38fd41f4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.1"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.1-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@fe0bae301a6c41f68a01595658a4f4f0dcba0e84"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ncp-2.0.0"
  copyrightText: "Copyright (c) 2011 by Charlie McConnell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ncp@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/AvianFlu/ncp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ncp"
  summary: "Asynchronous recursive file copy utility."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ncp-2.0.0-vcs"
  copyrightText: "Copyright (c) 2011 by Charlie McConnell"
  downloadLocation: "git+https://github.com/AvianFlu/ncp.git@93c7c6c719e2a4944dc09a16178b09aef428cdf0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ncp@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/AvianFlu/ncp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ncp"
  summary: "Asynchronous recursive file copy utility."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ncp-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2011 by Charlie McConnell"
  downloadLocation: "https://registry.npmjs.org/ncp/-/ncp-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ncp@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/AvianFlu/ncp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ncp"
  summary: "Asynchronous recursive file copy utility."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-node-environment-flags-1.0.6"
  copyrightText: "Copyright (c) 2018 Christopher Hiller"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/node-environment-flags@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/boneskull/node-environment-flags#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "node-environment-flags"
  summary: "> Polyfill/shim for `process.allowedNodeEnvironmentFlags`"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-node-environment-flags-1.0.6-vcs"
  copyrightText: "Copyright (c) 2018 Christopher Hiller"
  downloadLocation: "git+https://github.com/boneskull/node-environment-flags.git@fbf451941e4721392c7c346de843514d7ad14a95"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/node-environment-flags@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/boneskull/node-environment-flags#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node-environment-flags"
  summary: "> Polyfill/shim for `process.allowedNodeEnvironmentFlags`"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-node-environment-flags-1.0.6-source-artifact"
  copyrightText: "Copyright (c) 2018 Christopher Hiller"
  downloadLocation: "https://registry.npmjs.org/node-environment-flags/-/node-environment-flags-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/node-environment-flags@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/boneskull/node-environment-flags#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node-environment-flags"
  summary: "> Polyfill/shim for `process.allowedNodeEnvironmentFlags`"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-3.0.0"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "normalize-path"
  summary: "Normalize slashes in a file path to be posix/unix-like forward slashes.\
    \ Also condenses repeat slashes to a single slash and removes and trailing slashes,\
    \ unless disabled."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-3.0.0-vcs"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/normalize-path.git@0979eb807a1725d83d5a996347d41067cf773d1f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-path"
  summary: "Normalize slashes in a file path to be posix/unix-like forward slashes.\
    \ Also condenses repeat slashes to a single slash and removes and trailing slashes,\
    \ unless disabled."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/normalize-path/-/normalize-path-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-path"
  summary: "Normalize slashes in a file path to be posix/unix-like forward slashes.\
    \ Also condenses repeat slashes to a single slash and removes and trailing slashes,\
    \ unless disabled."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-object-inspect-1.7.0"
  copyrightText: "Copyright (c) 2013 James Halliday"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-inspect@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/object-inspect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object-inspect"
  summary: "string representations of objects in node and the browser"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-object-inspect-1.7.0-vcs"
  copyrightText: "Copyright (c) 2013 James Halliday"
  downloadLocation: "git+https://github.com/substack/object-inspect.git@7dd1224072239f08bd5dbb82ae5e7120d88ac562"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-inspect@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/object-inspect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-inspect"
  summary: "string representations of objects in node and the browser"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-object-inspect-1.7.0-source-artifact"
  copyrightText: "Copyright (c) 2013 James Halliday"
  downloadLocation: "https://registry.npmjs.org/object-inspect/-/object-inspect-1.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-inspect@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/object-inspect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-inspect"
  summary: "string representations of objects in node and the browser"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-object-keys-1.1.1"
  copyrightText: "Copyright (c) 2013 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-keys@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object-keys"
  summary: "An Object.keys replacement, in case Object.keys is not available. From\
    \ https://github.com/es-shims/es5-shim"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-object-keys-1.1.1-vcs"
  copyrightText: "Copyright (c) 2013 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/object-keys.git@ba2c1989270c7de969aa8498fc3b7c8e677806f3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-keys@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-keys"
  summary: "An Object.keys replacement, in case Object.keys is not available. From\
    \ https://github.com/es-shims/es5-shim"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-object-keys-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/object-keys/-/object-keys-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-keys@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-keys"
  summary: "An Object.keys replacement, in case Object.keys is not available. From\
    \ https://github.com/es-shims/es5-shim"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-object.assign-4.1.0"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.assign@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object.assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object.assign"
  summary: "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.assign-4.1.0-vcs"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/object.assign.git@5fd74aee40aba36e9a8eb0c329abd33a07b93164"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.assign@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object.assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object.assign"
  summary: "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.assign-4.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.assign@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object.assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object.assign"
  summary: "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.getownpropertydescriptors@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/object.getownpropertydescriptors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object.getownpropertydescriptors"
  summary: "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that\
    \ works in ES5."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/es-shims/object.getownpropertydescriptors.git@cbe9a13b3e153d4f16c7c2002904dc4dee9f26d4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.getownpropertydescriptors@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/object.getownpropertydescriptors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object.getownpropertydescriptors"
  summary: "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that\
    \ works in ES5."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/object.getownpropertydescriptors/-/object.getownpropertydescriptors-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.getownpropertydescriptors@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/object.getownpropertydescriptors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object.getownpropertydescriptors"
  summary: "ES2017 spec-compliant shim for `Object.getOwnPropertyDescriptors` that\
    \ works in ES5."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/once.git@0e614d9f5a7e6f0305c625f6b581f6d80b33b8a6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-p-limit-2.2.2"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-limit@2.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-limit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-limit"
  summary: "Run multiple promise-returning & async functions with limited concurrency"
  versionInfo: "2.2.2"
- SPDXID: "SPDXRef-Package-NPM-p-limit-2.2.2-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-limit.git@6d7a2253a33248572aa87a56bc4af9e3fe247232"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-limit@2.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-limit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-limit"
  summary: "Run multiple promise-returning & async functions with limited concurrency"
  versionInfo: "2.2.2"
- SPDXID: "SPDXRef-Package-NPM-p-limit-2.2.2-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-limit/-/p-limit-2.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-limit@2.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-limit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-limit"
  summary: "Run multiple promise-returning & async functions with limited concurrency"
  versionInfo: "2.2.2"
- SPDXID: "SPDXRef-Package-NPM-p-locate-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-locate@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-locate#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-locate"
  summary: "Get the first fulfilled promise that satisfies the provided testing function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-locate-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-locate.git@d37f108c0b04779e307b4e7203981caa367bac57"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-locate@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-locate#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-locate"
  summary: "Get the first fulfilled promise that satisfies the provided testing function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-locate-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-locate/-/p-locate-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-locate@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-locate#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-locate"
  summary: "Get the first fulfilled promise that satisfies the provided testing function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-p-try-2.2.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-try@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-try#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "p-try"
  summary: "`Start a promise chain"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-p-try-2.2.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/p-try.git@e80e2e130b2d16807345be02aa03541e6e085952"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-try@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-try#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-try"
  summary: "`Start a promise chain"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-p-try-2.2.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/p-try/-/p-try-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/p-try@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/p-try#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "p-try"
  summary: "`Start a promise chain"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-exists.git@4696c60a8b2b9ac61902aa9eab7cb326ab6005c8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-exists/-/path-exists-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-is-absolute.git@edc91d348b21dac2ab65ea2fbec2868e2eff5eb6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6-vcs"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "git+https://github.com/jbgutierrez/path-parse.git@97efc90ce24455d23ec6acedf47589df46e48ea0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6-source-artifact"
  copyrightText: "(c) Javier Blanco (http://jbgutierrez.info)\nCopyright (c) 2015\
    \ Javier Blanco"
  downloadLocation: "https://registry.npmjs.org/path-parse/-/path-parse-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-picomatch-2.2.2"
  copyrightText: "Copyright (c) 2017 present, Jon Schlinkert\nCopyright (c) 2017 present,\
    \ Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/picomatch@2.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/picomatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "picomatch"
  summary: "Blazing fast and accurate glob matcher written in JavaScript, with no\
    \ dependencies and full support for standard and extended Bash glob features,\
    \ including braces, extglobs, POSIX brackets, and regular expressions."
  versionInfo: "2.2.2"
- SPDXID: "SPDXRef-Package-NPM-picomatch-2.2.2-vcs"
  copyrightText: "Copyright (c) 2017 present, Jon Schlinkert\nCopyright (c) 2017 present,\
    \ Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/picomatch.git@aed790f037736f5c760f7b120935714d21503fe9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/picomatch@2.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/picomatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "picomatch"
  summary: "Blazing fast and accurate glob matcher written in JavaScript, with no\
    \ dependencies and full support for standard and extended Bash glob features,\
    \ including braces, extglobs, POSIX brackets, and regular expressions."
  versionInfo: "2.2.2"
- SPDXID: "SPDXRef-Package-NPM-picomatch-2.2.2-source-artifact"
  copyrightText: "Copyright (c) 2017 present, Jon Schlinkert\nCopyright (c) 2017 present,\
    \ Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/picomatch/-/picomatch-2.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/picomatch@2.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/picomatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "picomatch"
  summary: "Blazing fast and accurate glob matcher written in JavaScript, with no\
    \ dependencies and full support for standard and extended Bash glob features,\
    \ including braces, extglobs, POSIX brackets, and regular expressions."
  versionInfo: "2.2.2"
- SPDXID: "SPDXRef-Package-NPM-pump-3.0.0"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-pump-3.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/pump.git@b05d1838cc3be47f7c3cd9020c73f6ebbafd3aa0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-pump-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/pump/-/pump-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-3.6.0"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@3.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "3.6.0"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-3.6.0-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/readable-stream.git@bed7ffa274f5b9e6d0d5c22369e6fe825ded03d2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@3.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "3.6.0"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-3.6.0-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/readable-stream/-/readable-stream-3.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@3.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "3.6.0"
- SPDXID: "SPDXRef-Package-NPM-readdirp-3.2.0"
  copyrightText: "Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readdirp@3.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/readdirp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "readdirp"
  summary: "Recursive version of fs.readdir with streaming api."
  versionInfo: "3.2.0"
- SPDXID: "SPDXRef-Package-NPM-readdirp-3.2.0-vcs"
  copyrightText: "Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)"
  downloadLocation: "git+https://github.com/paulmillr/readdirp.git@cdfb3df2192e0721be258b28c19b9be1d43fcdd0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readdirp@3.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/readdirp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readdirp"
  summary: "Recursive version of fs.readdir with streaming api."
  versionInfo: "3.2.0"
- SPDXID: "SPDXRef-Package-NPM-readdirp-3.2.0-source-artifact"
  copyrightText: "Copyright (c) 2012-2019 Thorsten Lorenz, Paul Miller (https://paulmillr.com)"
  downloadLocation: "https://registry.npmjs.org/readdirp/-/readdirp-3.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readdirp@3.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/paulmillr/readdirp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readdirp"
  summary: "Recursive version of fs.readdir with streaming api."
  versionInfo: "3.2.0"
- SPDXID: "SPDXRef-Package-NPM-require-directory-2.1.1"
  copyrightText: "Copyright (c) 2011 Troy Goode <troygoode@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/require-directory@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/troygoode/node-require-directory/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "require-directory"
  summary: "Recursively iterates over specified directory, require()'ing each file,\
    \ and returning a nested hash structure containing those modules."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-require-directory-2.1.1-vcs"
  copyrightText: "Copyright (c) 2011 Troy Goode <troygoode@gmail.com>"
  downloadLocation: "git+https://github.com/troygoode/node-require-directory.git@cc71c23dd0c16cefd26855303c16ca1b9b50a36d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/require-directory@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/troygoode/node-require-directory/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "require-directory"
  summary: "Recursively iterates over specified directory, require()'ing each file,\
    \ and returning a nested hash structure containing those modules."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-require-directory-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2011 Troy Goode <troygoode@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/require-directory/-/require-directory-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/require-directory@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/troygoode/node-require-directory/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "require-directory"
  summary: "Recursively iterates over specified directory, require()'ing each file,\
    \ and returning a nested hash structure containing those modules."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-require-main-filename-2.0.0"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/require-main-filename@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/require-main-filename#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "require-main-filename"
  summary: "shim for require.main.filename() that works in as many environments as\
    \ possible"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-require-main-filename-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "git+ssh://github.com/yargs/require-main-filename.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/require-main-filename@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/require-main-filename#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "require-main-filename"
  summary: "shim for require.main.filename() that works in as many environments as\
    \ possible"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-require-main-filename-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "https://registry.npmjs.org/require-main-filename/-/require-main-filename-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/require-main-filename@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/require-main-filename#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "require-main-filename"
  summary: "shim for require.main.filename() that works in as many environments as\
    \ possible"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.15.1"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.15.1"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.15.1"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.15.1-vcs"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "git+https://github.com/browserify/resolve.git@c1750d6f17dbc607c96e73000812b2becf7ea6e5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.15.1"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.15.1"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.15.1-source-artifact"
  copyrightText: "Copyright (c) 2012 James Halliday"
  downloadLocation: "https://registry.npmjs.org/resolve/-/resolve-1.15.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.15.1"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.15.1"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.7.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.7.1"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.7.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/rimraf.git@bb572746b8791d886f25913dd57d2859b4246ef3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.7.1"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.7.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/rimraf/-/rimraf-2.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.7.1"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/safe-buffer.git@ae53d5b9f06eae8540ca948d14e43ca32692dd8c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "git+https://github.com/ChALkeR/safer-buffer.git@e8ac214944eda30e1e6c6b7d7e7f6a21cf7dce7c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/node-semver.git@c83c18cf84f9ccaea3431c929bb285fd168c01e4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z.\nCopyright Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-set-blocking-2.0.0"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/set-blocking@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/set-blocking#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "set-blocking"
  summary: "set blocking stdio and stderr ensuring that terminal output does not truncate"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-set-blocking-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "git+https://github.com/yargs/set-blocking.git@7eec10577b5fff264de477ba3b9d07f404946eff"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/set-blocking@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/set-blocking#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "set-blocking"
  summary: "set blocking stdio and stderr ensuring that terminal output does not truncate"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-set-blocking-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "https://registry.npmjs.org/set-blocking/-/set-blocking-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/set-blocking@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/set-blocking#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "set-blocking"
  summary: "set blocking stdio and stderr ensuring that terminal output does not truncate"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-split-ca-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split-ca@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/bushong1/split-ca"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "split-ca"
  summary: "Simple module to split a single certificate authority chain file (aka:\
    \ bundle, ca-bundle, ca-chain, etc.) into an array, as expected by the node.js\
    \ tls api."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-split-ca-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/bushong1/split-ca.git@4fb87455c8af37396803be25c9fbca74af84a69b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split-ca@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/bushong1/split-ca"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "split-ca"
  summary: "Simple module to split a single certificate authority chain file (aka:\
    \ bundle, ca-bundle, ca-chain, etc.) into an array, as expected by the node.js\
    \ tls api."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-split-ca-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/split-ca/-/split-ca-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split-ca@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/bushong1/split-ca"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "split-ca"
  summary: "Simple module to split a single certificate authority chain file (aka:\
    \ bundle, ca-bundle, ca-chain, etc.) into an array, as expected by the node.js\
    \ tls api."
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3-vcs"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "git+https://github.com/alexei/sprintf.js.git@747b806c2dab5b64d5c9958c42884946a187c3b1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-ssh2-0.8.9"
  copyrightText: "Copyright Brian White"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ssh2@0.8.9"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/ssh2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ssh2"
  summary: "SSH2 client and server modules written in pure JavaScript for node.js"
  versionInfo: "0.8.9"
- SPDXID: "SPDXRef-Package-NPM-ssh2-0.8.9-vcs"
  copyrightText: "Copyright Brian White"
  downloadLocation: "git+ssh://github.com/mscdex/ssh2.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ssh2@0.8.9"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/ssh2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ssh2"
  summary: "SSH2 client and server modules written in pure JavaScript for node.js"
  versionInfo: "0.8.9"
- SPDXID: "SPDXRef-Package-NPM-ssh2-0.8.9-source-artifact"
  copyrightText: "Copyright Brian White"
  downloadLocation: "https://registry.npmjs.org/ssh2/-/ssh2-0.8.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ssh2@0.8.9"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/ssh2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ssh2"
  summary: "SSH2 client and server modules written in pure JavaScript for node.js"
  versionInfo: "0.8.9"
- SPDXID: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
  copyrightText: "Copyright (c) 2005-2009 Tom Wu\nCopyright 2014 Brian White"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ssh2-streams@0.4.10"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/ssh2-streams#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ssh2-streams"
  summary: "SSH2 and SFTP(v3) client/server protocol streams for node.js"
  versionInfo: "0.4.10"
- SPDXID: "SPDXRef-Package-NPM-ssh2-streams-0.4.10-vcs"
  copyrightText: "Copyright (c) 2005-2009 Tom Wu\nCopyright 2014 Brian White"
  downloadLocation: "git+ssh://github.com/mscdex/ssh2-streams.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ssh2-streams@0.4.10"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/ssh2-streams#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ssh2-streams"
  summary: "SSH2 and SFTP(v3) client/server protocol streams for node.js"
  versionInfo: "0.4.10"
- SPDXID: "SPDXRef-Package-NPM-ssh2-streams-0.4.10-source-artifact"
  copyrightText: "Copyright (c) 2005-2009 Tom Wu\nCopyright 2014 Brian White"
  downloadLocation: "https://registry.npmjs.org/ssh2-streams/-/ssh2-streams-0.4.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ssh2-streams@0.4.10"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/ssh2-streams#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ssh2-streams"
  summary: "SSH2 and SFTP(v3) client/server protocol streams for node.js"
  versionInfo: "0.4.10"
- SPDXID: "SPDXRef-Package-NPM-stack-trace-0.0.10"
  copyrightText: "Copyright (c) 2011 Felix Geisendorfer (felix@debuggable.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stack-trace@0.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-stack-trace"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stack-trace"
  summary: "Get v8 stack traces as an array of CallSite objects."
  versionInfo: "0.0.10"
- SPDXID: "SPDXRef-Package-NPM-stack-trace-0.0.10-vcs"
  copyrightText: "Copyright (c) 2011 Felix Geisendorfer (felix@debuggable.com)"
  downloadLocation: "git+https://github.com/felixge/node-stack-trace.git@9a11c5294e37e8c1e8ca0f402711eb100bc7be5e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stack-trace@0.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-stack-trace"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stack-trace"
  summary: "Get v8 stack traces as an array of CallSite objects."
  versionInfo: "0.0.10"
- SPDXID: "SPDXRef-Package-NPM-stack-trace-0.0.10-source-artifact"
  copyrightText: "Copyright (c) 2011 Felix Geisendorfer (felix@debuggable.com)"
  downloadLocation: "https://registry.npmjs.org/stack-trace/-/stack-trace-0.0.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stack-trace@0.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-stack-trace"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stack-trace"
  summary: "Get v8 stack traces as an array of CallSite objects."
  versionInfo: "0.0.10"
- SPDXID: "SPDXRef-Package-NPM-streamsearch-0.1.2"
  copyrightText: "Copyright Brian White"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamsearch@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/streamsearch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "streamsearch"
  summary: "Streaming Boyer-Moore-Horspool searching for node.js"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-streamsearch-0.1.2-vcs"
  copyrightText: "Copyright Brian White"
  downloadLocation: "git+https://github.com/mscdex/streamsearch.git@d9da75021934a34a9817953c232c7d5639676dda"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamsearch@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/streamsearch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "streamsearch"
  summary: "Streaming Boyer-Moore-Horspool searching for node.js"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-streamsearch-0.1.2-source-artifact"
  copyrightText: "Copyright Brian White"
  downloadLocation: "https://registry.npmjs.org/streamsearch/-/streamsearch-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamsearch@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mscdex/streamsearch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "streamsearch"
  summary: "Streaming Boyer-Moore-Horspool searching for node.js"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-string-width-2.1.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-width-2.1.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/string-width.git@74d8d552b465692790c41169b123409669d41079"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-width-2.1.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/string-width/-/string-width-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-width-3.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-string-width-3.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/string-width.git@3b3da68dfea82e193f9d6deee77224cf8e5c3803"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-string-width-3.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/string-width/-/string-width-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string-width@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/string-width#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string-width"
  summary: "Get the visual width of a string - the number of columns required to display\
    \ it"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string.prototype.trimleft@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/String.prototype.trimLeft#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string.prototype.trimleft"
  summary: "ES7 spec-compliant String.prototype.trimLeft shim."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/es-shims/String.prototype.trimLeft.git@8abe509d84f487674b20f75723bd0bc19b87ef2d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string.prototype.trimleft@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/String.prototype.trimLeft#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string.prototype.trimleft"
  summary: "ES7 spec-compliant String.prototype.trimLeft shim."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/string.prototype.trimleft/-/string.prototype.trimleft-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string.prototype.trimleft@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/String.prototype.trimLeft#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string.prototype.trimleft"
  summary: "ES7 spec-compliant String.prototype.trimLeft shim."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string.prototype.trimright@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/String.prototype.trimRight#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string.prototype.trimright"
  summary: "ES7 spec-compliant String.prototype.trimRight shim."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/es-shims/String.prototype.trimRight.git@e38a0d277fb07788a84989499f154d1f83cbda07"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string.prototype.trimright@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/String.prototype.trimRight#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string.prototype.trimright"
  summary: "ES7 spec-compliant String.prototype.trimRight shim."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/string.prototype.trimright/-/string.prototype.trimright-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string.prototype.trimright@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/es-shims/String.prototype.trimRight#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string.prototype.trimright"
  summary: "ES7 spec-compliant String.prototype.trimRight shim."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.3.0"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.3.0-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/string_decoder.git@60db81e031c126112039157ba9437484b1329dff"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.3.0-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/string_decoder/-/string_decoder-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-4.0.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/strip-ansi.git@c299056a42b31d7a479d6a89b41318b2a2462cc7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-4.0.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-ansi/-/strip-ansi-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes from a string"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-5.2.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/strip-ansi.git@b9c492921b72c48f93568565dbdc929cf63c20e1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes from a string"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-5.2.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-ansi/-/strip-ansi-5.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes from a string"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-json-comments@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-json-comments#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "strip-json-comments"
  summary: "Strip comments from JSON. Lets you use comments in your JSON files!"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/strip-json-comments.git@1aef99eaa70d07981156e8aaa722e750c3b4eaf9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-json-comments@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-json-comments#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-json-comments"
  summary: "Strip comments from JSON. Lets you use comments in your JSON files!"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/strip-json-comments/-/strip-json-comments-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-json-comments@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-json-comments#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-json-comments"
  summary: "Strip comments from JSON. Lets you use comments in your JSON files!"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@7759fc135b1be07cb7411178d7b1ac33d367fec8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-6.0.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@6.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "6.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-6.0.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@bfbe6692d549b423230292946756f3fdd79a808e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@6.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "6.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-6.0.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-6.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@6.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "6.0.0"
- SPDXID: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar-fs@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/tar-fs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tar-fs"
  summary: "filesystem bindings for tar-stream"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-tar-fs-2.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/tar-fs.git@0f54a78bcc8735c4257177fd004c2f9e55c588bb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar-fs@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/tar-fs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar-fs"
  summary: "filesystem bindings for tar-stream"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-tar-fs-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/tar-fs/-/tar-fs-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar-fs@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/tar-fs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar-fs"
  summary: "filesystem bindings for tar-stream"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar-stream@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/tar-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tar-stream"
  summary: "tar-stream is a streaming tar parser and generator and nothing else. It\
    \ is streams2 and operates purely using streams which means you can easily extract/parse\
    \ tarballs without ever hitting the file system."
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-tar-stream-2.1.2-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/tar-stream.git@f639c6ea853bfd44eaf95e01f39309bfd07f4ba8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar-stream@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/tar-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar-stream"
  summary: "tar-stream is a streaming tar parser and generator and nothing else. It\
    \ is streams2 and operates purely using streams which means you can easily extract/parse\
    \ tarballs without ever hitting the file system."
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-tar-stream-2.1.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/tar-stream/-/tar-stream-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar-stream@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/tar-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar-stream"
  summary: "tar-stream is a streaming tar parser and generator and nothing else. It\
    \ is streams2 and operates purely using streams which means you can easily extract/parse\
    \ tarballs without ever hitting the file system."
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  copyrightText: "Copyright (c) 2015 present, Jon Schlinkert\nCopyright (c) 2019 Jon\
    \ Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-regex-range@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/to-regex-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "to-regex-range"
  summary: "Pass two numbers, get a regex-compatible source string for matching ranges.\
    \ Validated against more than 2.78 million test assertions."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-to-regex-range-5.0.1-vcs"
  copyrightText: "Copyright (c) 2015 present, Jon Schlinkert\nCopyright (c) 2019 Jon\
    \ Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/micromatch/to-regex-range.git@c05ef9ec07e7703d146467934098ecbde9d0bd95"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-regex-range@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/to-regex-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-regex-range"
  summary: "Pass two numbers, get a regex-compatible source string for matching ranges.\
    \ Validated against more than 2.78 million test assertions."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-to-regex-range-5.0.1-source-artifact"
  copyrightText: "Copyright (c) 2015 present, Jon Schlinkert\nCopyright (c) 2019 Jon\
    \ Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/to-regex-range/-/to-regex-range-5.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-regex-range@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/micromatch/to-regex-range"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-regex-range"
  summary: "Pass two numbers, get a regex-compatible source string for matching ranges.\
    \ Validated against more than 2.78 million test assertions."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-tslib-1.11.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslib@1.11.1"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tslib"
  summary: "Runtime library for TypeScript helper functions"
  versionInfo: "1.11.1"
- SPDXID: "SPDXRef-Package-NPM-tslib-1.11.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/tslib.git@c1f87f79190d61e1e4ca24af03894771cdf1aef9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslib@1.11.1"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslib"
  summary: "Runtime library for TypeScript helper functions"
  versionInfo: "1.11.1"
- SPDXID: "SPDXRef-Package-NPM-tslib-1.11.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/tslib/-/tslib-1.11.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslib@1.11.1"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslib"
  summary: "Runtime library for TypeScript helper functions"
  versionInfo: "1.11.1"
- SPDXID: "SPDXRef-Package-NPM-tslint-6.1.0"
  copyrightText: "(c) 2018 Palantir Technologies\nCopyright 2013-2019 Palantir Technologies,\
    \ Inc.\nCopyright 2019 ', enforce-trailing-newline"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslint@6.1.0"
  filesAnalyzed: false
  homepage: "https://palantir.github.io/tslint"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tslint"
  summary: "An extensible static analysis linter for the TypeScript language"
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-tslint-6.1.0-vcs"
  copyrightText: "(c) 2018 Palantir Technologies\nCopyright 2013-2019 Palantir Technologies,\
    \ Inc.\nCopyright 2019 ', enforce-trailing-newline"
  downloadLocation: "git+https://github.com/palantir/tslint.git@0ebda9b11a4fe7f27f6eb25aedc552960ca584c6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslint@6.1.0"
  filesAnalyzed: false
  homepage: "https://palantir.github.io/tslint"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslint"
  summary: "An extensible static analysis linter for the TypeScript language"
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-tslint-6.1.0-source-artifact"
  copyrightText: "(c) 2018 Palantir Technologies\nCopyright 2013-2019 Palantir Technologies,\
    \ Inc.\nCopyright 2019 ', enforce-trailing-newline"
  downloadLocation: "https://registry.npmjs.org/tslint/-/tslint-6.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tslint@6.1.0"
  filesAnalyzed: false
  homepage: "https://palantir.github.io/tslint"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tslint"
  summary: "An extensible static analysis linter for the TypeScript language"
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-tsutils-2.29.0"
  copyrightText: "Copyright (c) 2017 Klaus Meinhardt"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsutils@2.29.0"
  filesAnalyzed: false
  homepage: "https://github.com/ajafff/tsutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tsutils"
  summary: "utilities for working with typescript's AST"
  versionInfo: "2.29.0"
- SPDXID: "SPDXRef-Package-NPM-tsutils-2.29.0-vcs"
  copyrightText: "Copyright (c) 2017 Klaus Meinhardt"
  downloadLocation: "git+https://github.com/ajafff/tsutils.git@31508d0a38f2e76cbe3d2486e23c1cee83fc3550"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsutils@2.29.0"
  filesAnalyzed: false
  homepage: "https://github.com/ajafff/tsutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tsutils"
  summary: "utilities for working with typescript's AST"
  versionInfo: "2.29.0"
- SPDXID: "SPDXRef-Package-NPM-tsutils-2.29.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Klaus Meinhardt"
  downloadLocation: "https://registry.npmjs.org/tsutils/-/tsutils-2.29.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tsutils@2.29.0"
  filesAnalyzed: false
  homepage: "https://github.com/ajafff/tsutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tsutils"
  summary: "utilities for working with typescript's AST"
  versionInfo: "2.29.0"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "Unlicense"
  licenseDeclared: "Unlicense"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dchest/tweetnacl-js.git@cce829e473b1ae299a9373b5140c713ee88f577f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-typedarray-0.0.6"
  copyrightText: "Copyright (c) 2010 Linden Research, Inc.\nCopyright (c) 2012 Joshua\
    \ Bell"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typedarray@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "typedarray"
  summary: "TypedArray polyfill for old browsers"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-typedarray-0.0.6-vcs"
  copyrightText: "Copyright (c) 2010 Linden Research, Inc.\nCopyright (c) 2012 Joshua\
    \ Bell"
  downloadLocation: "git+https://github.com/substack/typedarray.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typedarray@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typedarray"
  summary: "TypedArray polyfill for old browsers"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-typedarray-0.0.6-source-artifact"
  copyrightText: "Copyright (c) 2010 Linden Research, Inc.\nCopyright (c) 2012 Joshua\
    \ Bell"
  downloadLocation: "https://registry.npmjs.org/typedarray/-/typedarray-0.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typedarray@0.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/substack/typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typedarray"
  summary: "TypedArray polyfill for old browsers"
  versionInfo: "0.0.6"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.8.3"
  copyrightText: "(c) Hello World\n(c) by W3C\nCopyright (c) 1991-2017 Unicode, Inc.\n\
    Copyright (c) 2012 Ecma International\nCopyright (c) 2018 The Khronos Group Inc.\n\
    Copyright (c) 2018 WHATWG\nCopyright (c) Microsoft\nCopyright (c) Microsoft Corporation\n\
    Copyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\nCopyright\
    \ 2009 the Sputnik authors\nCopyright 2015 MyCompany Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.8.3"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.8.3"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.8.3-vcs"
  copyrightText: "(c) Hello World\n(c) by W3C\nCopyright (c) 1991-2017 Unicode, Inc.\n\
    Copyright (c) 2012 Ecma International\nCopyright (c) 2018 The Khronos Group Inc.\n\
    Copyright (c) 2018 WHATWG\nCopyright (c) Microsoft\nCopyright (c) Microsoft Corporation\n\
    Copyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\nCopyright\
    \ 2009 the Sputnik authors\nCopyright 2015 MyCompany Inc."
  downloadLocation: "git+https://github.com/Microsoft/TypeScript.git@712967b2780e8ecd28f8f1e2e89c1ebd2592bb4c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.8.3"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.8.3"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.8.3-source-artifact"
  copyrightText: "(c) Hello World\n(c) by W3C\nCopyright (c) 1991-2017 Unicode, Inc.\n\
    Copyright (c) 2012 Ecma International\nCopyright (c) 2018 The Khronos Group Inc.\n\
    Copyright (c) 2018 WHATWG\nCopyright (c) Microsoft\nCopyright (c) Microsoft Corporation\n\
    Copyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\nCopyright\
    \ 2009 the Sputnik authors\nCopyright 2015 MyCompany Inc."
  downloadLocation: "https://registry.npmjs.org/typescript/-/typescript-3.8.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.8.3"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.8.3"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "git+https://github.com/TooTallNate/util-deprecate.git@475fb6857cd23fafff20c1be846c1350abf8e6d4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-vscode-test-1.3.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-test@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-test#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode-test"
  summary: "<p>   <h1 align=\"center\">vscode-test</h1> </p>"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-test-1.3.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vscode-test.git@7701bb78a6d0c56b6825ea003e2a51c230638b05"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-test@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-test#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-test"
  summary: "<p>   <h1 align=\"center\">vscode-test</h1> </p>"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-test-1.3.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vscode-test/-/vscode-test-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-test@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-test#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-test"
  summary: "<p>   <h1 align=\"center\">vscode-test</h1> </p>"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-which-1.3.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-which-1.3.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-which.git@563406d75b97f97a33e506b9cc7a82b268332b6f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-which-1.3.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/which/-/which-1.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-which#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which"
  summary: "Like which(1) unix command. Find the first instance of an executable in\
    \ the PATH."
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-which-module-2.0.0"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which-module@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/nexdrew/which-module#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "which-module"
  summary: "Find the module object for something that was require()d"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-which-module-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "git+https://github.com/nexdrew/which-module.git@7f78f42d0761133263c3947a3b24dde324a467ce"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which-module@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/nexdrew/which-module#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which-module"
  summary: "Find the module object for something that was require()d"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-which-module-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "https://registry.npmjs.org/which-module/-/which-module-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/which-module@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/nexdrew/which-module#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "which-module"
  summary: "Find the module object for something that was require()d"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-wide-align-1.1.3"
  copyrightText: "Copyright (c) 2015 Rebecca Turner <me@re-becca.org>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wide-align@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/iarna/wide-align#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "wide-align"
  summary: "A wide-character aware text alignment function for use on the console\
    \ or with fixed width fonts."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-wide-align-1.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Rebecca Turner <me@re-becca.org>"
  downloadLocation: "git+https://github.com/iarna/wide-align.git@6b766c9874a1e5157eda2ac75b90ccc01b313620"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wide-align@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/iarna/wide-align#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wide-align"
  summary: "A wide-character aware text alignment function for use on the console\
    \ or with fixed width fonts."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-wide-align-1.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Rebecca Turner <me@re-becca.org>"
  downloadLocation: "https://registry.npmjs.org/wide-align/-/wide-align-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wide-align@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/iarna/wide-align#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wide-align"
  summary: "A wide-character aware text alignment function for use on the console\
    \ or with fixed width fonts."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrap-ansi@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/wrap-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "wrap-ansi"
  summary: "Wordwrap a string with ANSI escape codes"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-wrap-ansi-5.1.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/wrap-ansi.git@2a1a55446d67c55a29e84173e99eb6abc91c937c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrap-ansi@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/wrap-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrap-ansi"
  summary: "Wordwrap a string with ANSI escape codes"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-wrap-ansi-5.1.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/wrap-ansi/-/wrap-ansi-5.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrap-ansi@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/wrap-ansi#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrap-ansi"
  summary: "Wordwrap a string with ANSI escape codes"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/npm/wrappy.git@71d91b6dc5bdeac37e218c2cf03f9ab55b60d214"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-y18n-4.0.0"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/y18n@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/y18n"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "y18n"
  summary: "the bare-bones internationalization library used by yargs"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-y18n-4.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "git+ssh://github.com/yargs/y18n.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/y18n@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/y18n"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "y18n"
  summary: "the bare-bones internationalization library used by yargs"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-y18n-4.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Contributors"
  downloadLocation: "https://registry.npmjs.org/y18n/-/y18n-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/y18n@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/y18n"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "y18n"
  summary: "the bare-bones internationalization library used by yargs"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-yargs-13.3.2"
  copyrightText: "Copyright (c) 2011 Andrei Mackenzie\nCopyright (c) Sindre Sorhus\
    \ <sindresorhus@gmail.com> (sindresorhus.com)\nCopyright 2010 James Halliday (mail@substack.net)\n\
    Copyright 2014 Contributors (ben@npmjs.com)\ncopyright 2019 Missing"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs@13.3.2"
  filesAnalyzed: false
  homepage: "https://yargs.js.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "yargs"
  summary: "yargs the modern, pirate-themed, successor to optimist."
  versionInfo: "13.3.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-13.3.2-vcs"
  copyrightText: "Copyright (c) 2011 Andrei Mackenzie\nCopyright (c) Sindre Sorhus\
    \ <sindresorhus@gmail.com> (sindresorhus.com)\nCopyright 2010 James Halliday (mail@substack.net)\n\
    Copyright 2014 Contributors (ben@npmjs.com)\ncopyright 2019 Missing"
  downloadLocation: "git+https://github.com/yargs/yargs.git@c5547b1333ab1821152d0a334a278fcb5496a0a6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs@13.3.2"
  filesAnalyzed: false
  homepage: "https://yargs.js.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs"
  summary: "yargs the modern, pirate-themed, successor to optimist."
  versionInfo: "13.3.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-13.3.2-source-artifact"
  copyrightText: "Copyright (c) 2011 Andrei Mackenzie\nCopyright (c) Sindre Sorhus\
    \ <sindresorhus@gmail.com> (sindresorhus.com)\nCopyright 2010 James Halliday (mail@substack.net)\n\
    Copyright 2014 Contributors (ben@npmjs.com)\ncopyright 2019 Missing"
  downloadLocation: "https://registry.npmjs.org/yargs/-/yargs-13.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs@13.3.2"
  filesAnalyzed: false
  homepage: "https://yargs.js.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs"
  summary: "yargs the modern, pirate-themed, successor to optimist."
  versionInfo: "13.3.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs-parser@13.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/yargs-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "yargs-parser"
  summary: "the mighty option parser used by yargs"
  versionInfo: "13.1.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-parser-13.1.2-vcs"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "git+ssh://github.com/yargs/yargs-parser.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs-parser@13.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/yargs-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs-parser"
  summary: "the mighty option parser used by yargs"
  versionInfo: "13.1.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-parser-13.1.2-source-artifact"
  copyrightText: "Copyright (c) 2016 Contributors"
  downloadLocation: "https://registry.npmjs.org/yargs-parser/-/yargs-parser-13.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs-parser@13.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/yargs-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs-parser"
  summary: "the mighty option parser used by yargs"
  versionInfo: "13.1.2"
- SPDXID: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
  copyrightText: "Copyright (c) 2017 Made With MOXY Lda"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs-unparser@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/yargs-unparser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "yargs-unparser"
  summary: "Converts back a yargs argv object to its original array form"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-yargs-unparser-1.6.0-vcs"
  copyrightText: "Copyright (c) 2017 Made With MOXY Lda"
  downloadLocation: "git+ssh://github.com/yargs/yargs-unparser.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs-unparser@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/yargs-unparser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs-unparser"
  summary: "Converts back a yargs argv object to its original array form"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-yargs-unparser-1.6.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Made With MOXY Lda"
  downloadLocation: "https://registry.npmjs.org/yargs-unparser/-/yargs-unparser-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yargs-unparser@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/yargs/yargs-unparser"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yargs-unparser"
  summary: "Converts back a yargs argv object to its original array form"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/code-frame@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "code-frame"
  summary: "Generate errors that contain a code frame that point to source locations."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-vcs"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "git+https://github.com/babel/babel.git@a7620bd266ae1345975767bbc7abf09034437017#packages/babel-code-frame"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/code-frame@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "code-frame"
  summary: "Generate errors that contain a code frame that point to source locations."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-source-artifact"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "https://registry.npmjs.org/@babel/code-frame/-/code-frame-7.8.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/code-frame@7.8.3"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "code-frame"
  summary: "Generate errors that contain a code frame that point to source locations."
  versionInfo: "7.8.3"
- SPDXID: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/helper-validator-identifier@7.9.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "helper-validator-identifier"
  summary: "Validate identifier/keywords name"
  versionInfo: "7.9.0"
- SPDXID: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0-vcs"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "git+https://github.com/babel/babel.git@8d5e422be27251cfaadf8dd2536b31b4a5024b02#packages/babel-helper-validator-identifier"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/helper-validator-identifier@7.9.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "helper-validator-identifier"
  summary: "Validate identifier/keywords name"
  versionInfo: "7.9.0"
- SPDXID: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0-source-artifact"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "https://registry.npmjs.org/@babel/helper-validator-identifier/-/helper-validator-identifier-7.9.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/helper-validator-identifier@7.9.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "helper-validator-identifier"
  summary: "Validate identifier/keywords name"
  versionInfo: "7.9.0"
- SPDXID: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/highlight@7.9.0"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "highlight"
  summary: "Syntax highlight JavaScript strings for output in terminals."
  versionInfo: "7.9.0"
- SPDXID: "SPDXRef-Package-NPM-babel-highlight-7.9.0-vcs"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "git+https://github.com/babel/babel.git@8d5e422be27251cfaadf8dd2536b31b4a5024b02#packages/babel-highlight"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/highlight@7.9.0"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "highlight"
  summary: "Syntax highlight JavaScript strings for output in terminals."
  versionInfo: "7.9.0"
- SPDXID: "SPDXRef-Package-NPM-babel-highlight-7.9.0-source-artifact"
  copyrightText: "Copyright (c) 2014 present Sebastian McKenzie and other contributors"
  downloadLocation: "https://registry.npmjs.org/@babel/highlight/-/highlight-7.9.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40babel/highlight@7.9.0"
  filesAnalyzed: false
  homepage: "https://babeljs.io/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "highlight"
  summary: "Syntax highlight JavaScript strings for output in terminals."
  versionInfo: "7.9.0"
- SPDXID: "SPDXRef-Package-NPM-types-circular-json-0.4.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/circular-json@0.4.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "circular-json"
  summary: "TypeScript definitions for circular-json"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-types-circular-json-0.4.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/circular-json@0.4.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "circular-json"
  summary: "TypeScript definitions for circular-json"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-types-circular-json-0.4.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/circular-json/-/circular-json-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/circular-json@0.4.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "circular-json"
  summary: "TypeScript definitions for circular-json"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-types-mocha-7.0.2"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/mocha@7.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mocha"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mocha"
  summary: "TypeScript definitions for mocha"
  versionInfo: "7.0.2"
- SPDXID: "SPDXRef-Package-NPM-types-mocha-7.0.2-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/mocha"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/mocha@7.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mocha"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mocha"
  summary: "TypeScript definitions for mocha"
  versionInfo: "7.0.2"
- SPDXID: "SPDXRef-Package-NPM-types-mocha-7.0.2-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/mocha/-/mocha-7.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/mocha@7.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/mocha"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mocha"
  summary: "TypeScript definitions for mocha"
  versionInfo: "7.0.2"
- SPDXID: "SPDXRef-Package-NPM-types-node-13.9.3"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@13.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "13.9.3"
- SPDXID: "SPDXRef-Package-NPM-types-node-13.9.3-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/node"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@13.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "13.9.3"
- SPDXID: "SPDXRef-Package-NPM-types-node-13.9.3-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/node/-/node-13.9.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@13.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "13.9.3"
- SPDXID: "SPDXRef-Package-NPM-types-stack-trace-0.0.29"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/stack-trace@0.0.29"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/stack-trace"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stack-trace"
  summary: "TypeScript definitions for node-stack-trace"
  versionInfo: "0.0.29"
- SPDXID: "SPDXRef-Package-NPM-types-stack-trace-0.0.29-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/stack-trace@0.0.29"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/stack-trace"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stack-trace"
  summary: "TypeScript definitions for node-stack-trace"
  versionInfo: "0.0.29"
- SPDXID: "SPDXRef-Package-NPM-types-stack-trace-0.0.29-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/stack-trace/-/stack-trace-0.0.29.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/stack-trace@0.0.29"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/stack-trace"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stack-trace"
  summary: "TypeScript definitions for node-stack-trace"
  versionInfo: "0.0.29"
- SPDXID: "SPDXRef-Package-NPM-types-vscode-1.38.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/vscode@1.38.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/vscode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode"
  summary: "TypeScript definitions for Visual Studio Code"
  versionInfo: "1.38.0"
- SPDXID: "SPDXRef-Package-NPM-types-vscode-1.38.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/vscode"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/vscode@1.38.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/vscode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode"
  summary: "TypeScript definitions for Visual Studio Code"
  versionInfo: "1.38.0"
- SPDXID: "SPDXRef-Package-NPM-types-vscode-1.38.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/vscode/-/vscode-1.38.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/vscode@1.38.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/vscode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode"
  summary: "TypeScript definitions for Visual Studio Code"
  versionInfo: "1.38.0"
relationships:
- spdxElementId: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3"
- spdxElementId: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-ch.qos.logback-logback-core-1.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.beust-jcommander-1.27"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.beust-jcommander-1.27-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.beust-jcommander-1.27"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.beust-jcommander-1.27-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.9"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.9"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-joda-time-joda-time-2.7"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-annotations-2.9.0"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-core-2.9.5"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.core-jackson-databind-2.9.5"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-base-2.9.9"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-jaxb-annotations-2.9.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-20.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-20.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.google.guava-guava-20.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-20.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okio-okio-1.17.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9-vcs"
- spdxElementId: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-core-2.8.0"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-spi-2.8.0"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-schema-2.8.0"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-common-2.8.0"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-spring-web-2.8.0"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.guava-guava-20.0"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml-classmate-1.3.4"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.14-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14-vcs"
- spdxElementId: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-models-1.5.14-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-joda-time-joda-time-2.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-joda-time-joda-time-2.7-vcs"
- spdxElementId: "SPDXRef-Package-Maven-joda-time-joda-time-2.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-joda-time-joda-time-2.7-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.12"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.12-vcs"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.12-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.8.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.8.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-junit-junit-4.8.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.8.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11-vcs"
- spdxElementId: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-net.bytebuddy-byte-buddy-1.7.11-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-api-2.10.0"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.json-json-20140107"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-commons-codec-commons-codec-1.9"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.common-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-core-8.5.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-core-8.5.29-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-el-8.5.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-el-8.5.29-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-websocket-8.5.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-websocket-8.5.29-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hamcrest-hamcrest-core-1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final"
- spdxElementId: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.jboss.logging-jboss-logging-3.3.2.Final-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.json-json-20140107"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.json-json-20140107-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.json-json-20140107"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.json-json-20140107-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.mapstruct-mapstruct-1.2.0.Final-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.javassist-javassist-3.21.0-GA"
- spdxElementId: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.reflections-reflections-0.9.11-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.25-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-slf4j-api-1.7.7-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-jcl-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-beans-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-aop-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-context-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-expression-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-autoconfigure-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.annotation-javax.annotation-api-1.3.2"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-core-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jdk8-2.9.5"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.module-jackson-module-parameter-names-2.9.5"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-ch.qos.logback-logback-classic-1.2.3"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.logging.log4j-log4j-to-slf4j-2.10.0"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.slf4j-jul-to-slf4j-1.7.25"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-logging-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-core-8.5.29"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-el-8.5.29"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.tomcat.embed-tomcat-embed-websocket-8.5.29"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-json-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-tomcat-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.hibernate.validator-hibernate-validator-6.0.9.Final"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-web-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework-spring-webmvc-5.0.5.RELEASE"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-core-1.2.0.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.plugin-spring-plugin-metadata-1.2.0.RELEASE-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.testng-testng-6.8.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.beust-jcommander-1.27"
- spdxElementId: "SPDXRef-Package-Maven-org.testng-testng-6.8.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.testng-testng-6.8.8-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.testng-testng-6.8.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.testng-testng-6.8.8-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8-source-artifact"
- spdxElementId: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19-vcs"
- spdxElementId: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.yaml-snakeyaml-1.19-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-agent-base-4.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-es6-promisify-5.0.0"
- spdxElementId: "SPDXRef-Package-NPM-agent-base-4.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-agent-base-4.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-agent-base-4.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-agent-base-4.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-colors-3.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-colors-3.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-colors-3.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-colors-3.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.2.2"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-anymatch-3.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-anymatch-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-anymatch-3.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
- spdxElementId: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-code-frame-7.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-helper-validator-identifier-7.9.0"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-tokens-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-highlight-7.9.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-babel-highlight-7.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-highlight-7.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-base64-js-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-base64-js-1.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-base64-js-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-base64-js-1.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-binary-extensions-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-binary-extensions-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bl-4.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.6.0"
- spdxElementId: "SPDXRef-Package-NPM-bl-4.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-5.5.0"
- spdxElementId: "SPDXRef-Package-NPM-bl-4.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-bl-4.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bl-4.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bl-4.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bl-4.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-braces-3.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fill-range-7.0.1"
- spdxElementId: "SPDXRef-Package-NPM-braces-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-braces-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-braces-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-braces-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-browser-stdout-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-browser-stdout-1.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-browser-stdout-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-browser-stdout-1.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-buffer-5.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-base64-js-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-buffer-5.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ieee754-1.1.13"
- spdxElementId: "SPDXRef-Package-NPM-buffer-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-5.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-buffer-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-5.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-buffer-from-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-buffer-from-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-builtin-modules-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-builtin-modules-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-5.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-5.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-5.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-5.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-anymatch-3.1.1"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-braces-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-5.1.1"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readdirp-3.2.0"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chokidar-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chownr-1.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chownr-1.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chownr-1.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chownr-1.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-circular-json-0.5.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-circular-json-0.5.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-circular-json-0.5.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-circular-json-0.5.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cliui-5.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-cliui-5.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-cliui-5.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
- spdxElementId: "SPDXRef-Package-NPM-cliui-5.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cliui-5.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cliui-5.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cliui-5.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-color-name-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-color-name-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.20.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.20.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.20.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.20.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-concat-map-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-concat-map-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.6.0"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-typedarray-0.0.6"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-stream-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-concat-stream-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-stream-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-copy-dir-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-copy-dir-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-copy-dir-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-copy-dir-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.2.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.2.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-4.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-debug-4.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-4.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-4.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-4.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-decamelize-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-decamelize-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-define-properties-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-define-properties-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-define-properties-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-diff-3.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-3.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-diff-3.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-3.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-diff-4.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-4.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-diff-4.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-4.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.6.0"
- spdxElementId: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-4.1.1"
- spdxElementId: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-ca-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ssh2-0.8.9"
- spdxElementId: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-docker-modem-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-docker-modem-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-docker-modem-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dockerode-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-stream-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-dockerode-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-docker-modem-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-dockerode-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-fs-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-dockerode-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dockerode-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dockerode-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dockerode-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-emoji-regex-7.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-emoji-regex-7.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-emoji-regex-7.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-emoji-regex-7.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-callable-1.1.5"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-regex-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-inspect-1.7.0"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es-abstract-1.17.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-es-abstract-1.17.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es-abstract-1.17.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-callable-1.1.5"
- spdxElementId: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-date-object-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-symbol-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es-to-primitive-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-es-to-primitive-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es-to-primitive-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-es6-promise-4.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es6-promise-4.2.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-es6-promise-4.2.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es6-promise-4.2.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-es6-promisify-5.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-es6-promise-4.2.8"
- spdxElementId: "SPDXRef-Package-NPM-es6-promisify-5.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es6-promisify-5.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-es6-promisify-5.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-es6-promisify-5.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-esprima-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-esprima-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fill-range-7.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
- spdxElementId: "SPDXRef-Package-NPM-fill-range-7.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fill-range-7.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fill-range-7.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fill-range-7.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-find-up-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-locate-path-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-find-up-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-find-up-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-flat-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-flat-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-flat-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-flat-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-flat-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fs-constants-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-constants-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fs-constants-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-constants-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-get-caller-file-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-caller-file-2.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-get-caller-file-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-caller-file-2.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-5.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-5.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-5.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-5.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-5.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-growl-1.10.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-growl-1.10.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-growl-1.10.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-growl-1.10.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-symbols-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-symbols-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-he-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-he-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-he-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-he-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-agent-base-4.3.0"
- spdxElementId: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6"
- spdxElementId: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-agent-base-4.3.0"
- spdxElementId: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ieee754-1.1.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ieee754-1.1.13-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ieee754-1.1.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ieee754-1.1.13-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-binary-extensions-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-binary-path-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-binary-path-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-binary-path-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-buffer-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-buffer-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-callable-1.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-callable-1.1.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-callable-1.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-callable-1.1.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-date-object-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-date-object-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-date-object-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-date-object-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-4.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-number-7.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-number-7.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-number-7.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-number-7.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-regex-1.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-is-regex-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-regex-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-regex-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-regex-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-symbol-1.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-is-symbol-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-symbol-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-symbol-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-symbol-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isexe-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isexe-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isexe-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isexe-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-js-tokens-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-tokens-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-js-tokens-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-tokens-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-esprima-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-js-yaml-3.13.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-locate-path-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-locate-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-locate-path-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-locate-path-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-locate-path-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-locate-path-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-locate-path-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.19"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.19-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.19"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.19-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-log-symbols-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-log-symbols-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-log-symbols-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-log-symbols-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-log-symbols-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.5"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-colors-3.2.3"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-browser-stdout-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chokidar-3.3.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.2.6"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-3.5.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-growl-1.10.5"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-he-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-log-symbols-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.3"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-node-environment-flags-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-6.0.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wide-align-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-13.3.2"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-7.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mocha-7.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-7.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ncp-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ncp-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ncp-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ncp-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-node-environment-flags-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-node-environment-flags-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-node-environment-flags-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-node-environment-flags-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-node-environment-flags-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-node-environment-flags-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object-inspect-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-inspect-1.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object-inspect-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-inspect-1.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object-keys-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object-keys-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-es-abstract-1.17.5"
- spdxElementId: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.getownpropertydescriptors-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-limit-2.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-try-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-p-limit-2.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-limit-2.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-limit-2.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-limit-2.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-locate-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-limit-2.2.2"
- spdxElementId: "SPDXRef-Package-NPM-p-locate-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-locate-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-locate-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-locate-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-p-try-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-try-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-p-try-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-p-try-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-picomatch-2.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-picomatch-2.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pump-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readdirp-3.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-picomatch-2.2.2"
- spdxElementId: "SPDXRef-Package-NPM-readdirp-3.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readdirp-3.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readdirp-3.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readdirp-3.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-require-directory-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-require-directory-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-require-directory-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-require-directory-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-require-main-filename-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-require-main-filename-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-require-main-filename-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-require-main-filename-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.15.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.15.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.15.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.15.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.15.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-set-blocking-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-set-blocking-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-set-blocking-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-set-blocking-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-split-ca-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-ca-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-split-ca-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-ca-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-0.8.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-0.8.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ssh2-0.8.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-0.8.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ssh2-0.8.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamsearch-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ssh2-streams-0.4.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ssh2-streams-0.4.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ssh2-streams-0.4.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stack-trace-0.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stack-trace-0.0.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stack-trace-0.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stack-trace-0.0.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-streamsearch-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamsearch-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-streamsearch-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamsearch-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-width-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-width-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-fullwidth-code-point-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-string-width-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-emoji-regex-7.0.3"
- spdxElementId: "SPDXRef-Package-NPM-string-width-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-string-width-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-width-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string.prototype.trimleft-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string.prototype.trimright-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-5.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-5.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-json-comments-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-json-comments-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-6.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-6.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-6.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-6.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-6.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chownr-1.1.4"
- spdxElementId: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.4"
- spdxElementId: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-stream-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-fs-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tar-fs-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-fs-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.6.0"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.4"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bl-4.0.2"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-constants-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-stream-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tar-stream-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-stream-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-number-7.0.0"
- spdxElementId: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-regex-range-5.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-to-regex-range-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-regex-range-5.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tslib-1.11.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tslib-1.11.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.4"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-js-yaml-3.13.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-babel-code-frame-7.8.3"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-builtin-modules-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.20.3"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-4.0.2"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.6"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.15.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsutils-2.29.0"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslint-6.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tslint-6.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslint-6.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tsutils-2.29.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslib-1.11.1"
- spdxElementId: "SPDXRef-Package-NPM-tsutils-2.29.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsutils-2.29.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tsutils-2.29.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tsutils-2.29.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-typedarray-0.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typedarray-0.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-typedarray-0.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typedarray-0.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-circular-json-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-circular-json-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-circular-json-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-circular-json-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-mocha-7.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-mocha-7.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-mocha-7.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-mocha-7.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-node-13.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-13.9.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-node-13.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-13.9.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-stack-trace-0.0.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-stack-trace-0.0.29-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-stack-trace-0.0.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-stack-trace-0.0.29-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-vscode-1.38.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-vscode-1.38.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-vscode-1.38.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-vscode-1.38.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-typescript-3.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.8.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-typescript-3.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vscode-test-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-proxy-agent-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-test-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-https-proxy-agent-2.2.4"
- spdxElementId: "SPDXRef-Package-NPM-vscode-test-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.7.1"
- spdxElementId: "SPDXRef-Package-NPM-vscode-test-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-test-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vscode-test-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-test-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-which-1.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isexe-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-which-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-which-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-1.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-which-module-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-module-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-which-module-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-module-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-wide-align-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-wide-align-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wide-align-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-wide-align-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wide-align-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
- spdxElementId: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrap-ansi-5.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-wrap-ansi-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrap-ansi-5.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-wrappy-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-wrappy-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-y18n-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-y18n-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-y18n-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-y18n-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cliui-5.0.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-width-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-caller-file-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-require-directory-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-require-main-filename-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-set-blocking-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-which-module-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-y18n-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-13.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yargs-13.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-13.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-5.3.1"
- spdxElementId: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-parser-13.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yargs-parser-13.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-parser-13.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-13.3.2"
- spdxElementId: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-flat-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.19"
- spdxElementId: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-unparser-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yargs-unparser-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yargs-unparser-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.google.code.gson-gson-2.8.5"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okhttp3-logging-interceptor-3.14.0"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.squareup.okhttp3-okhttp-3.14.0"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.gsonfire-gson-fire-1.8.3"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.21"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.commons-commons-lang3-3.8.1"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.apache.oltu.oauth2-org.apache.oltu.oauth2.client-1.0.1"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.threeten-threetenbp-1.3.8"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-java-client-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.12"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-joda-2.9.9"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.jaxrs-jackson-jaxrs-json-provider-2.9.9"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.swagger-swagger-annotations-1.5.3"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.validation-validation-api-1.1.0.Final"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.ws.rs-javax.ws.rs-api-2.1.1"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-junit-junit-4.8.1"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-jaxrs-server-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.testng-testng-6.8.8"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-com.fasterxml.jackson.datatype-jackson-datatype-jsr310-2.9.5"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger-ui-2.8.0"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-io.springfox-springfox-swagger2-2.8.0"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-javax.validation-validation-api-2.0.1.Final"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.openapitools-jackson-databind-nullable-0.1.0"
- spdxElementId: "SPDXRef-Project-Maven-org.openapitools-openapi-spring-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-Maven-org.springframework.boot-spring-boot-starter-web-2.0.1.RELEASE"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-circular-json-0.5.9"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-copy-dir-1.2.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dockerode-3.1.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-xml-parser-3.13.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ncp-2.0.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stack-trace-0.0.10"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-7.1.1"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tslint-6.1.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.8.3"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-test-1.3.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-circular-json-0.4.0"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-mocha-7.0.2"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-13.9.3"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-stack-trace-0.0.29"
- spdxElementId: "SPDXRef-Project-NPM-codewind-openapi-tools-0.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-vscode-1.38.0"
