---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-05-23T15:14:53Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://7c688f58-5c37-4c55-b267-c74047771c1b"
documentDescribes:
- "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
packages:
- SPDXID: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://github.com/ioFog/iofog-nodejs-sdk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "nodejs-sdk"
  summary: "NONE"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-ajv-6.10.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@6.10.2"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "6.10.2"
- SPDXID: "SPDXRef-Package-NPM-ajv-6.10.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/epoberezkin/ajv.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@6.10.2"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "6.10.2"
- SPDXID: "SPDXRef-Package-NPM-ajv-6.10.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ajv/-/ajv-6.10.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@6.10.2"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "6.10.2"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-2.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/chalk/ansi-regex.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-regex-2.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ansi-regex/-/ansi-regex-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-regex@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-regex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-regex"
  summary: "Regular expression for matching ANSI escape codes"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-2.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/chalk/ansi-styles.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-2.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ansi-styles/-/ansi-styles-2.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-array-find-index-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-find-index@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-find-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-find-index"
  summary: "ES2015 `Array#findIndex()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-find-index-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/array-find-index.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-find-index@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-find-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-find-index"
  summary: "ES2015 `Array#findIndex()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-find-index-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/array-find-index/-/array-find-index-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-find-index@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-find-index#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-find-index"
  summary: "ES2015 `Array#findIndex()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-asn1.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mcavage/node-assert-plus.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-async-limiter-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async-limiter@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/strml/async-limiter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "async-limiter"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-async-limiter-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/strml/async-limiter.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async-limiter@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/strml/async-limiter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async-limiter"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-async-limiter-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/async-limiter/-/async-limiter-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/async-limiter@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/strml/async-limiter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "async-limiter"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/alexindigo/asynckit.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.7.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/aws-sign.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.7.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.8.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.8.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.8.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mhart/aws4.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.8.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.8.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/aws4/-/aws4-1.8.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.8.0"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-bcrypt-pbkdf.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-camelcase-2.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-2.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-2.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/camelcase/-/camelcase-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase"
  summary: "Convert a dash/dot/underscore/space separated string to camelCase: foo-bar\
    \ → fooBar"
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase-keys@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase-keys"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "camelcase-keys"
  summary: "Convert object keys to camelCase"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/camelcase-keys.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase-keys@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase-keys"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase-keys"
  summary: "Convert object keys to camelCase"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/camelcase-keys/-/camelcase-keys-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/camelcase-keys@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/camelcase-keys"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "camelcase-keys"
  summary: "Convert object keys to camelCase"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/caseless.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-chalk-1.1.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chalk"
  summary: "Terminal string styling done right. Much color."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-chalk-1.1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/chalk/chalk.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right. Much color."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-chalk-1.1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/chalk/-/chalk-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right. Much color."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/felixge/node-combined-stream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.8-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.8"
- SPDXID: "SPDXRef-Package-NPM-console-stamp-0.2.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/console-stamp@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/starak/node-console-stamp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "console-stamp"
  summary: "Patch NodeJS console methods in order to add timestamp information by\
    \ pattern"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-console-stamp-0.2.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/starak/node-console-stamp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/console-stamp@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/starak/node-console-stamp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "console-stamp"
  summary: "Patch NodeJS console methods in order to add timestamp information by\
    \ pattern"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-console-stamp-0.2.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/console-stamp/-/console-stamp-0.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/console-stamp@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/starak/node-console-stamp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "console-stamp"
  summary: "Patch NodeJS console methods in order to add timestamp information by\
    \ pattern"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/isaacs/core-util-is.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/currently-unhandled@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jamestalmage/currently-unhandled#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "currently-unhandled"
  summary: "Track the list of currently unhandled promise rejections."
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jamestalmage/currently-unhandled.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/currently-unhandled@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jamestalmage/currently-unhandled#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "currently-unhandled"
  summary: "Track the list of currently unhandled promise rejections."
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/currently-unhandled/-/currently-unhandled-0.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/currently-unhandled@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jamestalmage/currently-unhandled#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "currently-unhandled"
  summary: "Track the list of currently unhandled promise rejections."
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/trentm/node-dashdash.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dateformat-1.0.12"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dateformat@1.0.12"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-dateformat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "dateformat"
  summary: "A node.js package for Steven Levithan's excellent dateFormat() function."
  versionInfo: "1.0.12"
- SPDXID: "SPDXRef-Package-NPM-dateformat-1.0.12-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/felixge/node-dateformat.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dateformat@1.0.12"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-dateformat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dateformat"
  summary: "A node.js package for Steven Levithan's excellent dateFormat() function."
  versionInfo: "1.0.12"
- SPDXID: "SPDXRef-Package-NPM-dateformat-1.0.12-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/dateformat/-/dateformat-1.0.12.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dateformat@1.0.12"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-dateformat"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dateformat"
  summary: "A node.js package for Steven Levithan's excellent dateFormat() function."
  versionInfo: "1.0.12"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/decamelize.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-decamelize-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/decamelize/-/decamelize-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/decamelize@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/decamelize#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "decamelize"
  summary: "Convert a camelized string into a lowercased one with a custom separator:\
    \ unicornRainbow → unicorn_rainbow"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/felixge/node-delayed-stream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/quartzjer/ecc-jsbn.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/qix-/node-error-ex.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-error-ex-1.3.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/error-ex/-/error-ex-1.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/error-ex@1.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-error-ex#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "error-ex"
  summary: "Easy error subclassing and stack customization"
  versionInfo: "1.3.2"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/escape-string-regexp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/justmoon/node-extend.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/davepacheco/node-extsprintf.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-deep-equal@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-deep-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fast-deep-equal"
  summary: "Fast deep equal"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/epoberezkin/fast-deep-equal.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-deep-equal@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-deep-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-deep-equal"
  summary: "Fast deep equal"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-deep-equal@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-deep-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-deep-equal"
  summary: "Fast deep equal"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-json-stable-stringify@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fast-json-stable-stringify"
  summary: "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify\
    \ without jsonify"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/epoberezkin/fast-json-stable-stringify.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-json-stable-stringify@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-json-stable-stringify"
  summary: "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify\
    \ without jsonify"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-json-stable-stringify@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-json-stable-stringify"
  summary: "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify\
    \ without jsonify"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-find-up-1.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "find-up"
  summary: "Find a file by walking up parent directories"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-find-up-1.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/find-up.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "find-up"
  summary: "Find a file by walking up parent directories"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-find-up-1.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/find-up/-/find-up-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/find-up@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/find-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "find-up"
  summary: "Find a file by walking up parent directories"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/forever-agent.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.3.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.3.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/form-data/form-data.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.3.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-get-stdin-4.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stdin@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stdin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "get-stdin"
  summary: "Easier stdin"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-get-stdin-4.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/get-stdin.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stdin@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stdin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stdin"
  summary: "Easier stdin"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-get-stdin-4.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/get-stdin/-/get-stdin-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-stdin@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/get-stdin"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-stdin"
  summary: "Easier stdin"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/arekinath/node-getpass.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.3"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/isaacs/node-graceful-fs.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.3"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.2.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.2.3"
- SPDXID: "SPDXRef-Package-NPM-har-schema-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-schema-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ahmadnassri/har-schema.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-schema-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-validator-5.1.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@5.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/node-har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "5.1.3"
- SPDXID: "SPDXRef-Package-NPM-har-validator-5.1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ahmadnassri/node-har-validator.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@5.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/node-har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "5.1.3"
- SPDXID: "SPDXRef-Package-NPM-har-validator-5.1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/har-validator/-/har-validator-5.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@5.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/node-har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "5.1.3"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/has-ansi.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-ansi-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/has-ansi/-/has-ansi-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-ansi@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-ansi"
  summary: "Check if a string has ANSI escape codes"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.5"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/npm/hosted-git-info.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.5"
- SPDXID: "SPDXRef-Package-NPM-hosted-git-info-2.8.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/hosted-git-info/-/hosted-git-info-2.8.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/hosted-git-info@2.8.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/hosted-git-info"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "hosted-git-info"
  summary: "Provides metadata and conversions from repository urls for Github, Bitbucket\
    \ and Gitlab"
  versionInfo: "2.8.5"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-http-signature.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-indent-string-2.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/indent-string@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/indent-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "indent-string"
  summary: "Indent each line in a string"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-indent-string-2.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/indent-string.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/indent-string@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/indent-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "indent-string"
  summary: "Indent each line in a string"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-indent-string-2.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/indent-string/-/indent-string-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/indent-string@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/indent-string#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "indent-string"
  summary: "Indent each line in a string"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/qix-/node-is-arrayish.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-arrayish-0.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/is-arrayish/-/is-arrayish-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-arrayish@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/qix-/node-is-arrayish#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-arrayish"
  summary: "Determines if an object can be used as an array"
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-finite-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-finite@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-finite#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-finite"
  summary: "ES2015 Number.isFinite() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-finite-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/is-finite.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-finite@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-finite#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-finite"
  summary: "ES2015 Number.isFinite() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-finite-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/is-finite/-/is-finite-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-finite@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-finite#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-finite"
  summary: "ES2015 Number.isFinite() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/hughsk/is-typedarray.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/wayfind/is-utf8.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/rvagg/isstream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/andyperlitch/jsbn.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.2.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "AFL-2.1 AND BSD-3-Clause"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.2.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/kriszyp/json-schema.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.2.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema-traverse@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/json-schema-traverse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "json-schema-traverse"
  summary: "Traverse JSON Schema passing each schema object to callback"
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/epoberezkin/json-schema-traverse.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema-traverse@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/json-schema-traverse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema-traverse"
  summary: "Traverse JSON Schema passing each schema object to callback"
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema-traverse@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/json-schema-traverse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema-traverse"
  summary: "Traverse JSON Schema passing each schema object to callback"
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/isaacs/json-stringify-safe.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-jsprim.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/load-json-file.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-load-json-file-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/load-json-file/-/load-json-file-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/load-json-file@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/load-json-file"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "load-json-file"
  summary: "Read and parse a JSON file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/loud-rejection@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/loud-rejection#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "loud-rejection"
  summary: "Make unhandled promise rejections fail loudly instead of the default silent\
    \ fail"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-loud-rejection-1.6.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/loud-rejection.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/loud-rejection@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/loud-rejection#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "loud-rejection"
  summary: "Make unhandled promise rejections fail loudly instead of the default silent\
    \ fail"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-loud-rejection-1.6.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/loud-rejection/-/loud-rejection-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/loud-rejection@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/loud-rejection#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "loud-rejection"
  summary: "Make unhandled promise rejections fail loudly instead of the default silent\
    \ fail"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-map-obj-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/map-obj"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "map-obj"
  summary: "Map object keys and values into a new object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-map-obj-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/map-obj.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/map-obj"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-obj"
  summary: "Map object keys and values into a new object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-map-obj-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/map-obj/-/map-obj-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/map-obj"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-obj"
  summary: "Map object keys and values into a new object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-meow-3.7.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/meow@3.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/meow#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "meow"
  summary: "CLI app helper"
  versionInfo: "3.7.0"
- SPDXID: "SPDXRef-Package-NPM-meow-3.7.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/meow.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/meow@3.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/meow#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "meow"
  summary: "CLI app helper"
  versionInfo: "3.7.0"
- SPDXID: "SPDXRef-Package-NPM-meow-3.7.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/meow/-/meow-3.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/meow@3.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/meow#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "meow"
  summary: "CLI app helper"
  versionInfo: "3.7.0"
- SPDXID: "SPDXRef-Package-NPM-merge-1.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/merge@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/yeikos/js.merge"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "merge"
  summary: "Merge multiple objects into one, optionally creating a new cloned object.\
    \ Similar to the jQuery.extend but more flexible. Works in Node.js and the browser."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-merge-1.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/yeikos/js.merge.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/merge@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/yeikos/js.merge"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "merge"
  summary: "Merge multiple objects into one, optionally creating a new cloned object.\
    \ Similar to the jQuery.extend but more flexible. Works in Node.js and the browser."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-merge-1.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/merge/-/merge-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/merge@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/yeikos/js.merge"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "merge"
  summary: "Merge multiple objects into one, optionally creating a new cloned object.\
    \ Similar to the jQuery.extend but more flexible. Works in Node.js and the browser."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.40.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.40.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.40.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.40.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/mime-db.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.40.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.40.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.40.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/mime-db/-/mime-db-1.40.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.40.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.40.0"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.24"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.24"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.24"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.24-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/mime-types.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.24"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.24"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.24-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.24.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.24"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.24"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/minimist.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-minimist-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/minimist/-/minimist-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/npm/normalize-package-data.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/normalize-package-data/-/normalize-package-data-2.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-package-data@2.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/normalize-package-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-package-data"
  summary: "Normalizes data that can be found in package.json files."
  versionInfo: "2.5.0"
- SPDXID: "SPDXRef-Package-NPM-number-is-nan-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/number-is-nan@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/number-is-nan#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "number-is-nan"
  summary: "ES2015 Number.isNaN() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-number-is-nan-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/number-is-nan.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/number-is-nan@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/number-is-nan#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "number-is-nan"
  summary: "ES2015 Number.isNaN() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-number-is-nan-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/number-is-nan/-/number-is-nan-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/number-is-nan@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/number-is-nan#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "number-is-nan"
  summary: "ES2015 Number.isNaN() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.9.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/oauth-sign.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.9.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-object-assign-4.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-assign@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/object-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object-assign"
  summary: "ES2015 `Object.assign()` ponyfill"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-object-assign-4.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/object-assign.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-assign@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/object-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-assign"
  summary: "ES2015 `Object.assign()` ponyfill"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-object-assign-4.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/object-assign/-/object-assign-4.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-assign@4.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/object-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-assign"
  summary: "ES2015 `Object.assign()` ponyfill"
  versionInfo: "4.1.1"
- SPDXID: "SPDXRef-Package-NPM-parse-json-2.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-parse-json-2.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/parse-json.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-parse-json-2.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/parse-json/-/parse-json-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-json@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/parse-json"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-json"
  summary: "Parse JSON with more helpful errors"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-2.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-2.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/path-exists.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-exists-2.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/path-exists/-/path-exists-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-exists@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-exists"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-exists"
  summary: "Check if a path exists"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jbgutierrez/path-parse.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-parse-1.0.6-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/path-parse/-/path-parse-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-parse@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/jbgutierrez/path-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-parse"
  summary: "Node.js path.parse() ponyfill"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-path-type-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-type-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/path-type.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-path-type-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/path-type/-/path-type-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-type@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-type"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-type"
  summary: "Check if a path is a file, directory, or symlink"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-2.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/braveg1rl/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-2.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/braveg1rl/performance-now.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/braveg1rl/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-2.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/braveg1rl/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-pify-2.3.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-pify-2.3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/pify.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-pify-2.3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/pify/-/pify-2.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pify@2.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/pify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pify"
  summary: "Promisify a callback-style function"
  versionInfo: "2.3.0"
- SPDXID: "SPDXRef-Package-NPM-pinkie-2.0.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie@2.0.4"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pinkie"
  summary: "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-pinkie-2.0.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/floatdrop/pinkie.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie@2.0.4"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie"
  summary: "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-pinkie-2.0.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/pinkie/-/pinkie-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie@2.0.4"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie"
  summary: "Itty bitty little widdle twinkie pinkie ES2015 Promise implementation"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie-promise@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/pinkie-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pinkie-promise"
  summary: "ES2015 Promise ponyfill"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/floatdrop/pinkie-promise.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie-promise@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/pinkie-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie-promise"
  summary: "ES2015 Promise ponyfill"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/pinkie-promise/-/pinkie-promise-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pinkie-promise@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/floatdrop/pinkie-promise"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pinkie-promise"
  summary: "ES2015 Promise ponyfill"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-psl-1.4.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/psl@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/lupomontero/psl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "psl"
  summary: "Domain name parser based on the Public Suffix List"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-psl-1.4.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/lupomontero/psl.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/psl@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/lupomontero/psl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "psl"
  summary: "Domain name parser based on the Public Suffix List"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-psl-1.4.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/psl/-/psl-1.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/psl@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/lupomontero/psl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "psl"
  summary: "Domain name parser based on the Public Suffix List"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/bestiejs/punycode.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-2.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@2.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-2.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/bestiejs/punycode.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@2.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-2.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@2.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-qs-6.5.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.5.2"
- SPDXID: "SPDXRef-Package-NPM-qs-6.5.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/qs.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.5.2"
- SPDXID: "SPDXRef-Package-NPM-qs-6.5.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.5.2"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/read-pkg.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/read-pkg/-/read-pkg-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg"
  summary: "Read a package.json file"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg-up@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "read-pkg-up"
  summary: "Read the closest package.json file"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/read-pkg-up.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg-up@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg-up"
  summary: "Read the closest package.json file"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/read-pkg-up/-/read-pkg-up-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read-pkg-up@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/read-pkg-up"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read-pkg-up"
  summary: "Read the closest package.json file"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-redent-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/redent@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/redent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "redent"
  summary: "Strip redundant indentation and indent the string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-redent-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/redent.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/redent@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/redent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "redent"
  summary: "Strip redundant indentation and indent the string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-redent-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/redent/-/redent-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/redent@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/redent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "redent"
  summary: "Strip redundant indentation and indent the string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-repeating-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeating@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/repeating#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "repeating"
  summary: "Repeat a string - fast"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-repeating-2.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/repeating.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeating@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/repeating#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "repeating"
  summary: "Repeat a string - fast"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-repeating-2.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/repeating/-/repeating-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/repeating@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/repeating#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "repeating"
  summary: "Repeat a string - fast"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-request-2.88.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.88.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.88.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.88.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/request/request.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.88.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.88.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.88.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/request/-/request-2.88.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.88.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.88.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.12.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.12.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/browserify/resolve.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-1.12.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/resolve/-/resolve-1.12.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve@1.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/browserify/resolve#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve"
  summary: "resolve like require.resolve() on behalf of files asynchronously and synchronously"
  versionInfo: "1.12.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/feross/safe-buffer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.0"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ChALkeR/safer-buffer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/npm/node-semver.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/semver/-/semver-5.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.7.1"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/tapjs/signal-exit.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-signal-exit-3.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/signal-exit/-/signal-exit-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/signal-exit@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/tapjs/signal-exit"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "signal-exit"
  summary: "when you want to fire an event no matter how a process exits."
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jslicense/spdx-correct.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-correct-3.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/spdx-correct/-/spdx-correct-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-correct@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-correct.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-correct"
  summary: "correct invalid SPDX expressions"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC-BY-3.0"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/kemitchell/spdx-exceptions.json.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/spdx-exceptions/-/spdx-exceptions-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-exceptions@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/spdx-exceptions.json#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-exceptions"
  summary: "list of SPDX standard license exceptions"
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jslicense/spdx-expression-parse.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/spdx-expression-parse/-/spdx-expression-parse-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-expression-parse@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jslicense/spdx-expression-parse.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-expression-parse"
  summary: "parse SPDX license expressions"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/shinnn/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "CC0-1.0"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.5"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/shinnn/spdx-license-ids.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/shinnn/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.5"
- SPDXID: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/spdx-license-ids/-/spdx-license-ids-3.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/spdx-license-ids@3.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/shinnn/spdx-license-ids#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "spdx-license-ids"
  summary: "A list of SPDX license identifiers"
  versionInfo: "3.0.5"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.16.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.16.1"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.16.1"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.16.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-sshpk.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.16.1"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.16.1"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.16.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/sshpk/-/sshpk-1.16.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.16.1"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.16.1"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-3.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/chalk/strip-ansi.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-ansi-3.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/strip-ansi/-/strip-ansi-3.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-ansi@3.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/strip-ansi"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-ansi"
  summary: "Strip ANSI escape codes"
  versionInfo: "3.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string/buffer"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/strip-bom.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string/buffer"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-bom-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/strip-bom/-/strip-bom-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-bom@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-bom"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-bom"
  summary: "Strip UTF-8 byte order mark (BOM) from a string/buffer"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-indent@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-indent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "strip-indent"
  summary: "Strip leading whitespace from every line in a string"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-indent-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/strip-indent.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-indent@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-indent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-indent"
  summary: "Strip leading whitespace from every line in a string"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-strip-indent-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/strip-indent/-/strip-indent-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/strip-indent@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/strip-indent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "strip-indent"
  summary: "Strip leading whitespace from every line in a string"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-supports-color-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/chalk/supports-color.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.4.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/salesforce/tough-cookie.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.4.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.4.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/trim-newlines@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/trim-newlines"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "trim-newlines"
  summary: "Trim newlines from the start and/or end of a string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-trim-newlines-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/sindresorhus/trim-newlines.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/trim-newlines@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/trim-newlines"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "trim-newlines"
  summary: "Trim newlines from the start and/or end of a string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-trim-newlines-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/trim-newlines/-/trim-newlines-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/trim-newlines@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/trim-newlines"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "trim-newlines"
  summary: "Trim newlines from the start and/or end of a string"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/tunnel-agent.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "Unlicense"
  licenseDeclared: "Unlicense"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dchest/tweetnacl-js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-uri-js-4.2.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-js@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/garycourt/uri-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "uri-js"
  summary: "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving\
    \ library for JavaScript."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-uri-js-4.2.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/garycourt/uri-js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-js@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/garycourt/uri-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uri-js"
  summary: "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving\
    \ library for JavaScript."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-uri-js-4.2.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/uri-js/-/uri-js-4.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-js@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/garycourt/uri-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uri-js"
  summary: "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving\
    \ library for JavaScript."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.3.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/kelektiv/node-uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.3.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/kelektiv/node-uuid.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/kelektiv/node-uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.3.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/uuid/-/uuid-3.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/kelektiv/node-uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.3.3"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/kemitchell/validate-npm-package-license.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/validate-npm-package-license/-/validate-npm-package-license-3.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/validate-npm-package-license@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/kemitchell/validate-npm-package-license.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "validate-npm-package-license"
  summary: "Give me a string and I'll tell you if it's a valid npm package license\
    \ string"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/davepacheco/node-verror.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-ws-7.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ws@7.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/websockets/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ws"
  summary: "Simple to use, blazing fast and thoroughly tested websocket client and\
    \ server for Node.js"
  versionInfo: "7.2.0"
- SPDXID: "SPDXRef-Package-NPM-ws-7.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/websockets/ws.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ws@7.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/websockets/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ws"
  summary: "Simple to use, blazing fast and thoroughly tested websocket client and\
    \ server for Node.js"
  versionInfo: "7.2.0"
- SPDXID: "SPDXRef-Package-NPM-ws-7.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ws/-/ws-7.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ws@7.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/websockets/ws"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ws"
  summary: "Simple to use, blazing fast and thoroughly tested websocket client and\
    \ server for Node.js"
  versionInfo: "7.2.0"
relationships:
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.10.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.10.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.10.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.10.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-js-4.2.2"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.10.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-6.10.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.10.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-6.10.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-2.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-2.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-find-index-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-find-index-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-find-index-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-find-index-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-async-limiter-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-limiter-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-async-limiter-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-limiter-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-aws4-1.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.8.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-aws4-1.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-keys-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-caseless-0.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-caseless-0.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-2.2.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chalk-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-console-stamp-0.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dateformat-1.0.12"
- spdxElementId: "SPDXRef-Package-NPM-console-stamp-0.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-merge-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-console-stamp-0.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-console-stamp-0.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-console-stamp-0.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-console-stamp-0.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-console-stamp-0.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-find-index-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-currently-unhandled-0.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dateformat-1.0.12"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-dateformat-1.0.12"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-meow-3.7.0"
- spdxElementId: "SPDXRef-Package-NPM-dateformat-1.0.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dateformat-1.0.12-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dateformat-1.0.12"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dateformat-1.0.12-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-decamelize-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-decamelize-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-error-ex-1.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extend-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extend-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-find-up-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-get-stdin-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-get-stdin-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-har-schema-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-har-schema-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-6.10.2"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-5.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-5.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-ansi-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-ansi-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-hosted-git-info-2.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-hosted-git-info-2.8.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.16.1"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-indent-string-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeating-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-indent-string-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-indent-string-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-indent-string-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-indent-string-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-arrayish-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-arrayish-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-finite-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-number-is-nan-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-is-finite-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-finite-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-finite-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-finite-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isstream-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isstream-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsbn-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsbn-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.2.3"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.3"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-load-json-file-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-currently-unhandled-0.4.1"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-loud-rejection-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-loud-rejection-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-map-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-map-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-camelcase-keys-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-obj-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-decamelize-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-loud-rejection-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-redent-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-meow-3.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-meow-3.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-meow-3.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-merge-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-merge-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-merge-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-merge-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.40.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.40.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.40.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.40.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.24"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.40.0"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimist-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-hosted-git-info-2.8.5"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-number-is-nan-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-number-is-nan-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-number-is-nan-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-number-is-nan-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.9.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object-assign-4.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object-assign-4.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-assign-4.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-error-ex-1.3.2"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parse-json-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-json-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-exists-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-exists-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-parse-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.2.3"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-type-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-performance-now-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-performance-now-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pify-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pify-2.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pify-2.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pinkie-promise-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pinkie-promise-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-psl-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-psl-1.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-psl-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-psl-1.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-punycode-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-punycode-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-punycode-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-punycode-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-package-data-2.5.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-load-json-file-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-type-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-find-up-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-read-pkg-up-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-pkg-up-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-indent-string-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-indent-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-redent-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-redent-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-redent-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-repeating-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-finite-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-repeating-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeating-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-repeating-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-repeating-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.8.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.8"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.3.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.24"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-5.1.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.5.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.3.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.12.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-parse-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-resolve-1.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-1.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-signal-exit-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-signal-exit-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-signal-exit-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-exceptions-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-license-ids-3.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.16.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.16.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-regex-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-3.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-ansi-3.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-ansi-3.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-bom-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-bom-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-stdin-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-indent-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-strip-indent-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-strip-indent-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-psl-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.4.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.4.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-trim-newlines-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-trim-newlines-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-trim-newlines-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.0"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uri-js-4.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-uri-js-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-js-4.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uri-js-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-js-4.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uuid-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uuid-3.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-correct-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-spdx-expression-parse-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-validate-npm-package-license-3.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ws-7.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-async-limiter-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-ws-7.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ws-7.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ws-7.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ws-7.2.0-source-artifact"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-console-stamp-0.2.2"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ws-7.2.0"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-2.0.0"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chai-4.2.0"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-6.2.2"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-proxyquire-2.1.3"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sinon-7.5.0"
- spdxElementId: "SPDXRef-Project-NPM-iofog-nodejs-sdk-1.3.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-standard-14.3.1"
