---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-03-29T15:10:42Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://558c9879-9a3f-47a0-84fd-4598f8be9341"
documentDescribes:
- "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
packages:
- SPDXID: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  copyrightText: "Copyright (c) 2019 QNX Software Systems and others"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-2.0"
  name: "cdt-vscode"
  summary: "NONE"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-ajv-6.9.2"
  copyrightText: "Copyright (c) 2012 Julian Berman\nCopyright (c) 2015-2017 Evgeny\
    \ Poberezkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@6.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "6.9.2"
- SPDXID: "SPDXRef-Package-NPM-ajv-6.9.2-vcs"
  copyrightText: "Copyright (c) 2012 Julian Berman\nCopyright (c) 2015-2017 Evgeny\
    \ Poberezkin"
  downloadLocation: "git+https://github.com/epoberezkin/ajv.git@2aa49aebd4e19c4e4e120424a6ed77990c95e591"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@6.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "6.9.2"
- SPDXID: "SPDXRef-Package-NPM-ajv-6.9.2-source-artifact"
  copyrightText: "Copyright (c) 2012 Julian Berman\nCopyright (c) 2015-2017 Evgeny\
    \ Poberezkin"
  downloadLocation: "https://registry.npmjs.org/ajv/-/ajv-6.9.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ajv@6.9.2"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/ajv"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ajv"
  summary: "Another JSON Schema Validator"
  versionInfo: "6.9.2"
- SPDXID: "SPDXRef-Package-NPM-ansi-cyan-0.1.1"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-cyan@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-cyan"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-cyan"
  summary: "The color cyan, in ansi."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-cyan-0.1.1-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/ansi-cyan.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-cyan@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-cyan"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-cyan"
  summary: "The color cyan, in ansi."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-cyan-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/ansi-cyan/-/ansi-cyan-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-cyan@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-cyan"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-cyan"
  summary: "The color cyan, in ansi."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-red-0.1.1"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-red@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-red"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-red"
  summary: "The color red, in ansi."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-red-0.1.1-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/ansi-red.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-red@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-red"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-red"
  summary: "The color red, in ansi."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-red-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/ansi-red/-/ansi-red-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-red@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-red"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-red"
  summary: "The color red, in ansi."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/ansi-styles.git@de7527a86c1cf49906b0eb32a0de1402d849ccc2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-styles-3.2.1-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/ansi-styles/-/ansi-styles-3.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-styles@3.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/ansi-styles#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-styles"
  summary: "ANSI escape codes for styling strings in the terminal"
  versionInfo: "3.2.1"
- SPDXID: "SPDXRef-Package-NPM-ansi-wrap-0.1.0"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-wrap@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-wrap"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ansi-wrap"
  summary: "Create ansi colors by passing the open and close codes."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-wrap-0.1.0-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/ansi-wrap.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-wrap@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-wrap"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-wrap"
  summary: "Create ansi colors by passing the open and close codes."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-ansi-wrap-0.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/ansi-wrap/-/ansi-wrap-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ansi-wrap@0.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/ansi-wrap"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ansi-wrap"
  summary: "Create ansi colors by passing the open and close codes."
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-append-buffer-1.0.2"
  copyrightText: "Copyright (c) 2017 Brian Woodward\nCopyright (c) 2017 Brian Woodward\
    \ (https://doowb.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/append-buffer@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/doowb/append-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "append-buffer"
  summary: "Append a buffer to another buffer ensuring to preserve line ending characters."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-append-buffer-1.0.2-vcs"
  copyrightText: "Copyright (c) 2017 Brian Woodward\nCopyright (c) 2017 Brian Woodward\
    \ (https://doowb.com)"
  downloadLocation: "git+https://github.com/doowb/append-buffer.git@ee617be915a410b5aef59e8f02a551299dd7424e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/append-buffer@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/doowb/append-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "append-buffer"
  summary: "Append a buffer to another buffer ensuring to preserve line ending characters."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-append-buffer-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2017 Brian Woodward\nCopyright (c) 2017 Brian Woodward\
    \ (https://doowb.com)"
  downloadLocation: "https://registry.npmjs.org/append-buffer/-/append-buffer-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/append-buffer@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/doowb/append-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "append-buffer"
  summary: "Append a buffer to another buffer ensuring to preserve line ending characters."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10-vcs"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "git+https://github.com/nodeca/argparse.git@ea45e14bad13b9e4a10af28f11fb7e731079ab72"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-argparse-1.0.10-source-artifact"
  copyrightText: "Copyright (c) 2012 Vitaly Puzrin (https://github.com/puzrin)\nCopyright\
    \ (c) 2012 by Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/argparse/-/argparse-1.0.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/argparse@1.0.10"
  filesAnalyzed: false
  homepage: "https://github.com/nodeca/argparse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "argparse"
  summary: "Very powerful CLI arguments parser. Native port of argparse - python's\
    \ options parsing library"
  versionInfo: "1.0.10"
- SPDXID: "SPDXRef-Package-NPM-arr-diff-1.1.0"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-diff@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "arr-diff"
  summary: "Returns an array with only the unique values from the first array, by\
    \ excluding all values from additional arrays using strict equality for comparisons."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-diff-1.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/arr-diff.git@a749b8f9a21dae711050a14e580860abe7299a01"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-diff@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arr-diff"
  summary: "Returns an array with only the unique values from the first array, by\
    \ excluding all values from additional arrays using strict equality for comparisons."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-diff-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/arr-diff/-/arr-diff-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-diff@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-diff"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arr-diff"
  summary: "Returns an array with only the unique values from the first array, by\
    \ excluding all values from additional arrays using strict equality for comparisons."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-flatten-1.1.0"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-flatten@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-flatten"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "arr-flatten"
  summary: "Recursively flatten an array or arrays."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-flatten-1.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/arr-flatten.git@76a1ae28b03fdb1cbe5d49fa521bc4807b9f94d3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-flatten@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-flatten"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arr-flatten"
  summary: "Recursively flatten an array or arrays."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-flatten-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/arr-flatten/-/arr-flatten-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-flatten@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-flatten"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arr-flatten"
  summary: "Recursively flatten an array or arrays."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-union-2.1.0"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-union@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-union"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "arr-union"
  summary: "Combines a list of arrays, returning a single array with unique values,\
    \ using strict equality for comparisons."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-union-2.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/arr-union.git@2eb911d44a165f0e2009c61cc10f65454a1049e3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-union@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-union"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arr-union"
  summary: "Combines a list of arrays, returning a single array with unique values,\
    \ using strict equality for comparisons."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-arr-union-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/arr-union/-/arr-union-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arr-union@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/arr-union"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arr-union"
  summary: "Combines a list of arrays, returning a single array with unique values,\
    \ using strict equality for comparisons."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-array-differ-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-differ@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-differ"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-differ"
  summary: "Create an array with values that are present in the first input array\
    \ but not additional ones"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-array-differ-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/array-differ.git@e91802976c4710eef8dea2090d48e48525cf41b1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-differ@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-differ"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-differ"
  summary: "Create an array with values that are present in the first input array\
    \ but not additional ones"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-array-differ-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/array-differ/-/array-differ-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-differ@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-differ"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-differ"
  summary: "Create an array with values that are present in the first input array\
    \ but not additional ones"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-array-slice-0.2.3"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas\n(c) 2012-2015 The Dojo Foundation.copyright\n\
    Copyright (c) 2014-2015 Jon\nCopyright (c) 2014-2015 Jon Schlinkert\nCopyright\
    \ 2009-2014 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright 2012-2014 The Dojo Foundation <http://dojofoundation.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-slice@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/array-slice"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-slice"
  summary: "Array-slice method. Slices `array` from the `start` index up to, but not\
    \ including, the `end` index."
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-array-slice-0.2.3-vcs"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas\n(c) 2012-2015 The Dojo Foundation.copyright\n\
    Copyright (c) 2014-2015 Jon\nCopyright (c) 2014-2015 Jon Schlinkert\nCopyright\
    \ 2009-2014 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright 2012-2014 The Dojo Foundation <http://dojofoundation.org/>"
  downloadLocation: "git+https://github.com/jonschlinkert/array-slice.git@15bcb1d3d2d5689a1f519207cecb3ab3a63b8654"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-slice@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/array-slice"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-slice"
  summary: "Array-slice method. Slices `array` from the `start` index up to, but not\
    \ including, the `end` index."
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-array-slice-0.2.3-source-artifact"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas\n(c) 2012-2015 The Dojo Foundation.copyright\n\
    Copyright (c) 2014-2015 Jon\nCopyright (c) 2014-2015 Jon Schlinkert\nCopyright\
    \ 2009-2014 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright 2012-2014 The Dojo Foundation <http://dojofoundation.org/>"
  downloadLocation: "https://registry.npmjs.org/array-slice/-/array-slice-0.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-slice@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/array-slice"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-slice"
  summary: "Array-slice method. Slices `array` from the `start` index up to, but not\
    \ including, the `end` index."
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-array-union-1.0.2"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-union@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-union#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-union"
  summary: "Create an array of unique values, in order, from the input arrays"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-union-1.0.2-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/array-union.git@34e1d6a80baa4eac9723795a0674c14119ace1bd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-union@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-union#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-union"
  summary: "Create an array of unique values, in order, from the input arrays"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-union-1.0.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/array-union/-/array-union-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-union@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-union#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-union"
  summary: "Create an array of unique values, in order, from the input arrays"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-array-uniq-1.0.3"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-uniq@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-uniq#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-uniq"
  summary: "Create an array without duplicates"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-array-uniq-1.0.3-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/array-uniq.git@3b5bf5a90a585b3950284d575f33d09663f6083a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-uniq@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-uniq#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-uniq"
  summary: "Create an array without duplicates"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-array-uniq-1.0.3-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/array-uniq/-/array-uniq-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-uniq@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/array-uniq#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-uniq"
  summary: "Create an array without duplicates"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-arrify-1.0.1"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arrify@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/arrify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "arrify"
  summary: "Convert a value to an array"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-arrify-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/arrify.git@087edee1a58d5adaac6cae5a107886121ef43783"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arrify@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/arrify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arrify"
  summary: "Convert a value to an array"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-arrify-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/arrify/-/arrify-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/arrify@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/arrify#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "arrify"
  summary: "Convert a value to an array"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2018 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4-vcs"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2018 Joyent, Inc."
  downloadLocation: "git+https://github.com/joyent/node-asn1.git@a80f9f24f17a915a8b8634cb72cd55af3f724f6d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-asn1-0.2.4-source-artifact"
  copyrightText: "Copyright (c) 2011 Mark Cavage\nCopyright (c) 2014, 2017-2018 Joyent,\
    \ Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Mark Cavage <mcavage@gmail.com>\n\
    Copyright 2017 Joyent, Inc.\nCopyright 2018 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/asn1/-/asn1-0.2.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asn1@0.2.4"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-asn1#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asn1"
  summary: "Contains parsers and serializers for ASN.1 (currently BER only)"
  versionInfo: "0.2.4"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "git+https://github.com/mcavage/node-assert-plus.git@a06bafe36ee5cdcc668fb3569c668df9a50fae28"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-assert-plus-1.0.0-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Mark Cavage\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2015 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "https://registry.npmjs.org/assert-plus/-/assert-plus-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/assert-plus@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mcavage/node-assert-plus#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "assert-plus"
  summary: "Extra assertions on top of node's assert module"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "git+https://github.com/alexindigo/asynckit.git@583a75ed4fe41761b66416bb6e703ebb1f8963bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Alex Indigo"
  downloadLocation: "https://registry.npmjs.org/asynckit/-/asynckit-0.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/asynckit@0.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/alexindigo/asynckit#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "asynckit"
  summary: "Minimal async jobs utility library, with streams support"
  versionInfo: "0.4.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
  copyrightText: "Copyright 2010 LearnBoost <dev@learnboost.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.7.0-vcs"
  copyrightText: "Copyright 2010 LearnBoost <dev@learnboost.com>"
  downloadLocation: "git+https://github.com/mikeal/aws-sign.git@a0cdf4b61f80ca669cd1ed8482f978d908f0dd2b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-aws-sign2-0.7.0-source-artifact"
  copyrightText: "Copyright 2010 LearnBoost <dev@learnboost.com>"
  downloadLocation: "https://registry.npmjs.org/aws-sign2/-/aws-sign2-0.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws-sign2@0.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/aws-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws-sign2"
  summary: "AWS signing. Originally pulled from LearnBoost/knox, maintained as vendor\
    \ in request, now a standalone module."
  versionInfo: "0.7.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.8.0"
  copyrightText: "Copyright 2013 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.8.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.8.0-vcs"
  copyrightText: "Copyright 2013 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "git+https://github.com/mhart/aws4.git@1f450081cdc783c878e0b54df5653eef5a7b6fec"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.8.0"
- SPDXID: "SPDXRef-Package-NPM-aws4-1.8.0-source-artifact"
  copyrightText: "Copyright 2013 Michael Hart (michael.hart.au@gmail.com)"
  downloadLocation: "https://registry.npmjs.org/aws4/-/aws4-1.8.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/aws4@1.8.0"
  filesAnalyzed: false
  homepage: "https://github.com/mhart/aws4#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "aws4"
  summary: "Signs and prepares requests using AWS Signature Version 4"
  versionInfo: "1.8.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/balanced-match.git@d701a549a7653a874eebce7eca25d3577dc868ac"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-balanced-match-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/balanced-match/-/balanced-match-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/balanced-match@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/balanced-match"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "balanced-match"
  summary: "Match balanced character pairs, like \"{\" and \"}\""
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "git+https://github.com/joyent/node-bcrypt-pbkdf.git@15fa7399a1090ba70d855764f7ace23003bf45f3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright 1997\
    \ Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2016 Joyent Inc"
  downloadLocation: "https://registry.npmjs.org/bcrypt-pbkdf/-/bcrypt-pbkdf-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bcrypt-pbkdf@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-bcrypt-pbkdf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bcrypt-pbkdf"
  summary: "Port of the OpenBSD bcrypt_pbkdf function to pure JS"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-block-stream-0.0.9"
  copyrightText: "Copyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac Z. Schlueter\
    \ and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/block-stream@0.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/block-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "block-stream"
  summary: "a stream of blocks"
  versionInfo: "0.0.9"
- SPDXID: "SPDXRef-Package-NPM-block-stream-0.0.9-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac Z. Schlueter\
    \ and Contributors"
  downloadLocation: "git+https://github.com/isaacs/block-stream.git@321cf242ef6d130bb2e59c0565a61ded5dd2673f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/block-stream@0.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/block-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "block-stream"
  summary: "a stream of blocks"
  versionInfo: "0.0.9"
- SPDXID: "SPDXRef-Package-NPM-block-stream-0.0.9-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac Z. Schlueter\
    \ and Contributors"
  downloadLocation: "https://registry.npmjs.org/block-stream/-/block-stream-0.0.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/block-stream@0.0.9"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/block-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "block-stream"
  summary: "a stream of blocks"
  versionInfo: "0.0.9"
- SPDXID: "SPDXRef-Package-NPM-boolbase-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boolbase@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/boolbase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "boolbase"
  summary: "two functions: One that returns true, one that returns false"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-boolbase-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/fb55/boolbase.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boolbase@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/boolbase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boolbase"
  summary: "two functions: One that returns true, one that returns false"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-boolbase-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/boolbase/-/boolbase-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/boolbase@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/boolbase"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "boolbase"
  summary: "two functions: One that returns true, one that returns false"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/brace-expansion.git@01a21de7441549d26ac0c0a9ff91385d16e5c21c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-brace-expansion-1.1.11-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/brace-expansion/-/brace-expansion-1.1.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/brace-expansion@1.1.11"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/brace-expansion"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "brace-expansion"
  summary: "Brace expansion as known from sh/bash"
  versionInfo: "1.1.11"
- SPDXID: "SPDXRef-Package-NPM-browser-stdout-1.3.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browser-stdout@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/kumavis/browser-stdout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "browser-stdout"
  summary: "`process.stdout` in your browser."
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-browser-stdout-1.3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+ssh://github.com/kumavis/browser-stdout.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browser-stdout@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/kumavis/browser-stdout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "browser-stdout"
  summary: "`process.stdout` in your browser."
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-browser-stdout-1.3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/browser-stdout/-/browser-stdout-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/browser-stdout@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/kumavis/browser-stdout#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "browser-stdout"
  summary: "`process.stdout` in your browser."
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-crc32-0.2.13"
  copyrightText: "Copyright (c) 2013 Brian J. Brennan"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-crc32@0.2.13"
  filesAnalyzed: false
  homepage: "https://github.com/brianloveswords/buffer-crc32"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "buffer-crc32"
  summary: "A pure javascript CRC32 algorithm that plays nice with binary data"
  versionInfo: "0.2.13"
- SPDXID: "SPDXRef-Package-NPM-buffer-crc32-0.2.13-vcs"
  copyrightText: "Copyright (c) 2013 Brian J. Brennan"
  downloadLocation: "git+https://github.com/brianloveswords/buffer-crc32.git@e9b66c7356f4ea6f7c2f89d51160a1ef6117849f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-crc32@0.2.13"
  filesAnalyzed: false
  homepage: "https://github.com/brianloveswords/buffer-crc32"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-crc32"
  summary: "A pure javascript CRC32 algorithm that plays nice with binary data"
  versionInfo: "0.2.13"
- SPDXID: "SPDXRef-Package-NPM-buffer-crc32-0.2.13-source-artifact"
  copyrightText: "Copyright (c) 2013 Brian J. Brennan"
  downloadLocation: "https://registry.npmjs.org/buffer-crc32/-/buffer-crc32-0.2.13.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-crc32@0.2.13"
  filesAnalyzed: false
  homepage: "https://github.com/brianloveswords/buffer-crc32"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-crc32"
  summary: "A pure javascript CRC32 algorithm that plays nice with binary data"
  versionInfo: "0.2.13"
- SPDXID: "SPDXRef-Package-NPM-buffer-equal-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-equal@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-buffer-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "buffer-equal"
  summary: "return whether two buffers are equal"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-equal-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/node-buffer-equal.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-equal@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-buffer-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-equal"
  summary: "return whether two buffers are equal"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-equal-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/buffer-equal/-/buffer-equal-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-equal@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-buffer-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-equal"
  summary: "return whether two buffers are equal"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.1"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.1-vcs"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "git+https://github.com/LinusU/buffer-from.git@53f464194ae30e806f6faef635202b4dfd404ed5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-buffer-from-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2016, 2018 Linus Unneback"
  downloadLocation: "https://registry.npmjs.org/buffer-from/-/buffer-from-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/buffer-from@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/LinusU/buffer-from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "buffer-from"
  summary: "A [ponyfill](https://ponyfill.com) for `Buffer.from`, uses native implementation\
    \ if available."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/caseless.git@af91df7878a8b53cf3dc2e9a086dc57ba8301649"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-caseless-0.12.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/caseless/-/caseless-0.12.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/caseless@0.12.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/caseless#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "Caseless object set/get/has, very useful when working with HTTP headers."
  versionInfo: "0.12.0"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/chalk.git@9776a2ae5b5b1712ccf16416b55f47e575a81fb9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-chalk-2.4.2-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/chalk/-/chalk-2.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chalk@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/chalk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chalk"
  summary: "Terminal string styling done right"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  copyrightText: "Copyright (c) 2003-2014 </p>\nCopyright (c) 2003-2014 </p> </html>\n\
    Copyright (c) 2016 Matt Mueller\nCopyright 2013 https://jquery.org/team/ src null'\
    \ The jQuery Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cheerio@1.0.0-rc.2"
  filesAnalyzed: false
  homepage: "https://github.com/cheeriojs/cheerio#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cheerio"
  summary: "Tiny, fast, and elegant implementation of core jQuery designed specifically\
    \ for the server"
  versionInfo: "1.0.0-rc.2"
- SPDXID: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2-vcs"
  copyrightText: "Copyright (c) 2003-2014 </p>\nCopyright (c) 2003-2014 </p> </html>\n\
    Copyright (c) 2016 Matt Mueller\nCopyright 2013 https://jquery.org/team/ src null'\
    \ The jQuery Foundation"
  downloadLocation: "git+https://github.com/cheeriojs/cheerio.git@48eae25c93702a29b8cd0d09c4a2dce2f912d1f4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cheerio@1.0.0-rc.2"
  filesAnalyzed: false
  homepage: "https://github.com/cheeriojs/cheerio#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cheerio"
  summary: "Tiny, fast, and elegant implementation of core jQuery designed specifically\
    \ for the server"
  versionInfo: "1.0.0-rc.2"
- SPDXID: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2-source-artifact"
  copyrightText: "Copyright (c) 2003-2014 </p>\nCopyright (c) 2003-2014 </p> </html>\n\
    Copyright (c) 2016 Matt Mueller\nCopyright 2013 https://jquery.org/team/ src null'\
    \ The jQuery Foundation"
  downloadLocation: "https://registry.npmjs.org/cheerio/-/cheerio-1.0.0-rc.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cheerio@1.0.0-rc.2"
  filesAnalyzed: false
  homepage: "https://github.com/cheeriojs/cheerio#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cheerio"
  summary: "Tiny, fast, and elegant implementation of core jQuery designed specifically\
    \ for the server"
  versionInfo: "1.0.0-rc.2"
- SPDXID: "SPDXRef-Package-NPM-chownr-1.1.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chownr@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/chownr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "chownr"
  summary: "like `chown -R`"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-chownr-1.1.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/chownr.git@7a5c3d57c3691eebb9c66fa00fa6003d02ef9440"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chownr@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/chownr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chownr"
  summary: "like `chown -R`"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-chownr-1.1.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/chownr/-/chownr-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/chownr@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/chownr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "chownr"
  summary: "like `chown -R`"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-clone-0.2.0"
  copyrightText: "Copyright (c) 2011-2014 Paul Vorbach (http://paul.vorba.ch/) and\
    \ contributors (https://github.com/pvorb/node-clone/graphs/contributors)\nCopyright\
    \ (c) 2011-2014 Paul Vorbach <paul@vorba.ch>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-clone-0.2.0-vcs"
  copyrightText: "Copyright (c) 2011-2014 Paul Vorbach (http://paul.vorba.ch/) and\
    \ contributors (https://github.com/pvorb/node-clone/graphs/contributors)\nCopyright\
    \ (c) 2011-2014 Paul Vorbach <paul@vorba.ch>"
  downloadLocation: "git+https://github.com/pvorb/node-clone.git@bb11a43363a0f69e8ac014cb5376ce215ea1f8fd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-clone-0.2.0-source-artifact"
  copyrightText: "Copyright (c) 2011-2014 Paul Vorbach (http://paul.vorba.ch/) and\
    \ contributors (https://github.com/pvorb/node-clone/graphs/contributors)\nCopyright\
    \ (c) 2011-2014 Paul Vorbach <paul@vorba.ch>"
  downloadLocation: "https://registry.npmjs.org/clone/-/clone-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-clone-1.0.4"
  copyrightText: "Copyright (c) 2011-2015 Paul Vorbach (http://paul.vorba.ch/) and\
    \ contributors (https://github.com/pvorb/node-clone/graphs/contributors)\nCopyright\
    \ (c) 2011-2015 Paul Vorbach <paul@vorba.ch>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-clone-1.0.4-vcs"
  copyrightText: "Copyright (c) 2011-2015 Paul Vorbach (http://paul.vorba.ch/) and\
    \ contributors (https://github.com/pvorb/node-clone/graphs/contributors)\nCopyright\
    \ (c) 2011-2015 Paul Vorbach <paul@vorba.ch>"
  downloadLocation: "git+https://github.com/pvorb/node-clone.git@3095b1b4182ea1babc453b3a46924754831b66bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-clone-1.0.4-source-artifact"
  copyrightText: "Copyright (c) 2011-2015 Paul Vorbach (http://paul.vorba.ch/) and\
    \ contributors (https://github.com/pvorb/node-clone/graphs/contributors)\nCopyright\
    \ (c) 2011-2015 Paul Vorbach <paul@vorba.ch>"
  downloadLocation: "https://registry.npmjs.org/clone/-/clone-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-clone-2.1.2"
  copyrightText: "Copyright (c) 2011-2015 Paul Vorbach <paul@vorba.ch>\nCopyright\
    \ (c) 2011-2016 Paul Vorbach (https://paul.vorba.ch/) and contributors (https://github.com/pvorb/clone/graphs/contributors)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-clone-2.1.2-vcs"
  copyrightText: "Copyright (c) 2011-2015 Paul Vorbach <paul@vorba.ch>\nCopyright\
    \ (c) 2011-2016 Paul Vorbach (https://paul.vorba.ch/) and contributors (https://github.com/pvorb/clone/graphs/contributors)"
  downloadLocation: "git+https://github.com/pvorb/node-clone.git@765941803d27761a6008cb1aa32b199f0c42deb2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-clone-2.1.2-source-artifact"
  copyrightText: "Copyright (c) 2011-2015 Paul Vorbach <paul@vorba.ch>\nCopyright\
    \ (c) 2011-2016 Paul Vorbach (https://paul.vorba.ch/) and contributors (https://github.com/pvorb/clone/graphs/contributors)"
  downloadLocation: "https://registry.npmjs.org/clone/-/clone-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/pvorb/node-clone#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone"
  summary: "deep cloning of objects and arrays"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-clone-buffer-1.0.0"
  copyrightText: "Copyright (c) 2016 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-buffer@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/clone-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "clone-buffer"
  summary: "Easier Buffer cloning in node."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-clone-buffer-1.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/clone-buffer.git@7dab09850f080e2d137c62c6a673344fa8458942"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-buffer@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/clone-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-buffer"
  summary: "Easier Buffer cloning in node."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-clone-buffer-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/clone-buffer/-/clone-buffer-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-buffer@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/clone-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-buffer"
  summary: "Easier Buffer cloning in node."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-clone-stats-0.0.1"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-stats@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/clone-stats"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "clone-stats"
  summary: "Safely clone node's fs.Stats instances without losing their class methods"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-clone-stats-0.0.1-vcs"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "git+https://github.com/hughsk/clone-stats.git@8807ad5ae3316ca3076c5c594e7d45fa898ed42d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-stats@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/clone-stats"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-stats"
  summary: "Safely clone node's fs.Stats instances without losing their class methods"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-clone-stats-0.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "https://registry.npmjs.org/clone-stats/-/clone-stats-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-stats@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/clone-stats"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-stats"
  summary: "Safely clone node's fs.Stats instances without losing their class methods"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-clone-stats-1.0.0"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-stats@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/clone-stats"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "clone-stats"
  summary: "Safely clone node's fs.Stats instances without losing their class methods"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-clone-stats-1.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "git+https://github.com/hughsk/clone-stats.git@25810f469944326c761f9f6273268453734a8465"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-stats@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/clone-stats"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-stats"
  summary: "Safely clone node's fs.Stats instances without losing their class methods"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-clone-stats-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "https://registry.npmjs.org/clone-stats/-/clone-stats-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/clone-stats@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/clone-stats"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "clone-stats"
  summary: "Safely clone node's fs.Stats instances without losing their class methods"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
  copyrightText: "Copyright (c) 2016 Matteo Collina"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cloneable-readable@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mcollina/cloneable-readable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cloneable-readable"
  summary: "Clone a Readable stream, safely"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-cloneable-readable-1.1.2-vcs"
  copyrightText: "Copyright (c) 2016 Matteo Collina"
  downloadLocation: "git+https://github.com/mcollina/cloneable-readable.git@5890475314bfb2def062fd6d158c62cfec20ebdf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cloneable-readable@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mcollina/cloneable-readable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cloneable-readable"
  summary: "Clone a Readable stream, safely"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-cloneable-readable-1.1.2-source-artifact"
  copyrightText: "Copyright (c) 2016 Matteo Collina"
  downloadLocation: "https://registry.npmjs.org/cloneable-readable/-/cloneable-readable-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cloneable-readable@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/mcollina/cloneable-readable#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cloneable-readable"
  summary: "Clone a Readable stream, safely"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3-vcs"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "git+https://github.com/Qix-/color-convert.git@99dc5da127d3d17d0ff8d13a995fd2d6aab404aa"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-convert-1.9.3-source-artifact"
  copyrightText: "Copyright (c) 2011-2016 Heather Arthur <fayearthur@gmail.com>\n\
    Copyright (c) 2011-2016 Heather Arthur and Josh Junon"
  downloadLocation: "https://registry.npmjs.org/color-convert/-/color-convert-1.9.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-convert@1.9.3"
  filesAnalyzed: false
  homepage: "https://github.com/Qix-/color-convert#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-convert"
  summary: "Plain color conversion functions"
  versionInfo: "1.9.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "git+ssh://github.com/dfcreative/color-name.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-color-name-1.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Dmitry Ivanov"
  downloadLocation: "https://registry.npmjs.org/color-name/-/color-name-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/color-name@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/dfcreative/color-name"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "color-name"
  summary: "A list of color names and its values"
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.7"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.7-vcs"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "git+https://github.com/felixge/node-combined-stream.git@3593923e4126da3e00ca6c40b2d0636de7a66579"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-combined-stream-1.0.7-source-artifact"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "https://registry.npmjs.org/combined-stream/-/combined-stream-1.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/combined-stream@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-combined-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "combined-stream"
  summary: "A stream that emits multiple other streams one after another."
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-commander-2.11.0"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.11.0-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/commander.js.git@30535a67a7d1f3809231603bc4dc0ba873ae85ef"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.11.0-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/commander/-/commander-2.11.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.11.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.19.0"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.19.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.19.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.19.0-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/commander.js.git@78b7dbd18aabc23ccc9d151db411913237a3c483"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.19.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.19.0"
- SPDXID: "SPDXRef-Package-NPM-commander-2.19.0-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/commander/-/commander-2.19.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/commander@2.19.0"
  filesAnalyzed: false
  homepage: "https://github.com/tj/commander.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "commander"
  summary: "the complete solution for node.js command-line programs"
  versionInfo: "2.19.0"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/node-concat-map.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-concat-map-0.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/concat-map/-/concat-map-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/concat-map@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-concat-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "concat-map"
  summary: "concatenative mapdashery"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-convert-source-map-1.6.0"
  copyrightText: "Copyright 2013 Thorsten Lorenz"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/convert-source-map@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/thlorenz/convert-source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "convert-source-map"
  summary: "Converts a source-map from/to  different formats and allows adding/changing\
    \ properties."
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-convert-source-map-1.6.0-vcs"
  copyrightText: "Copyright 2013 Thorsten Lorenz"
  downloadLocation: "git+https://github.com/thlorenz/convert-source-map.git@ad25a3e4373c641a2241cf1470b81ae123e4c23d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/convert-source-map@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/thlorenz/convert-source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "convert-source-map"
  summary: "Converts a source-map from/to  different formats and allows adding/changing\
    \ properties."
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-convert-source-map-1.6.0-source-artifact"
  copyrightText: "Copyright 2013 Thorsten Lorenz"
  downloadLocation: "https://registry.npmjs.org/convert-source-map/-/convert-source-map-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/convert-source-map@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/thlorenz/convert-source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "convert-source-map"
  summary: "Converts a source-map from/to  different formats and allows adding/changing\
    \ properties."
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/isaacs/core-util-is.git@a177da234df5638b363ddc15fa324619a38577c8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-core-util-is-1.0.2-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/core-util-is/-/core-util-is-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/core-util-is@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/core-util-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "core-util-is"
  summary: "The `util.is*` functions introduced in Node v0.12."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-css-select-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/css-select@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/css-select#readme"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "css-select"
  summary: "a CSS selector compiler/engine"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-css-select-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/fb55/css-select.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/css-select@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/css-select#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "css-select"
  summary: "a CSS selector compiler/engine"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-css-select-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/css-select/-/css-select-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/css-select@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/css-select#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "css-select"
  summary: "a CSS selector compiler/engine"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-css-what-2.1.3"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/css-what@2.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/css-what#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "css-what"
  summary: "a CSS selector parser"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-NPM-css-what-2.1.3-vcs"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "git+https://github.com/fb55/css-what.git@2db00ca221922c5b5131d798614aa043f2f6f80e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/css-what@2.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/css-what#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "css-what"
  summary: "a CSS selector parser"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-NPM-css-what-2.1.3-source-artifact"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "https://registry.npmjs.org/css-what/-/css-what-2.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/css-what@2.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/css-what#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "css-what"
  summary: "a CSS selector parser"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1"
  copyrightText: "Copyright (c) 2013 Joyent Inc.\nCopyright (c) 2013 Trent Mick\n\
    Copyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Joyent, Inc.\nCopyright\
    \ 2012 Mark Cavage\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1-vcs"
  copyrightText: "Copyright (c) 2013 Joyent Inc.\nCopyright (c) 2013 Trent Mick\n\
    Copyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Joyent, Inc.\nCopyright\
    \ 2012 Mark Cavage\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick"
  downloadLocation: "git+https://github.com/trentm/node-dashdash.git@1dd7379640462a21ca6d92502803de830b4acfa2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-dashdash-1.14.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Joyent Inc.\nCopyright (c) 2013 Trent Mick\n\
    Copyright 2008 Sun Microsystems, Inc.\nCopyright 2011 Joyent, Inc.\nCopyright\
    \ 2012 Mark Cavage\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick"
  downloadLocation: "https://registry.npmjs.org/dashdash/-/dashdash-1.14.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dashdash@1.14.1"
  filesAnalyzed: false
  homepage: "https://github.com/trentm/node-dashdash#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dashdash"
  summary: "A light, featureful and explicit option parsing library."
  versionInfo: "1.14.1"
- SPDXID: "SPDXRef-Package-NPM-debug-3.1.0"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-debug-3.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/visionmedia/debug.git@f073e056f33efdd5b311381eb6bca2bc850745bf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-debug-3.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 TJ Holowaychuk <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-deep-assign-1.0.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/deep-assign@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/deep-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "deep-assign"
  summary: "Recursive Object.assign()"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-deep-assign-1.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/deep-assign.git@d853e1fa2b71be5e1449d2b44c9fdb4be8918af8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/deep-assign@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/deep-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "deep-assign"
  summary: "Recursive Object.assign()"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-deep-assign-1.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/deep-assign/-/deep-assign-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/deep-assign@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/deep-assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "deep-assign"
  summary: "Recursive Object.assign()"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-define-properties-1.1.3"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/define-properties@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/define-properties#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "define-properties"
  summary: "Define multiple non-enumerable properties at once. Uses `Object.defineProperty`\
    \ when available; falls back to standard assignment in older engines."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-define-properties-1.1.3-vcs"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/define-properties.git@e5478e3d2880b90a97daa62d76abed34d91154dd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/define-properties@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/define-properties#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "define-properties"
  summary: "Define multiple non-enumerable properties at once. Uses `Object.defineProperty`\
    \ when available; falls back to standard assignment in older engines."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-define-properties-1.1.3-source-artifact"
  copyrightText: "Copyright (c) 2015 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/define-properties/-/define-properties-1.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/define-properties@1.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/define-properties#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "define-properties"
  summary: "Define multiple non-enumerable properties at once. Uses `Object.defineProperty`\
    \ when available; falls back to standard assignment in older engines."
  versionInfo: "1.1.3"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "git+https://github.com/felixge/node-delayed-stream.git@07a9dc99fb8f1a488160026b9ad77493f766fb84"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2011 Debuggable Limited <felix@debuggable.com>"
  downloadLocation: "https://registry.npmjs.org/delayed-stream/-/delayed-stream-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/delayed-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/felixge/node-delayed-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "delayed-stream"
  summary: "Buffers events from a stream until you are ready to handle them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-denodeify-1.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/denodeify@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/matthew-andrews/denodeify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "denodeify"
  summary: "Tool to turn functions with Node-style callback APIs into functions that\
    \ return Promises"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-denodeify-1.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/matthew-andrews/denodeify.git@e500054eb336c748264507e9553af949981ee2c3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/denodeify@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/matthew-andrews/denodeify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "denodeify"
  summary: "Tool to turn functions with Node-style callback APIs into functions that\
    \ return Promises"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-denodeify-1.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/denodeify/-/denodeify-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/denodeify@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/matthew-andrews/denodeify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "denodeify"
  summary: "Tool to turn functions with Node-style callback APIs into functions that\
    \ return Promises"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-diff-3.3.1"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@3.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "3.3.1"
- SPDXID: "SPDXRef-Package-NPM-diff-3.3.1-vcs"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "git+https://github.com/kpdecker/jsdiff.git@e0b8260dc4bbbe6abaed6da3a5170b7c24565da4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@3.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "3.3.1"
- SPDXID: "SPDXRef-Package-NPM-diff-3.3.1-source-artifact"
  copyrightText: "Copyright (c) 2009-2015 Kevin Decker <kpdecker@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/diff/-/diff-3.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/diff@3.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/kpdecker/jsdiff#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "diff"
  summary: "A javascript text diff implementation."
  versionInfo: "3.3.1"
- SPDXID: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
  copyrightText: "Copyright (c) 2014 The cheeriojs contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dom-serializer@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/cheeriojs/dom-renderer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "dom-serializer"
  summary: "render dom nodes to string"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-dom-serializer-0.1.1-vcs"
  copyrightText: "Copyright (c) 2014 The cheeriojs contributors"
  downloadLocation: "git+https://github.com/cheeriojs/dom-renderer.git@1b9eb87c621a184b97467b03600b50d08e5a5086"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dom-serializer@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/cheeriojs/dom-renderer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dom-serializer"
  summary: "render dom nodes to string"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-dom-serializer-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014 The cheeriojs contributors"
  downloadLocation: "https://registry.npmjs.org/dom-serializer/-/dom-serializer-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/dom-serializer@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/cheeriojs/dom-renderer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "dom-serializer"
  summary: "render dom nodes to string"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-domelementtype-1.3.1"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domelementtype@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/domelementtype#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "domelementtype"
  summary: "all the types of nodes in htmlparser2's dom"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-domelementtype-1.3.1-vcs"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "git+https://github.com/fb55/domelementtype.git@19b2491101a4de3679b59db8eb7fdd9aa0fbc60b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domelementtype@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/domelementtype#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domelementtype"
  summary: "all the types of nodes in htmlparser2's dom"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-domelementtype-1.3.1-source-artifact"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "https://registry.npmjs.org/domelementtype/-/domelementtype-1.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domelementtype@1.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/domelementtype#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domelementtype"
  summary: "all the types of nodes in htmlparser2's dom"
  versionInfo: "1.3.1"
- SPDXID: "SPDXRef-Package-NPM-domhandler-2.4.2"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domhandler@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/DomHandler#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "domhandler"
  summary: "handler for htmlparser2 that turns pages into a dom"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-domhandler-2.4.2-vcs"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "git+https://github.com/fb55/DomHandler.git@045bd8d634dca30192fbd23fee0c530adc9c6f52"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domhandler@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/DomHandler#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domhandler"
  summary: "handler for htmlparser2 that turns pages into a dom"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-domhandler-2.4.2-source-artifact"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "https://registry.npmjs.org/domhandler/-/domhandler-2.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domhandler@2.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/DomHandler#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domhandler"
  summary: "handler for htmlparser2 that turns pages into a dom"
  versionInfo: "2.4.2"
- SPDXID: "SPDXRef-Package-NPM-domutils-1.5.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domutils@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/FB55/domutils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domutils"
  summary: "utilities for working with htmlparser2's dom"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-domutils-1.5.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/FB55/domutils.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domutils@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/FB55/domutils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domutils"
  summary: "utilities for working with htmlparser2's dom"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-domutils-1.5.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/domutils/-/domutils-1.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domutils@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/FB55/domutils"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domutils"
  summary: "utilities for working with htmlparser2's dom"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-domutils-1.7.0"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domutils@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/FB55/domutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "domutils"
  summary: "utilities for working with htmlparser2's dom"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-domutils-1.7.0-vcs"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "git+https://github.com/FB55/domutils.git@34f193ca17d11a98d9310b1965efe5f73d32d79f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domutils@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/FB55/domutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domutils"
  summary: "utilities for working with htmlparser2's dom"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-domutils-1.7.0-source-artifact"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "https://registry.npmjs.org/domutils/-/domutils-1.7.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/domutils@1.7.0"
  filesAnalyzed: false
  homepage: "https://github.com/FB55/domutils#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "domutils"
  summary: "utilities for working with htmlparser2's dom"
  versionInfo: "1.7.0"
- SPDXID: "SPDXRef-Package-NPM-duplexer-0.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexer@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/duplexer"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "duplexer"
  summary: "Creates a duplex stream"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-duplexer-0.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/Raynos/duplexer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexer@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/duplexer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "duplexer"
  summary: "Creates a duplex stream"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-duplexer-0.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/duplexer/-/duplexer-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexer@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/duplexer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "duplexer"
  summary: "Creates a duplex stream"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-duplexify-3.7.1"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexify@3.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/duplexify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "duplexify"
  summary: "Turn a writable and readable stream into a streams2 duplex stream with\
    \ support for async initialization and streams1/streams2 input"
  versionInfo: "3.7.1"
- SPDXID: "SPDXRef-Package-NPM-duplexify-3.7.1-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/duplexify.git@f6af4f971bf4c99750f44751b99942675f0ab5df"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexify@3.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/duplexify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "duplexify"
  summary: "Turn a writable and readable stream into a streams2 duplex stream with\
    \ support for async initialization and streams1/streams2 input"
  versionInfo: "3.7.1"
- SPDXID: "SPDXRef-Package-NPM-duplexify-3.7.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/duplexify/-/duplexify-3.7.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/duplexify@3.7.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/duplexify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "duplexify"
  summary: "Turn a writable and readable stream into a streams2 duplex stream with\
    \ support for async initialization and streams1/streams2 input"
  versionInfo: "3.7.1"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  copyrightText: "Copyright (c) 2003-2005 Tom Wu\nCopyright (c) 2014 Jeremie Miller"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-vcs"
  copyrightText: "Copyright (c) 2003-2005 Tom Wu\nCopyright (c) 2014 Jeremie Miller"
  downloadLocation: "git+https://github.com/quartzjer/ecc-jsbn.git@5c5ecfaf451743cabc79d4905f34e5ed4352b579"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2003-2005 Tom Wu\nCopyright (c) 2014 Jeremie Miller"
  downloadLocation: "https://registry.npmjs.org/ecc-jsbn/-/ecc-jsbn-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ecc-jsbn@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/quartzjer/ecc-jsbn"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ecc-jsbn"
  summary: "ECC JS code based on JSBN"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.1"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.1-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/end-of-stream.git@8a49159ed2661ee8ddb393c2503aee489f9ae271"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-end-of-stream-1.4.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/end-of-stream/-/end-of-stream-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/end-of-stream@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/end-of-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "end-of-stream"
  summary: "Call a callback when a readable/writable/duplex stream has completed or\
    \ failed."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-entities-1.1.2"
  copyrightText: "(c) http://mathiasbynens.be/notes/javascript-encoding\nCopyright\
    \ (c) Felix Bohm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/entities@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/entities#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "entities"
  summary: "Encode & decode XML/HTML entities with ease"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-entities-1.1.2-vcs"
  copyrightText: "(c) http://mathiasbynens.be/notes/javascript-encoding\nCopyright\
    \ (c) Felix Bohm"
  downloadLocation: "git+https://github.com/fb55/entities.git@54a5717d85d886c4aafa2ac5ff83d8d3d730337c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/entities@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/entities#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "entities"
  summary: "Encode & decode XML/HTML entities with ease"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-entities-1.1.2-source-artifact"
  copyrightText: "(c) http://mathiasbynens.be/notes/javascript-encoding\nCopyright\
    \ (c) Felix Bohm"
  downloadLocation: "https://registry.npmjs.org/entities/-/entities-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/entities@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/entities#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "entities"
  summary: "Encode & decode XML/HTML entities with ease"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/escape-string-regexp.git@db124a3e1aae9d692c4899e42a5c6c3e329eaa20"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/escape-string-regexp/-/escape-string-regexp-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-string-regexp@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/escape-string-regexp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-string-regexp"
  summary: "Escape RegExp special characters"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-event-stream-3.3.4"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/event-stream@3.3.4"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/event-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "event-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "3.3.4"
- SPDXID: "SPDXRef-Package-NPM-event-stream-3.3.4-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/event-stream.git@0d9d45744b06ead81976b3400569160b76299a41"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/event-stream@3.3.4"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/event-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "event-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "3.3.4"
- SPDXID: "SPDXRef-Package-NPM-event-stream-3.3.4-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/event-stream/-/event-stream-3.3.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/event-stream@3.3.4"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/event-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "event-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "3.3.4"
- SPDXID: "SPDXRef-Package-NPM-event-stream-3.3.5"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/event-stream@3.3.5"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/event-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "event-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "3.3.5"
- SPDXID: "SPDXRef-Package-NPM-event-stream-3.3.5-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/event-stream.git@918d4a3398166d6f4264f7fc4ec2cc43f731ab0e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/event-stream@3.3.5"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/event-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "event-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "3.3.5"
- SPDXID: "SPDXRef-Package-NPM-event-stream-3.3.5-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/event-stream/-/event-stream-3.3.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/event-stream@3.3.5"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/event-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "event-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "3.3.5"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2"
  copyrightText: "Copyright (c) 2014 Stefan Thomas"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Stefan Thomas"
  downloadLocation: "git+https://github.com/justmoon/node-extend.git@8d106d23931c0802e8b88188b0aac433e13358d9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-3.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Stefan Thomas"
  downloadLocation: "https://registry.npmjs.org/extend/-/extend-3.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend@3.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/justmoon/node-extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend"
  summary: "Port of jQuery.extend for node.js and the browser"
  versionInfo: "3.0.2"
- SPDXID: "SPDXRef-Package-NPM-extend-shallow-1.1.4"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend-shallow@1.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/extend-shallow"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "extend-shallow"
  summary: "Extend an object with the properties of additional objects. node.js/javascript\
    \ util."
  versionInfo: "1.1.4"
- SPDXID: "SPDXRef-Package-NPM-extend-shallow-1.1.4-vcs"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/extend-shallow.git@1b97f0c177ce152d85b6f6e69c6154232665bf7a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend-shallow@1.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/extend-shallow"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend-shallow"
  summary: "Extend an object with the properties of additional objects. node.js/javascript\
    \ util."
  versionInfo: "1.1.4"
- SPDXID: "SPDXRef-Package-NPM-extend-shallow-1.1.4-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/extend-shallow/-/extend-shallow-1.1.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extend-shallow@1.1.4"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/extend-shallow"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extend-shallow"
  summary: "Extend an object with the properties of additional objects. node.js/javascript\
    \ util."
  versionInfo: "1.1.4"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0-vcs"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "git+https://github.com/davepacheco/node-extsprintf.git@accc9f2774189a416f294546ed03b626eec3f80c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.3.0-source-artifact"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/extsprintf/-/extsprintf-1.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.3.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.4.0"
  copyrightText: "Copyright (c) 2012, 2017 Joyent, Inc.\nCopyright (c) 2014 Joyent,\
    \ Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.4.0-vcs"
  copyrightText: "Copyright (c) 2012, 2017 Joyent, Inc.\nCopyright (c) 2014 Joyent,\
    \ Inc."
  downloadLocation: "git+https://github.com/davepacheco/node-extsprintf.git@26f360d1588a2d4106f3061bfd757f6ecdee37dc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-extsprintf-1.4.0-source-artifact"
  copyrightText: "Copyright (c) 2012, 2017 Joyent, Inc.\nCopyright (c) 2014 Joyent,\
    \ Inc."
  downloadLocation: "https://registry.npmjs.org/extsprintf/-/extsprintf-1.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/extsprintf@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-extsprintf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "extsprintf"
  summary: "extended POSIX-style sprintf"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
  copyrightText: "Copyright (c) 2017 Evgeny Poberezkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-deep-equal@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-deep-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fast-deep-equal"
  summary: "Fast deep equal"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-vcs"
  copyrightText: "Copyright (c) 2017 Evgeny Poberezkin"
  downloadLocation: "git+https://github.com/epoberezkin/fast-deep-equal.git@8a9c22e36a18a0b6a006d180572016c91e9f23e1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-deep-equal@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-deep-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-deep-equal"
  summary: "Fast deep equal"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-source-artifact"
  copyrightText: "Copyright (c) 2017 Evgeny Poberezkin"
  downloadLocation: "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-deep-equal@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-deep-equal#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-deep-equal"
  summary: "Fast deep equal"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-json-stable-stringify@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fast-json-stable-stringify"
  summary: "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify\
    \ without jsonify"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/epoberezkin/fast-json-stable-stringify.git@43c016ad43684fb3dff2f94e6bc25cd39fdf7f3b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-json-stable-stringify@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-json-stable-stringify"
  summary: "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify\
    \ without jsonify"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/fast-json-stable-stringify/-/fast-json-stable-stringify-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fast-json-stable-stringify@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/fast-json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fast-json-stable-stringify"
  summary: "deterministic `JSON.stringify()` - a faster version of substack's json-stable-strigify\
    \ without jsonify"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-fd-slicer-1.1.0"
  copyrightText: "Copyright (c) 2014 Andrew Kelley"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fd-slicer@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/andrewrk/node-fd-slicer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fd-slicer"
  summary: "safely create multiple ReadStream or WriteStream objects from the same\
    \ file descriptor"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-fd-slicer-1.1.0-vcs"
  copyrightText: "Copyright (c) 2014 Andrew Kelley"
  downloadLocation: "git+https://github.com/andrewrk/node-fd-slicer.git@2583a9eaebe86ce5d9a70da0a02529e2f1719c47"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fd-slicer@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/andrewrk/node-fd-slicer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fd-slicer"
  summary: "safely create multiple ReadStream or WriteStream objects from the same\
    \ file descriptor"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-fd-slicer-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Andrew Kelley"
  downloadLocation: "https://registry.npmjs.org/fd-slicer/-/fd-slicer-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fd-slicer@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/andrewrk/node-fd-slicer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fd-slicer"
  summary: "safely create multiple ReadStream or WriteStream objects from the same\
    \ file descriptor"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-flush-write-stream-1.1.1"
  copyrightText: "Copyright (c) 2015 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/flush-write-stream@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/flush-write-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "flush-write-stream"
  summary: "A write stream constructor that supports a flush function that is called\
    \ before finish is emitted"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-flush-write-stream-1.1.1-vcs"
  copyrightText: "Copyright (c) 2015 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/flush-write-stream.git@bab61bb3805d5750cb864aeee387fbddea93c913"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/flush-write-stream@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/flush-write-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "flush-write-stream"
  summary: "A write stream constructor that supports a flush function that is called\
    \ before finish is emitted"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-flush-write-stream-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/flush-write-stream/-/flush-write-stream-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/flush-write-stream@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/flush-write-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "flush-write-stream"
  summary: "A write stream constructor that supports a flush function that is called\
    \ before finish is emitted"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/forever-agent.git@1b3b6163f2b3c2c4122bbfa288c1325c0df9871d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-forever-agent-0.6.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/forever-agent/-/forever-agent-0.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forever-agent@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/forever-agent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forever-agent"
  summary: "HTTP Agent that keeps socket connections alive between keep-alive requests.\
    \ Formerly part of mikeal/request, now a standalone module."
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.3.3"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.3.3-vcs"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "git+https://github.com/form-data/form-data.git@b16916a568a0d06f3f8a16c31f9a8b89b7844094"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-form-data-2.3.3-source-artifact"
  copyrightText: "Copyright (c) 2012 Felix Geisendorfer (felix@debuggable.com) and\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/form-data/-/form-data-2.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/form-data@2.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/form-data/form-data#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "A library to create readable \"multipart/form-data\" streams. Can be used\
    \ to submit forms and file uploads to other web applications."
  versionInfo: "2.3.3"
- SPDXID: "SPDXRef-Package-NPM-from-0.1.7"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/from@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "from"
  summary: "Easy way to make a Readable Stream"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-from-0.1.7-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/from.git@b14b530f53dccb45cad5eab62544bcdf0da918db"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/from@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "from"
  summary: "Easy way to make a Readable Stream"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-from-0.1.7-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/from/-/from-0.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/from@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/from#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "from"
  summary: "Easy way to make a Readable Stream"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-fs-minipass-1.2.5"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-minipass@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/fs-minipass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "fs-minipass"
  summary: "fs read and write streams based on minipass"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-fs-minipass-1.2.5-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/npm/fs-minipass.git@fceb43535c348c9cd1ad08edb6c188e04850c245"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-minipass@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/fs-minipass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs-minipass"
  summary: "fs read and write streams based on minipass"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-fs-minipass-1.2.5-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/fs-minipass/-/fs-minipass-1.2.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-minipass@1.2.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/fs-minipass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs-minipass"
  summary: "fs read and write streams based on minipass"
  versionInfo: "1.2.5"
- SPDXID: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors\nCopyright 2010 James Halliday"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-mkdirp-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/fs-mkdirp-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fs-mkdirp-stream"
  summary: "Ensure directories exist before writing to them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0-vcs"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors\nCopyright 2010 James Halliday"
  downloadLocation: "git+https://github.com/gulpjs/fs-mkdirp-stream.git@3a27851dc08f43dbe2d3fda2dddef34c67408715"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-mkdirp-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/fs-mkdirp-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs-mkdirp-stream"
  summary: "Ensure directories exist before writing to them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors\nCopyright 2010 James Halliday"
  downloadLocation: "https://registry.npmjs.org/fs-mkdirp-stream/-/fs-mkdirp-stream-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs-mkdirp-stream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/fs-mkdirp-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs-mkdirp-stream"
  summary: "Ensure directories exist before writing to them."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/isaacs/fs.realpath.git@03e7c884431fe185dfebbc9b771aeca339c1807a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fs.realpath-1.0.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/fs.realpath/-/fs.realpath-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fs.realpath@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/fs.realpath#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fs.realpath"
  summary: "Use node's fs.realpath, but fall back to the JS implementation if the\
    \ native one fails"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-fstream-1.0.11"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fstream@1.0.11"
  filesAnalyzed: false
  homepage: "https://github.com/npm/fstream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "fstream"
  summary: "Advanced file system stream things"
  versionInfo: "1.0.11"
- SPDXID: "SPDXRef-Package-NPM-fstream-1.0.11-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/npm/fstream.git@1e4527ffe8688d4f5325283d7cf2cf2d61f14c6b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fstream@1.0.11"
  filesAnalyzed: false
  homepage: "https://github.com/npm/fstream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fstream"
  summary: "Advanced file system stream things"
  versionInfo: "1.0.11"
- SPDXID: "SPDXRef-Package-NPM-fstream-1.0.11-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/fstream/-/fstream-1.0.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fstream@1.0.11"
  filesAnalyzed: false
  homepage: "https://github.com/npm/fstream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fstream"
  summary: "Advanced file system stream things"
  versionInfo: "1.0.11"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "git+https://github.com/Raynos/function-bind.git@1213f807066d1cb8d39a0592d5118f4b1f03de4a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Raynos"
  downloadLocation: "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2014, 2016 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright\
    \ 2011 Joyent, Inc.\nCopyright 2016 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2014, 2016 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright\
    \ 2011 Joyent, Inc.\nCopyright 2016 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "git+https://github.com/arekinath/node-getpass.git@e219fae3a4458a1aa4b84002539265a6a1475267"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-getpass-0.1.7-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2014, 2016 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright\
    \ 2011 Joyent, Inc.\nCopyright 2016 Joyent, Inc.\ncopyrighted by the Free Software\
    \ Foundation"
  downloadLocation: "https://registry.npmjs.org/getpass/-/getpass-0.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/getpass@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-getpass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "getpass"
  summary: "getpass for node.js"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.2"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@8fa8d561e08c9eed1d286c6a35be2cd8123b2fb7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.2"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-7.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.2"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.3"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-glob.git@8882c8fccabbe459465e73cc2581e121a5fdd25b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.3"
- SPDXID: "SPDXRef-Package-NPM-glob-7.1.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/glob/-/glob-7.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob@7.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-glob#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob"
  summary: "a little globber"
  versionInfo: "7.1.3"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-3.1.0"
  copyrightText: "Copyright (c) 2015 Elan Shanker"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/es128/glob-parent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "glob-parent"
  summary: "Strips glob magic from a string to provide the parent directory path"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-3.1.0-vcs"
  copyrightText: "Copyright (c) 2015 Elan Shanker"
  downloadLocation: "git+https://github.com/es128/glob-parent.git@880243f7758be2967318280ad3e599c95e832a76"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/es128/glob-parent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-parent"
  summary: "Strips glob magic from a string to provide the parent directory path"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-parent-3.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Elan Shanker"
  downloadLocation: "https://registry.npmjs.org/glob-parent/-/glob-parent-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-parent@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/es128/glob-parent"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-parent"
  summary: "Strips glob magic from a string to provide the parent directory path"
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  copyrightText: "Copyright (c) 2015-2017 Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-stream@6.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "glob-stream"
  summary: "A Readable Stream interface over node-glob."
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-stream-6.1.0-vcs"
  copyrightText: "Copyright (c) 2015-2017 Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/glob-stream.git@8210a3c95cabc032088b1a0ff47ccbeb2f83ec52"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-stream@6.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-stream"
  summary: "A Readable Stream interface over node-glob."
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-glob-stream-6.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015-2017 Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/glob-stream/-/glob-stream-6.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/glob-stream@6.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/glob-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "glob-stream"
  summary: "A Readable Stream interface over node-glob."
  versionInfo: "6.1.0"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
  copyrightText: "Copyright (c) Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.1.15"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.1.15"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.1.15-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-graceful-fs.git@26456e3deb4a5e85363e92f9015bcefd3b6b13ba"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.1.15"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.1.15"
- SPDXID: "SPDXRef-Package-NPM-graceful-fs-4.1.15-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter, Ben Noordhuis, and Contributors"
  downloadLocation: "https://registry.npmjs.org/graceful-fs/-/graceful-fs-4.1.15.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/graceful-fs@4.1.15"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-graceful-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "graceful-fs"
  summary: "A drop-in replacement for fs, making various improvements."
  versionInfo: "4.1.15"
- SPDXID: "SPDXRef-Package-NPM-growl-1.10.3"
  copyrightText: "Copyright (c) 2009 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2016 Joshua Boy Nicolai Appelman <joshua@jbna.nl>\nCopyright TJ Holowaychuk\
    \ <tj@vision-media.ca>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/growl@1.10.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/node-growl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "growl"
  summary: "Growl unobtrusive notifications"
  versionInfo: "1.10.3"
- SPDXID: "SPDXRef-Package-NPM-growl-1.10.3-vcs"
  copyrightText: "Copyright (c) 2009 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2016 Joshua Boy Nicolai Appelman <joshua@jbna.nl>\nCopyright TJ Holowaychuk\
    \ <tj@vision-media.ca>"
  downloadLocation: "git+https://github.com/tj/node-growl.git@1ccc7e8a56a0ff8fbfc95d9c35f3b2cc493469b0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/growl@1.10.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/node-growl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "growl"
  summary: "Growl unobtrusive notifications"
  versionInfo: "1.10.3"
- SPDXID: "SPDXRef-Package-NPM-growl-1.10.3-source-artifact"
  copyrightText: "Copyright (c) 2009 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2016 Joshua Boy Nicolai Appelman <joshua@jbna.nl>\nCopyright TJ Holowaychuk\
    \ <tj@vision-media.ca>"
  downloadLocation: "https://registry.npmjs.org/growl/-/growl-1.10.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/growl@1.10.3"
  filesAnalyzed: false
  homepage: "https://github.com/tj/node-growl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "growl"
  summary: "Growl unobtrusive notifications"
  versionInfo: "1.10.3"
- SPDXID: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-chmod@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gulp-chmod#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gulp-chmod"
  summary: "Change permissions of Vinyl files"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-chmod-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/gulp-chmod.git@68412ff128a0f60c21883555e3b480849e35d4b8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-chmod@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gulp-chmod#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-chmod"
  summary: "Change permissions of Vinyl files"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-chmod-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/gulp-chmod/-/gulp-chmod-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-chmod@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gulp-chmod#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-chmod"
  summary: "Change permissions of Vinyl files"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-filter@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gulp-filter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gulp-filter"
  summary: "Filter files in a Vinyl stream"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-filter-5.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/gulp-filter.git@845b9135d925c8cb679395522db47d3fb8dd368e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-filter@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gulp-filter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-filter"
  summary: "Filter files in a Vinyl stream"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-filter-5.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/gulp-filter/-/gulp-filter-5.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-filter@5.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/gulp-filter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-filter"
  summary: "Filter files in a Vinyl stream"
  versionInfo: "5.1.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0"
  copyrightText: "(c) Jon Merrifield (http://www.jmerrifield.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-gunzip@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jmerrifield/gulp-gunzip#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gulp-gunzip"
  summary: "Uncompress gzip files in your gulp build pipeline"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0-vcs"
  copyrightText: "(c) Jon Merrifield (http://www.jmerrifield.com)"
  downloadLocation: "git+https://github.com/jmerrifield/gulp-gunzip.git@fc3013d966dd7aca28f81f133f6629f29ff5f1a9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-gunzip@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jmerrifield/gulp-gunzip#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-gunzip"
  summary: "Uncompress gzip files in your gulp build pipeline"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0-source-artifact"
  copyrightText: "(c) Jon Merrifield (http://www.jmerrifield.com)"
  downloadLocation: "https://registry.npmjs.org/gulp-gunzip/-/gulp-gunzip-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-gunzip@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jmerrifield/gulp-gunzip#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-gunzip"
  summary: "Uncompress gzip files in your gulp build pipeline"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  copyrightText: "Copyright (c) 2014 Dong <ddliuhb@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-remote-src-vscode@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/ddliu/gulp-remote-src"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gulp-remote-src-vscode"
  summary: "Remote gulp.src"
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1-vcs"
  copyrightText: "Copyright (c) 2014 Dong <ddliuhb@gmail.com>"
  downloadLocation: "git+https://github.com/ddliu/gulp-remote-src.git@e7d21fe4e7e1fdcb25501a3fafb5bcab8a51974c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-remote-src-vscode@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/ddliu/gulp-remote-src"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-remote-src-vscode"
  summary: "Remote gulp.src"
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Dong <ddliuhb@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/gulp-remote-src-vscode/-/gulp-remote-src-vscode-0.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-remote-src-vscode@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/ddliu/gulp-remote-src"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-remote-src-vscode"
  summary: "Remote gulp.src"
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  copyrightText: "(c) Jon Merrifield (http://www.jmerrifield.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-untar@0.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jmerrifield/gulp-untar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gulp-untar"
  summary: "Extract tarballs in your gulp build pipeline"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-gulp-untar-0.0.7-vcs"
  copyrightText: "(c) Jon Merrifield (http://www.jmerrifield.com)"
  downloadLocation: "git+https://github.com/jmerrifield/gulp-untar.git@db8f660d722b887a125e9329742189f3ecca013a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-untar@0.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jmerrifield/gulp-untar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-untar"
  summary: "Extract tarballs in your gulp build pipeline"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-gulp-untar-0.0.7-source-artifact"
  copyrightText: "(c) Jon Merrifield (http://www.jmerrifield.com)"
  downloadLocation: "https://registry.npmjs.org/gulp-untar/-/gulp-untar-0.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-untar@0.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jmerrifield/gulp-untar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-untar"
  summary: "Extract tarballs in your gulp build pipeline"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-vinyl-zip@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/joaomoreno/gulp-vinyl-zip"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "gulp-vinyl-zip"
  summary: "Streaming vinyl adapter for zip archives"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joaomoreno/gulp-vinyl-zip.git@a2046bb5a6c15912ca21f2f1ba0397d21879c008"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-vinyl-zip@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/joaomoreno/gulp-vinyl-zip"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-vinyl-zip"
  summary: "Streaming vinyl adapter for zip archives"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/gulp-vinyl-zip/-/gulp-vinyl-zip-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/gulp-vinyl-zip@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/joaomoreno/gulp-vinyl-zip"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "gulp-vinyl-zip"
  summary: "Streaming vinyl adapter for zip archives"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-har-schema-2.0.0"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-schema-2.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "git+https://github.com/ahmadnassri/har-schema.git@d006b0500e083a5b3e42635f110f3fb702ccdbb1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-schema-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\ncopyright\
    \ ahmadnassri.com (https://www.ahmadnassri.com/)"
  downloadLocation: "https://registry.npmjs.org/har-schema/-/har-schema-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-schema@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/har-schema"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-schema"
  summary: "JSON Schema for HTTP Archive (HAR)"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-har-validator-5.1.3"
  copyrightText: "Copyright (c) 2018 Ahmad Nassri <ahmad@ahmadnassri.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@5.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/node-har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "5.1.3"
- SPDXID: "SPDXRef-Package-NPM-har-validator-5.1.3-vcs"
  copyrightText: "Copyright (c) 2018 Ahmad Nassri <ahmad@ahmadnassri.com>"
  downloadLocation: "git+https://github.com/ahmadnassri/node-har-validator.git@a38c0672cd3b202bd52534ee7da83b74003eb472"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@5.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/node-har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "5.1.3"
- SPDXID: "SPDXRef-Package-NPM-har-validator-5.1.3-source-artifact"
  copyrightText: "Copyright (c) 2018 Ahmad Nassri <ahmad@ahmadnassri.com>"
  downloadLocation: "https://registry.npmjs.org/har-validator/-/har-validator-5.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/har-validator@5.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/ahmadnassri/node-har-validator"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "har-validator"
  summary: "Extremely fast HTTP Archive (HAR) validator using JSON Schema"
  versionInfo: "5.1.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-vcs"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "git+https://github.com/tarruda/has.git@4edf96f2dec87ad6b6e68482e8f6d7c8eb7e07e6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2013 Thiago de Arruda"
  downloadLocation: "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-flag-2.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-2.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-flag.git@601137409f2617c75838d8f3febed5c6e6e8ee2c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-2.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-flag/-/has-flag-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/has-flag.git@8b2ca7e693b2c742b29f2399194077b64b9ff781"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-flag-3.0.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/has-flag/-/has-flag-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-flag@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/has-flag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-flag"
  summary: "Check if argv has a specific flag"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.0"
  copyrightText: "Copyright (c) 2016 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/has-symbols.git@e4a5e7028c87d509902ff292f4da3ea45c7c50cf"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-he-1.1.1"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/he@1.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/he"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "he"
  summary: "A robust HTML entities encoder/decoder with full Unicode support."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-he-1.1.1-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/mathiasbynens/he.git@670991a4141d01dc015de5194d400d01c863208f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/he@1.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/he"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "he"
  summary: "A robust HTML entities encoder/decoder with full Unicode support."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-he-1.1.1-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/he/-/he-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/he@1.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/he"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "he"
  summary: "A robust HTML entities encoder/decoder with full Unicode support."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  copyrightText: "Copyright 2010-2011 Chris Winberry <chris@winberry.net>\nCopyright\
    \ 2015 the"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/htmlparser2@3.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/htmlparser2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "htmlparser2"
  summary: "Fast & forgiving HTML/XML/RSS parser"
  versionInfo: "3.10.1"
- SPDXID: "SPDXRef-Package-NPM-htmlparser2-3.10.1-vcs"
  copyrightText: "Copyright 2010-2011 Chris Winberry <chris@winberry.net>\nCopyright\
    \ 2015 the"
  downloadLocation: "git+https://github.com/fb55/htmlparser2.git@537bf2aeb56910d84d2c5aedb839dec678188a43"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/htmlparser2@3.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/htmlparser2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "htmlparser2"
  summary: "Fast & forgiving HTML/XML/RSS parser"
  versionInfo: "3.10.1"
- SPDXID: "SPDXRef-Package-NPM-htmlparser2-3.10.1-source-artifact"
  copyrightText: "Copyright 2010-2011 Chris Winberry <chris@winberry.net>\nCopyright\
    \ 2015 the"
  downloadLocation: "https://registry.npmjs.org/htmlparser2/-/htmlparser2-3.10.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/htmlparser2@3.10.1"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/htmlparser2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "htmlparser2"
  summary: "Fast & forgiving HTML/XML/RSS parser"
  versionInfo: "3.10.1"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/joyent/node-http-signature.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-http-signature-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/http-signature/-/http-signature-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-signature@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-http-signature/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-signature"
  summary: "Reference implementation of Joyent's HTTP Signature scheme."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/inflight.git@a547881738c8f57b27795e584071d67cf6ac1a57"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inflight-1.0.6-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inflight/-/inflight-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inflight@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inflight"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inflight"
  summary: "Add callbacks to requests in flight to avoid async duplication"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "git+https://github.com/isaacs/inherits.git@e05d0fb27c61a3ec687214f0476386b765364d5f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-2.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.3"
- SPDXID: "SPDXRef-Package-NPM-is-3.3.0"
  copyrightText: "Copyright (c) 2013 Enrico Marino\nCopyright (c) 2014 Enrico Marino\
    \ and Jordan Harband\ncopyright 2013-2014 Enrico Marino / Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/enricomarino/is"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is"
  summary: "the definitive JavaScript type testing library"
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-is-3.3.0-vcs"
  copyrightText: "Copyright (c) 2013 Enrico Marino\nCopyright (c) 2014 Enrico Marino\
    \ and Jordan Harband\ncopyright 2013-2014 Enrico Marino / Jordan Harband"
  downloadLocation: "git+https://github.com/enricomarino/is.git@188a52b3d3e16013a09a426a8df0810a67179115"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/enricomarino/is"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is"
  summary: "the definitive JavaScript type testing library"
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-is-3.3.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Enrico Marino\nCopyright (c) 2014 Enrico Marino\
    \ and Jordan Harband\ncopyright 2013-2014 Enrico Marino / Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/is/-/is-3.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is@3.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/enricomarino/is"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is"
  summary: "the definitive JavaScript type testing library"
  versionInfo: "3.3.0"
- SPDXID: "SPDXRef-Package-NPM-is-absolute-1.0.0"
  copyrightText: "Copyright (c) 2009-2014 TJ Holowaychuk\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-absolute@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-absolute"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-absolute"
  summary: "Returns true if a file path is absolute. Does not rely on the path module\
    \ and can be used as a polyfill for node.js native `path.isAbolute`."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-absolute-1.0.0-vcs"
  copyrightText: "Copyright (c) 2009-2014 TJ Holowaychuk\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-absolute.git@7291e9c5f0960a7d80ffe8101163d4b996856641"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-absolute@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-absolute"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-absolute"
  summary: "Returns true if a file path is absolute. Does not rely on the path module\
    \ and can be used as a polyfill for node.js native `path.isAbolute`."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-absolute-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2009-2014 TJ Holowaychuk\nCopyright (c) 2014-2017\
    \ Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-absolute/-/is-absolute-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-absolute@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-absolute"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-absolute"
  summary: "Returns true if a file path is absolute. Does not rely on the path module\
    \ and can be used as a polyfill for node.js native `path.isAbolute`."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-1.1.6"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@1.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "1.1.6"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-1.1.6-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/is-buffer.git@1e84e7ee31cf6b660b12500f3111a05501da387f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@1.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "1.1.6"
- SPDXID: "SPDXRef-Package-NPM-is-buffer-1.1.6-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/is-buffer/-/is-buffer-1.1.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-buffer@1.1.6"
  filesAnalyzed: false
  homepage: "https://github.com/feross/is-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-buffer"
  summary: "Determine if an object is a Buffer"
  versionInfo: "1.1.6"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1-vcs"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-extglob.git@10a74787acbe79abf02141c5d487950d1b197b15"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-extglob-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-extglob/-/is-extglob-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-extglob@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-extglob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-extglob"
  summary: "Returns true if a string has an extglob."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-is-glob-3.1.0"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-glob-3.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-glob.git@4537576b5747e03db2f78235c98ec27755ace63c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-glob-3.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-glob/-/is-glob-3.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-glob@3.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-glob"
  summary: "Returns `true` if the given string looks like a glob pattern or an extglob\
    \ pattern. This makes it easy to create code that only uses external modules like\
    \ node-glob when necessary, resulting in much faster code execution and initialization\
    \ time, and a better user experience."
  versionInfo: "3.1.0"
- SPDXID: "SPDXRef-Package-NPM-is-negated-glob-1.0.0"
  copyrightText: "Copyright (c) 2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-negated-glob@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-negated-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-negated-glob"
  summary: "Returns an object with a `negated` boolean and the `!` stripped from negation\
    \ patterns. Also respects extglobs."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-negated-glob-1.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-negated-glob.git@2de28ca1d482212629b2591ecdf9fa5b0c3a7d07"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-negated-glob@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-negated-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-negated-glob"
  summary: "Returns an object with a `negated` boolean and the `!` stripped from negation\
    \ patterns. Also respects extglobs."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-negated-glob-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-negated-glob/-/is-negated-glob-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-negated-glob@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-negated-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-negated-glob"
  summary: "Returns an object with a `negated` boolean and the `!` stripped from negation\
    \ patterns. Also respects extglobs."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-obj-1.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-obj#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-obj"
  summary: "Check if a value is an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-obj-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/is-obj.git@7438be7393348bf65cbc2330446666bb7fc2c2da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-obj#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-obj"
  summary: "Check if a value is an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-obj-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/is-obj/-/is-obj-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-obj@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/is-obj#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-obj"
  summary: "Check if a value is an object"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-is-relative-1.0.0"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-relative@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-relative"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-relative"
  summary: "Returns `true` if the path appears to be relative."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-relative-1.0.0-vcs"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-relative.git@e1dbc1a0684accbc2d69a51146e071b804dc741b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-relative@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-relative"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-relative"
  summary: "Returns `true` if the path appears to be relative."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-relative-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-relative/-/is-relative-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-relative@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-relative"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-relative"
  summary: "Returns `true` if the path appears to be relative."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/hughsk/is-typedarray.git@0617cfa871686cf541af62b144f130488f44f6fe"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-typedarray-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/is-typedarray/-/is-typedarray-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-typedarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/is-typedarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-typedarray"
  summary: "Detect whether or not an object is a Typed Array"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-unc-path-1.0.0"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-unc-path@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-unc-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-unc-path"
  summary: "Returns true if a filepath is a windows UNC file path."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-unc-path-1.0.0-vcs"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-unc-path.git@06baedec306bcbca8c9ee435db80a0e566764fd0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-unc-path@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-unc-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-unc-path"
  summary: "Returns true if a filepath is a windows UNC file path."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-unc-path-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-unc-path/-/is-unc-path-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-unc-path@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-unc-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-unc-path"
  summary: "Returns true if a filepath is a windows UNC file path."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  copyrightText: "Copyright (c) 2014 Wei Fanzhe"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1-vcs"
  copyrightText: "Copyright (c) 2014 Wei Fanzhe"
  downloadLocation: "git+https://github.com/wayfind/is-utf8.git@709df7202f9c3f93cdc2463b352dd80d8de9ce0b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-utf8-0.2.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Wei Fanzhe"
  downloadLocation: "https://registry.npmjs.org/is-utf8/-/is-utf8-0.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-utf8@0.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/wayfind/is-utf8#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-utf8"
  summary: "Detect if a buffer is utf8 encoded."
  versionInfo: "0.2.1"
- SPDXID: "SPDXRef-Package-NPM-is-valid-glob-1.0.0"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-valid-glob@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-valid-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-valid-glob"
  summary: "Return true if a value is a valid glob pattern or patterns."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-valid-glob-1.0.0-vcs"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-valid-glob.git@3eca5b021e1e21cf5ee120a39373f664cd8c54af"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-valid-glob@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-valid-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-valid-glob"
  summary: "Return true if a value is a valid glob pattern or patterns."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-valid-glob-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-valid-glob/-/is-valid-glob-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-valid-glob@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-valid-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-valid-glob"
  summary: "Return true if a value is a valid glob pattern or patterns."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-is-windows-1.0.2"
  copyrightText: "Copyright (c) 2015-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-windows@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-windows"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "is-windows"
  summary: "Returns true if the platform is windows. UMD module, works with node.js,\
    \ commonjs, browser, AMD, electron, etc."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-windows-1.0.2-vcs"
  copyrightText: "Copyright (c) 2015-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/is-windows.git@4dcfff4ed9e36ad761a1a24d3899c832382d7254"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-windows@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-windows"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-windows"
  summary: "Returns true if the platform is windows. UMD module, works with node.js,\
    \ commonjs, browser, AMD, electron, etc."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-is-windows-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2015-2018 Jon Schlinkert\nCopyright (c) 2018 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/is-windows/-/is-windows-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/is-windows@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/is-windows"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "is-windows"
  summary: "Returns true if the platform is windows. UMD module, works with node.js,\
    \ commonjs, browser, AMD, electron, etc."
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-isarray-0.0.1"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-0.0.1-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/isarray.git@69ba56c0890c19aeee26632427109cc7c6716983"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-0.0.1-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/isarray/-/isarray-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@0.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-isarray-1.0.0"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-isarray-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "git+https://github.com/juliangruber/isarray.git@2a23a281f369e9ae06394c0fb4d2381355a6ba33"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-isarray-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Julian Gruber <julian@juliangruber.com>"
  downloadLocation: "https://registry.npmjs.org/isarray/-/isarray-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isarray@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/juliangruber/isarray"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isarray"
  summary: "Array#isArray for older browsers"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2"
  copyrightText: "Copyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2-vcs"
  copyrightText: "Copyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)"
  downloadLocation: "git+https://github.com/rvagg/isstream.git@cd39cba6da939b4fc9110825203adc506422c3dc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-isstream-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)"
  downloadLocation: "https://registry.npmjs.org/isstream/-/isstream-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/isstream@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/isstream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "isstream"
  summary: "Determine if an object is a Stream"
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1"
  copyrightText: "Copyright (c) 2003-2009 Tom Wu"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1-vcs"
  copyrightText: "Copyright (c) 2003-2009 Tom Wu"
  downloadLocation: "git+https://github.com/andyperlitch/jsbn.git@ed7e7ab56bd2b8a4447bc0c1ef08548b6dad89a2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-jsbn-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2003-2009 Tom Wu"
  downloadLocation: "https://registry.npmjs.org/jsbn/-/jsbn-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsbn@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/andyperlitch/jsbn#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsbn"
  summary: "The jsbn library is a fast, portable implementation of large-number math\
    \ in pure JavaScript, enabling public-key crypto and other applications on desktop\
    \ and mobile browsers."
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.2.3"
  copyrightText: "Copyright (c) 2007 Kris Zyp SitePen (www.sitepen.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "AFL-2.1 AND BSD-3-Clause"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.2.3-vcs"
  copyrightText: "Copyright (c) 2007 Kris Zyp SitePen (www.sitepen.com)"
  downloadLocation: "git+ssh://github.com/kriszyp/json-schema.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-json-schema-0.2.3-source-artifact"
  copyrightText: "Copyright (c) 2007 Kris Zyp SitePen (www.sitepen.com)"
  downloadLocation: "https://registry.npmjs.org/json-schema/-/json-schema-0.2.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema@0.2.3"
  filesAnalyzed: false
  homepage: "https://github.com/kriszyp/json-schema#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema"
  summary: "JSON Schema validation and specifications"
  versionInfo: "0.2.3"
- SPDXID: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
  copyrightText: "Copyright (c) 2017 Evgeny Poberezkin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema-traverse@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/json-schema-traverse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "json-schema-traverse"
  summary: "Traverse JSON Schema passing each schema object to callback"
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-vcs"
  copyrightText: "Copyright (c) 2017 Evgeny Poberezkin"
  downloadLocation: "git+https://github.com/epoberezkin/json-schema-traverse.git@bc898eeee723833fc9d604523e00014350bcc4e1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema-traverse@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/json-schema-traverse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema-traverse"
  summary: "Traverse JSON Schema passing each schema object to callback"
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-source-artifact"
  copyrightText: "Copyright (c) 2017 Evgeny Poberezkin"
  downloadLocation: "https://registry.npmjs.org/json-schema-traverse/-/json-schema-traverse-0.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-schema-traverse@0.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/epoberezkin/json-schema-traverse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-schema-traverse"
  summary: "Traverse JSON Schema passing each schema object to callback"
  versionInfo: "0.4.1"
- SPDXID: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stable-stringify-without-jsonify@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/samn/json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "json-stable-stringify-without-jsonify"
  summary: "deterministic JSON.stringify() with custom sorting to get deterministic\
    \ hashes from stringified results, with no public domain dependencies"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/samn/json-stable-stringify.git@c0b3c36d976c54e31a814c492cd1c2557a4d3758"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stable-stringify-without-jsonify@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/samn/json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stable-stringify-without-jsonify"
  summary: "deterministic JSON.stringify() with custom sorting to get deterministic\
    \ hashes from stringified results, with no public domain dependencies"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/json-stable-stringify-without-jsonify/-/json-stable-stringify-without-jsonify-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stable-stringify-without-jsonify@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/samn/json-stable-stringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stable-stringify-without-jsonify"
  summary: "deterministic JSON.stringify() with custom sorting to get deterministic\
    \ hashes from stringified results, with no public domain dependencies"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/json-stringify-safe.git@3890dceab3ad14f8701e38ca74f38276abc76de5"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/json-stringify-safe/-/json-stringify-safe-5.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/json-stringify-safe@5.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/json-stringify-safe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "json-stringify-safe"
  summary: "Like JSON.stringify, but doesn't blow up on circular refs."
  versionInfo: "5.0.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.1"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.1-vcs"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "git+https://github.com/joyent/node-jsprim.git@f7d80a9e8e3f79c0b76448ad9ceab252fb309b32"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-jsprim-1.4.1-source-artifact"
  copyrightText: "Copyright (c) 2012 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/jsprim/-/jsprim-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/jsprim@1.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/joyent/node-jsprim#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsprim"
  summary: "utilities for primitive JavaScript types"
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-kind-of-1.1.0"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/kind-of@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/kind-of"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "kind-of"
  summary: "Get the native type of a value."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-kind-of-1.1.0-vcs"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/kind-of.git@4ee1c34ffba8743451ddef17b4a6588468ba187d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/kind-of@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/kind-of"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "kind-of"
  summary: "Get the native type of a value."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-kind-of-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014-2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/kind-of/-/kind-of-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/kind-of@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/kind-of"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "kind-of"
  summary: "Get the native type of a value."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-lazystream-1.0.0"
  copyrightText: "Copyright (c) 2013 J. Pommerening"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lazystream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jpommerening/node-lazystream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lazystream"
  summary: "Open Node Streams on demand."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-lazystream-1.0.0-vcs"
  copyrightText: "Copyright (c) 2013 J. Pommerening"
  downloadLocation: "git+https://github.com/jpommerening/node-lazystream.git@f1f047c1957c75d39da6d4c21bb1d5196427d6c6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lazystream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jpommerening/node-lazystream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lazystream"
  summary: "Open Node Streams on demand."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-lazystream-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2013 J. Pommerening"
  downloadLocation: "https://registry.npmjs.org/lazystream/-/lazystream-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lazystream@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jpommerening/node-lazystream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lazystream"
  summary: "Open Node Streams on demand."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-lead-1.0.0"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lead@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/lead#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lead"
  summary: "Sink your streams."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-lead-1.0.0-vcs"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/lead.git@76ad327e216f34cf93fee45f32dde9f158bf8b2c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lead@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/lead#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lead"
  summary: "Sink your streams."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-lead-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/lead/-/lead-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lead@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/lead#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lead"
  summary: "Sink your streams."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-linkify-it-2.1.0"
  copyrightText: "Copyright (c) 2015 Vitaly Puzrin"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/linkify-it@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/linkify-it#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "linkify-it"
  summary: "Links recognition library with FULL unicode support"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-linkify-it-2.1.0-vcs"
  copyrightText: "Copyright (c) 2015 Vitaly Puzrin"
  downloadLocation: "git+https://github.com/markdown-it/linkify-it.git@1018f7d2936ebf5f3196591b42bac93d4250d5d3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/linkify-it@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/linkify-it#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "linkify-it"
  summary: "Links recognition library with FULL unicode support"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-linkify-it-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Vitaly Puzrin"
  downloadLocation: "https://registry.npmjs.org/linkify-it/-/linkify-it-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/linkify-it@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/linkify-it#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "linkify-it"
  summary: "Links recognition library with FULL unicode support"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.11"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright JS Foundation and other contributors <https://js.foundation/>\nCopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.11"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.11"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.11-vcs"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright JS Foundation and other contributors <https://js.foundation/>\nCopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "git+https://github.com/lodash/lodash.git@0843bd46ef805dd03c0c8d804630804f3ba0ca3c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.11"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.11"
- SPDXID: "SPDXRef-Package-NPM-lodash-4.17.11-source-artifact"
  copyrightText: "(c) 2009-2016 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) 2010-2016 Jeremy Ashkenas, DocumentCloud and Investigative\
    \ Reporters & Editors Backbone\nCopyright (c) 2006 Yahoo! Inc.\nCopyright (c)\
    \ 2007 Parakey Inc.\nCopyright (c) 2009-2016 Jeremy Ashkenas, DocumentCloud and\
    \ Investigative Reporters & Editors\nCopyright (c) 2010-2011 Marcus Westin\nCopyright\
    \ (c) 2010-2016 Jeremy Ashkenas, DocumentCloud\nCopyright 2009 The Dojo Foundation\n\
    Copyright JS Foundation and other contributors <https://js.foundation/>\nCopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\ncopyright\
    \ Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "https://registry.npmjs.org/lodash/-/lodash-4.17.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/lodash@4.17.11"
  filesAnalyzed: false
  homepage: "https://lodash.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "lodash"
  summary: "Lodash modular utilities."
  versionInfo: "4.17.11"
- SPDXID: "SPDXRef-Package-NPM-map-stream-0.0.7"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-stream@0.0.7"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/map-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "map-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-map-stream-0.0.7-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/map-stream.git@70794870aab81a7081be50eab59f6789253368da"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-stream@0.0.7"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/map-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-map-stream-0.0.7-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/map-stream/-/map-stream-0.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-stream@0.0.7"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/map-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "0.0.7"
- SPDXID: "SPDXRef-Package-NPM-map-stream-0.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-stream@0.1.0"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/map-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-map-stream-0.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dominictarr/map-stream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-stream@0.1.0"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/map-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-map-stream-0.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/map-stream/-/map-stream-0.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/map-stream@0.1.0"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/map-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "map-stream"
  summary: "construct pipes of streams of events"
  versionInfo: "0.1.0"
- SPDXID: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  copyrightText: "(c) (c) (r) (R) (tm)\n(c) (tm)\n(c) http://example.com\nCopyright\
    \ (c) 2014 Vitaly Puzrin, Alex Kocharin\nCopyright Joyent, Inc. and other Node\
    \ contributors\ncopyright (c)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/markdown-it@8.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/markdown-it#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "markdown-it"
  summary: "Markdown-it - modern pluggable markdown parser."
  versionInfo: "8.4.2"
- SPDXID: "SPDXRef-Package-NPM-markdown-it-8.4.2-vcs"
  copyrightText: "(c) (c) (r) (R) (tm)\n(c) (tm)\n(c) http://example.com\nCopyright\
    \ (c) 2014 Vitaly Puzrin, Alex Kocharin\nCopyright Joyent, Inc. and other Node\
    \ contributors\ncopyright (c)"
  downloadLocation: "git+https://github.com/markdown-it/markdown-it.git@2c02e3e2371f57fc09ba24229eb35f7f9400fad3"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/markdown-it@8.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/markdown-it#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "markdown-it"
  summary: "Markdown-it - modern pluggable markdown parser."
  versionInfo: "8.4.2"
- SPDXID: "SPDXRef-Package-NPM-markdown-it-8.4.2-source-artifact"
  copyrightText: "(c) (c) (r) (R) (tm)\n(c) (tm)\n(c) http://example.com\nCopyright\
    \ (c) 2014 Vitaly Puzrin, Alex Kocharin\nCopyright Joyent, Inc. and other Node\
    \ contributors\ncopyright (c)"
  downloadLocation: "https://registry.npmjs.org/markdown-it/-/markdown-it-8.4.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/markdown-it@8.4.2"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/markdown-it#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "markdown-it"
  summary: "Markdown-it - modern pluggable markdown parser."
  versionInfo: "8.4.2"
- SPDXID: "SPDXRef-Package-NPM-mdurl-1.0.1"
  copyrightText: "Copyright (c) 2015 Vitaly Puzrin, Alex Kocharin\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mdurl@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/mdurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mdurl"
  summary: "URL utilities for markdown-it"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-mdurl-1.0.1-vcs"
  copyrightText: "Copyright (c) 2015 Vitaly Puzrin, Alex Kocharin\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/markdown-it/mdurl.git@8bfd33610062a71155cc64254271555a49db8332"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mdurl@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/mdurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mdurl"
  summary: "URL utilities for markdown-it"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-mdurl-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Vitaly Puzrin, Alex Kocharin\nCopyright Joyent,\
    \ Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/mdurl/-/mdurl-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mdurl@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/mdurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mdurl"
  summary: "URL utilities for markdown-it"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0-vcs"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "git+https://github.com/broofa/node-mime.git@87b396e859aad0cea0845e706613d333c2b0bfdc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0-source-artifact"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer"
  downloadLocation: "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.38.0"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.38.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.38.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.38.0-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "git+https://github.com/jshttp/mime-db.git@73802502feea4d2ec25f8a5f1a8d4b1d64a8ed69"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.38.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.38.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.38.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ me@jongleberry.com"
  downloadLocation: "https://registry.npmjs.org/mime-db/-/mime-db-1.38.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.38.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.38.0"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.22"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.22"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.22"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.22-vcs"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "git+https://github.com/jshttp/mime-types.git@0ac5fe1ad9008b4b141e9f32fb4d63a6478669ba"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.22"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.22"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.22-source-artifact"
  copyrightText: "Copyright (c) 2014 Jonathan Ong\nCopyright (c) 2014 Jonathan Ong\
    \ <me@jongleberry.com>\nCopyright (c) 2015 Douglas Christopher Wilson\nCopyright\
    \ (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>"
  downloadLocation: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.22.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.22"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.22"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/minimatch.git@e46989a323d5f0aa4781eff5e2e6e7aafa223321"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimatch-3.0.4-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/minimatch/-/minimatch-3.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimatch@3.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minimatch#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimatch"
  summary: "a glob matcher in javascript"
  versionInfo: "3.0.4"
- SPDXID: "SPDXRef-Package-NPM-minimist-0.0.8"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@0.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "0.0.8"
- SPDXID: "SPDXRef-Package-NPM-minimist-0.0.8-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/substack/minimist.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@0.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "0.0.8"
- SPDXID: "SPDXRef-Package-NPM-minimist-0.0.8-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/minimist/-/minimist-0.0.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minimist@0.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/substack/minimist"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minimist"
  summary: "parse argument options"
  versionInfo: "0.0.8"
- SPDXID: "SPDXRef-Package-NPM-minipass-2.3.5"
  copyrightText: "Copyright (c) npm, Inc. and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minipass@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minipass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "minipass"
  summary: "minimal implementation of a PassThrough stream"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-minipass-2.3.5-vcs"
  copyrightText: "Copyright (c) npm, Inc. and Contributors"
  downloadLocation: "git+https://github.com/isaacs/minipass.git@d362cb255c2b2ad24b0b6bf8cef35c522ba29019"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minipass@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minipass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minipass"
  summary: "minimal implementation of a PassThrough stream"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-minipass-2.3.5-source-artifact"
  copyrightText: "Copyright (c) npm, Inc. and Contributors"
  downloadLocation: "https://registry.npmjs.org/minipass/-/minipass-2.3.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minipass@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minipass#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minipass"
  summary: "minimal implementation of a PassThrough stream"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-minizlib-1.2.1"
  copyrightText: "Copyright Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors\nCopyright Node.js contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minizlib@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minizlib#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "minizlib"
  summary: "A small fast zlib stream built on [minipass](http://npm.im/minipass) and\
    \ Node.js's zlib binding."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-minizlib-1.2.1-vcs"
  copyrightText: "Copyright Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors\nCopyright Node.js contributors"
  downloadLocation: "git+https://github.com/isaacs/minizlib.git@ad2e969851c3573eff84a5ddfe906344c814581b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minizlib@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minizlib#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minizlib"
  summary: "A small fast zlib stream built on [minipass](http://npm.im/minipass) and\
    \ Node.js's zlib binding."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-minizlib-1.2.1-source-artifact"
  copyrightText: "Copyright Isaac Z. Schlueter and Contributors\nCopyright Joyent,\
    \ Inc. and other Node contributors\nCopyright Node.js contributors"
  downloadLocation: "https://registry.npmjs.org/minizlib/-/minizlib-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/minizlib@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/minizlib#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "minizlib"
  summary: "A small fast zlib stream built on [minipass](http://npm.im/minipass) and\
    \ Node.js's zlib binding."
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.1"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.1-vcs"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "git+https://github.com/substack/node-mkdirp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-mkdirp-0.5.1-source-artifact"
  copyrightText: "Copyright 2010 James Halliday (mail@substack.net)"
  downloadLocation: "https://registry.npmjs.org/mkdirp/-/mkdirp-0.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mkdirp@0.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/substack/node-mkdirp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "Recursively mkdir, like `mkdir -p`"
  versionInfo: "0.5.1"
- SPDXID: "SPDXRef-Package-NPM-mocha-4.1.0"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2011-2012 Jake Luer <jake@alogicalparadox.com>\nCopyright (c) 2011-2017\
    \ JS Foundation and contributors, https://js.foundation\nCopyright (c) 2016 Bryan\
    \ Braun\ncopyright 2016-2017 JS Foundation (https://js.foundation) and contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mocha@4.1.0"
  filesAnalyzed: false
  homepage: "https://mochajs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mocha"
  summary: "simple, flexible, fun test framework"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-mocha-4.1.0-vcs"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2011-2012 Jake Luer <jake@alogicalparadox.com>\nCopyright (c) 2011-2017\
    \ JS Foundation and contributors, https://js.foundation\nCopyright (c) 2016 Bryan\
    \ Braun\ncopyright 2016-2017 JS Foundation (https://js.foundation) and contributors"
  downloadLocation: "git+https://github.com/mochajs/mocha.git@6b9ddc64e27d8700aa6d2cc8d0bb4b47b32d6768"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mocha@4.1.0"
  filesAnalyzed: false
  homepage: "https://mochajs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mocha"
  summary: "simple, flexible, fun test framework"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-mocha-4.1.0-source-artifact"
  copyrightText: "Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright\
    \ (c) 2011-2012 Jake Luer <jake@alogicalparadox.com>\nCopyright (c) 2011-2017\
    \ JS Foundation and contributors, https://js.foundation\nCopyright (c) 2016 Bryan\
    \ Braun\ncopyright 2016-2017 JS Foundation (https://js.foundation) and contributors"
  downloadLocation: "https://registry.npmjs.org/mocha/-/mocha-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mocha@4.1.0"
  filesAnalyzed: false
  homepage: "https://mochajs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mocha"
  summary: "simple, flexible, fun test framework"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "git+https://github.com/zeit/ms.git@9b88d1568a52ec9bb67ecc8d2aa224fa38fd41f4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Zeit, Inc."
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-multimatch-2.1.0"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com), Jon Schlinkert (https://github.com/jonschlinkert)\n\
    Copyright (c) Sindre Sorhus, Jon Schlinkert, contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/multimatch@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/multimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "multimatch"
  summary: "Extends minimatch.match() with support for multiple patterns"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-multimatch-2.1.0-vcs"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com), Jon Schlinkert (https://github.com/jonschlinkert)\n\
    Copyright (c) Sindre Sorhus, Jon Schlinkert, contributors"
  downloadLocation: "git+https://github.com/sindresorhus/multimatch.git@5b56d1689ef475975682a514b8e1f863794af419"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/multimatch@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/multimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "multimatch"
  summary: "Extends minimatch.match() with support for multiple patterns"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-multimatch-2.1.0-source-artifact"
  copyrightText: "(c) Sindre Sorhus (http://sindresorhus.com), Jon Schlinkert (https://github.com/jonschlinkert)\n\
    Copyright (c) Sindre Sorhus, Jon Schlinkert, contributors"
  downloadLocation: "https://registry.npmjs.org/multimatch/-/multimatch-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/multimatch@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/multimatch"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "multimatch"
  summary: "Extends minimatch.match() with support for multiple patterns"
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-mute-stream-0.0.8"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mute-stream@0.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/mute-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "mute-stream"
  summary: "Bytes go in, but they don't come out (when muted)."
  versionInfo: "0.0.8"
- SPDXID: "SPDXRef-Package-NPM-mute-stream-0.0.8-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/mute-stream.git@aa4a4baeaff5eeec83b5717738a44642f6948a9f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mute-stream@0.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/mute-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mute-stream"
  summary: "Bytes go in, but they don't come out (when muted)."
  versionInfo: "0.0.8"
- SPDXID: "SPDXRef-Package-NPM-mute-stream-0.0.8-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/mute-stream/-/mute-stream-0.0.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mute-stream@0.0.8"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/mute-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mute-stream"
  summary: "Bytes go in, but they don't come out (when muted)."
  versionInfo: "0.0.8"
- SPDXID: "SPDXRef-Package-NPM-node.extend-1.1.8"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc., <http://fsf.org/>\n\
    Copyright (c) 2011 Jordan Harband and Ben Lin\nCopyright 2011 John Resig\ncopyrighted\
    \ by the Free Software Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/node.extend@1.1.8"
  filesAnalyzed: false
  homepage: "https://github.com/dreamerslab/node.extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "GPL-2.0-only OR MIT"
  name: "node.extend"
  summary: "A port of jQuery.extend that actually works on node.js"
  versionInfo: "1.1.8"
- SPDXID: "SPDXRef-Package-NPM-node.extend-1.1.8-vcs"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc., <http://fsf.org/>\n\
    Copyright (c) 2011 Jordan Harband and Ben Lin\nCopyright 2011 John Resig\ncopyrighted\
    \ by the Free Software Foundation"
  downloadLocation: "git+https://github.com/dreamerslab/node.extend.git@d4dcc9215f24e36ba884140acee0ad0823f6c54d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/node.extend@1.1.8"
  filesAnalyzed: false
  homepage: "https://github.com/dreamerslab/node.extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node.extend"
  summary: "A port of jQuery.extend that actually works on node.js"
  versionInfo: "1.1.8"
- SPDXID: "SPDXRef-Package-NPM-node.extend-1.1.8-source-artifact"
  copyrightText: "Copyright (c) 1989, 1991 Free Software Foundation, Inc., <http://fsf.org/>\n\
    Copyright (c) 2011 Jordan Harband and Ben Lin\nCopyright 2011 John Resig\ncopyrighted\
    \ by the Free Software Foundation"
  downloadLocation: "https://registry.npmjs.org/node.extend/-/node.extend-1.1.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/node.extend@1.1.8"
  filesAnalyzed: false
  homepage: "https://github.com/dreamerslab/node.extend#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node.extend"
  summary: "A port of jQuery.extend that actually works on node.js"
  versionInfo: "1.1.8"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-2.1.1"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "normalize-path"
  summary: "Normalize file path slashes to be unix-like forward slashes. Also condenses\
    \ repeat slashes to a single slash and removes and trailing slashes unless disabled."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-2.1.1-vcs"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/normalize-path.git@da1a45e7a514910ce39875b5327b1d0fa9be3d3e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-path"
  summary: "Normalize file path slashes to be unix-like forward slashes. Also condenses\
    \ repeat slashes to a single slash and removes and trailing slashes unless disabled."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-normalize-path-2.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/normalize-path/-/normalize-path-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/normalize-path@2.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/normalize-path"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "normalize-path"
  summary: "Normalize file path slashes to be unix-like forward slashes. Also condenses\
    \ repeat slashes to a single slash and removes and trailing slashes unless disabled."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-now-and-later-2.0.0"
  copyrightText: "Copyright (c) 2014 Blaine Bublitz, Eric Schoffstall and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/now-and-later@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/now-and-later#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "now-and-later"
  summary: "Map over an array or object of values in parallel or series, passing each\
    \ through the async iterator, with optional lifecycle hooks."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-now-and-later-2.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Blaine Bublitz, Eric Schoffstall and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/now-and-later.git@771bb1509957b013f35852d94a26c4fa5e963e2a"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/now-and-later@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/now-and-later#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "now-and-later"
  summary: "Map over an array or object of values in parallel or series, passing each\
    \ through the async iterator, with optional lifecycle hooks."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-now-and-later-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Blaine Bublitz, Eric Schoffstall and other contributors"
  downloadLocation: "https://registry.npmjs.org/now-and-later/-/now-and-later-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/now-and-later@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/now-and-later#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "now-and-later"
  summary: "Map over an array or object of values in parallel or series, passing each\
    \ through the async iterator, with optional lifecycle hooks."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-nth-check-1.0.2"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nth-check@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/nth-check"
  licenseConcluded: "BSD-2-Clause"
  licenseDeclared: "BSD-2-Clause"
  name: "nth-check"
  summary: "performant nth-check parser & compiler"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-nth-check-1.0.2-vcs"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "git+https://github.com/fb55/nth-check.git@03a02587bbd126fafc3d2331ffef6ea5cb2f9b66"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nth-check@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/nth-check"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nth-check"
  summary: "performant nth-check parser & compiler"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-nth-check-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Felix Bohm"
  downloadLocation: "https://registry.npmjs.org/nth-check/-/nth-check-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/nth-check@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/fb55/nth-check"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nth-check"
  summary: "performant nth-check parser & compiler"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.9.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/oauth-sign.git@18a2513da6ba7a2c0cd8179170d7c296c7625137"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-oauth-sign-0.9.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/oauth-sign/-/oauth-sign-0.9.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/oauth-sign@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/oauth-sign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "oauth-sign"
  summary: "OAuth 1 signing. Formerly a vendor lib in mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-object-keys-1.1.0"
  copyrightText: "Copyright (c) 2013 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-keys@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object-keys"
  summary: "An Object.keys replacement, in case Object.keys is not available. From\
    \ https://github.com/es-shims/es5-shim"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-object-keys-1.1.0-vcs"
  copyrightText: "Copyright (c) 2013 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/object-keys.git@abd4ff039708a0166a57388b348730cbda4a1593"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-keys@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-keys"
  summary: "An Object.keys replacement, in case Object.keys is not available. From\
    \ https://github.com/es-shims/es5-shim"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-object-keys-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/object-keys/-/object-keys-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-keys@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object-keys#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-keys"
  summary: "An Object.keys replacement, in case Object.keys is not available. From\
    \ https://github.com/es-shims/es5-shim"
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.assign-4.1.0"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.assign@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object.assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object.assign"
  summary: "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.assign-4.1.0-vcs"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "git+https://github.com/ljharb/object.assign.git@5fd74aee40aba36e9a8eb0c329abd33a07b93164"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.assign@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object.assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object.assign"
  summary: "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-object.assign-4.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Jordan Harband"
  downloadLocation: "https://registry.npmjs.org/object.assign/-/object.assign-4.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object.assign@4.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/object.assign#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object.assign"
  summary: "ES6 spec-compliant Object.assign shim. From https://github.com/es-shims/es6-shim"
  versionInfo: "4.1.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/once.git@0e614d9f5a7e6f0305c625f6b581f6d80b33b8a6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-once-1.4.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/once/-/once-1.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/once@1.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/once#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "once"
  summary: "Run a function exactly one time"
  versionInfo: "1.4.0"
- SPDXID: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1"
  copyrightText: "Copyright (c) 2014 Artem Medeusheyev"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ordered-read-streams@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/armed/ordered-read-streams#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ordered-read-streams"
  summary: "Combines array of streams into one read stream in strict order"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1-vcs"
  copyrightText: "Copyright (c) 2014 Artem Medeusheyev"
  downloadLocation: "git+https://github.com/armed/ordered-read-streams.git@6c484a674210e49f50d0227bbf8bb0227ef07153"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ordered-read-streams@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/armed/ordered-read-streams#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ordered-read-streams"
  summary: "Combines array of streams into one read stream in strict order"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Artem Medeusheyev"
  downloadLocation: "https://registry.npmjs.org/ordered-read-streams/-/ordered-read-streams-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ordered-read-streams@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/armed/ordered-read-streams#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ordered-read-streams"
  summary: "Combines array of streams into one read stream in strict order"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-os-homedir-1.0.2"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/os-homedir@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/os-homedir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "os-homedir"
  summary: "Node.js 4 `os.homedir()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-os-homedir-1.0.2-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/os-homedir.git@b1b0ae70a5965fef7005ff6509a5dd1a78c95e36"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/os-homedir@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/os-homedir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "os-homedir"
  summary: "Node.js 4 `os.homedir()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-os-homedir-1.0.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/os-homedir/-/os-homedir-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/os-homedir@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/os-homedir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "os-homedir"
  summary: "Node.js 4 `os.homedir()` ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-os-tmpdir-1.0.2"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/os-tmpdir@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/os-tmpdir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "os-tmpdir"
  summary: "Node.js os.tmpdir() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-os-tmpdir-1.0.2-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/os-tmpdir.git@1abf9cf5611b4be7377060ea67054b45cbf6813c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/os-tmpdir@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/os-tmpdir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "os-tmpdir"
  summary: "Node.js os.tmpdir() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-os-tmpdir-1.0.2-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/os-tmpdir/-/os-tmpdir-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/os-tmpdir@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/os-tmpdir#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "os-tmpdir"
  summary: "Node.js os.tmpdir() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-osenv-0.1.5"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/osenv@0.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/osenv#readme"
  licenseConcluded: "ISC"
  licenseDeclared: "ISC"
  name: "osenv"
  summary: "Look up environment settings specific to different operating systems"
  versionInfo: "0.1.5"
- SPDXID: "SPDXRef-Package-NPM-osenv-0.1.5-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/npm/osenv.git@1c642b8f5ddb1f99671a300a466bf42ffb9f5ea2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/osenv@0.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/osenv#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "osenv"
  summary: "Look up environment settings specific to different operating systems"
  versionInfo: "0.1.5"
- SPDXID: "SPDXRef-Package-NPM-osenv-0.1.5-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/osenv/-/osenv-0.1.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/osenv@0.1.5"
  filesAnalyzed: false
  homepage: "https://github.com/npm/osenv#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "osenv"
  summary: "Look up environment settings specific to different operating systems"
  versionInfo: "0.1.5"
- SPDXID: "SPDXRef-Package-NPM-parse-semver-1.1.1"
  copyrightText: "Copyright (c) 2015 Charlike Mike Reagent\nCopyright (c) 2015-2016\
    \ Charlike Make Reagent (http://j.mp/1stW47C)\nCopyright (c) 2015-2016 Charlike\
    \ Mike Reagent <@tunnckoCore> (http://www.tunnckocore.tk)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-semver@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/tunnckocore/parse-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parse-semver"
  summary: "Parse, normalize and validate given semver shorthand (e.g. gulp@v3.8.10)\
    \ to object."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-parse-semver-1.1.1-vcs"
  copyrightText: "Copyright (c) 2015 Charlike Mike Reagent\nCopyright (c) 2015-2016\
    \ Charlike Make Reagent (http://j.mp/1stW47C)\nCopyright (c) 2015-2016 Charlike\
    \ Mike Reagent <@tunnckoCore> (http://www.tunnckocore.tk)"
  downloadLocation: "git+https://github.com/tunnckocore/parse-semver.git@c104abf03ae25fa0046d6c0249c78a5a5824a49f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-semver@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/tunnckocore/parse-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-semver"
  summary: "Parse, normalize and validate given semver shorthand (e.g. gulp@v3.8.10)\
    \ to object."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-parse-semver-1.1.1-source-artifact"
  copyrightText: "Copyright (c) 2015 Charlike Mike Reagent\nCopyright (c) 2015-2016\
    \ Charlike Make Reagent (http://j.mp/1stW47C)\nCopyright (c) 2015-2016 Charlike\
    \ Mike Reagent <@tunnckoCore> (http://www.tunnckocore.tk)"
  downloadLocation: "https://registry.npmjs.org/parse-semver/-/parse-semver-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse-semver@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/tunnckocore/parse-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse-semver"
  summary: "Parse, normalize and validate given semver shorthand (e.g. gulp@v3.8.10)\
    \ to object."
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-parse5-3.0.3"
  copyrightText: "(c) 2014 title\n(c) Copyright 2004-2011 Apple Computer, Inc., Mozilla\
    \ Foundation, and Opera Software\nCopyright (c) 2013-2016 Ivan Nikulin (ifaaan@gmail.com,\
    \ https://github.com/inikulin)\nCopyright 2014 http://joyent.com/' Joyent, Inc\n\
    copyright content http://cern.ch/copyright\nhttp://cern.ch/copyright' (c) Copyright\
    \ CERN 2014\nhttp://cern.ch/copyright' (c) Copyright CERN 2014 http://cern.ch/cern60"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse5@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/inikulin/parse5"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parse5"
  summary: "HTML parsing/serialization toolset for Node.js. WHATWG HTML Living Standard\
    \ (aka HTML5)-compliant."
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-parse5-3.0.3-vcs"
  copyrightText: "(c) 2014 title\n(c) Copyright 2004-2011 Apple Computer, Inc., Mozilla\
    \ Foundation, and Opera Software\nCopyright (c) 2013-2016 Ivan Nikulin (ifaaan@gmail.com,\
    \ https://github.com/inikulin)\nCopyright 2014 http://joyent.com/' Joyent, Inc\n\
    copyright content http://cern.ch/copyright\nhttp://cern.ch/copyright' (c) Copyright\
    \ CERN 2014\nhttp://cern.ch/copyright' (c) Copyright CERN 2014 http://cern.ch/cern60"
  downloadLocation: "git+https://github.com/inikulin/parse5.git@723d782abee65aaab9c50f92e73ac2029ae853df"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse5@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/inikulin/parse5"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse5"
  summary: "HTML parsing/serialization toolset for Node.js. WHATWG HTML Living Standard\
    \ (aka HTML5)-compliant."
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-parse5-3.0.3-source-artifact"
  copyrightText: "(c) 2014 title\n(c) Copyright 2004-2011 Apple Computer, Inc., Mozilla\
    \ Foundation, and Opera Software\nCopyright (c) 2013-2016 Ivan Nikulin (ifaaan@gmail.com,\
    \ https://github.com/inikulin)\nCopyright 2014 http://joyent.com/' Joyent, Inc\n\
    copyright content http://cern.ch/copyright\nhttp://cern.ch/copyright' (c) Copyright\
    \ CERN 2014\nhttp://cern.ch/copyright' (c) Copyright CERN 2014 http://cern.ch/cern60"
  downloadLocation: "https://registry.npmjs.org/parse5/-/parse5-3.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parse5@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/inikulin/parse5"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parse5"
  summary: "HTML parsing/serialization toolset for Node.js. WHATWG HTML Living Standard\
    \ (aka HTML5)-compliant."
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-path-dirname-1.0.2"
  copyrightText: "Copyright (c) Elan Shanker and Node.js contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-dirname@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/es128/path-dirname#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-dirname"
  summary: "Node.js path.dirname() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-path-dirname-1.0.2-vcs"
  copyrightText: "Copyright (c) Elan Shanker and Node.js contributors"
  downloadLocation: "git+https://github.com/es128/path-dirname.git@ba28247b19f27ec3fa187088d6169241b223f9f8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-dirname@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/es128/path-dirname#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-dirname"
  summary: "Node.js path.dirname() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-path-dirname-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Elan Shanker and Node.js contributors"
  downloadLocation: "https://registry.npmjs.org/path-dirname/-/path-dirname-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-dirname@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/es128/path-dirname#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-dirname"
  summary: "Node.js path.dirname() ponyfill"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-vcs"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/sindresorhus/path-is-absolute.git@edc91d348b21dac2ab65ea2fbec2868e2eff5eb6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-source-artifact"
  copyrightText: "(c) Sindre Sorhus (https://sindresorhus.com)\nCopyright (c) Sindre\
    \ Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/path-is-absolute/-/path-is-absolute-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-is-absolute@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/sindresorhus/path-is-absolute#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-is-absolute"
  summary: "Node.js 0.12 path.isAbsolute() ponyfill"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-pause-stream-0.0.11"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pause-stream@0.0.11"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0 AND MIT"
  name: "pause-stream"
  summary: "a ThroughStream that strictly buffers all readable events when paused."
  versionInfo: "0.0.11"
- SPDXID: "SPDXRef-Package-NPM-pause-stream-0.0.11-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dominictarr/pause-stream.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pause-stream@0.0.11"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pause-stream"
  summary: "a ThroughStream that strictly buffers all readable events when paused."
  versionInfo: "0.0.11"
- SPDXID: "SPDXRef-Package-NPM-pause-stream-0.0.11-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/pause-stream/-/pause-stream-0.0.11.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pause-stream@0.0.11"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pause-stream"
  summary: "a ThroughStream that strictly buffers all readable events when paused."
  versionInfo: "0.0.11"
- SPDXID: "SPDXRef-Package-NPM-pend-1.2.0"
  copyrightText: "Copyright (c) 2014 Andrew Kelley"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pend@1.2.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pend"
  summary: "dead-simple optimistic async helper"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-pend-1.2.0-vcs"
  copyrightText: "Copyright (c) 2014 Andrew Kelley"
  downloadLocation: "git+https://github.com/andrewrk/node-pend.git@ed57bbe8520518dca24d0c6bb847ffb6b68ae6f9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pend@1.2.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pend"
  summary: "dead-simple optimistic async helper"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-pend-1.2.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Andrew Kelley"
  downloadLocation: "https://registry.npmjs.org/pend/-/pend-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pend@1.2.0"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pend"
  summary: "dead-simple optimistic async helper"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-2.1.0"
  copyrightText: "Copyright (c) 2013, 2017 Braveg1rl"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/braveg1rl/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-2.1.0-vcs"
  copyrightText: "Copyright (c) 2013, 2017 Braveg1rl"
  downloadLocation: "git+https://github.com/braveg1rl/performance-now.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/braveg1rl/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-performance-now-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2013, 2017 Braveg1rl"
  downloadLocation: "https://registry.npmjs.org/performance-now/-/performance-now-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/performance-now@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/braveg1rl/performance-now"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "performance-now"
  summary: "Implements performance.now (based on process.hrtime)."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/plugin-error@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/plugin-error"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "plugin-error"
  summary: "Error handling for vinyl plugins. Just an abstraction of what's in gulp-util\
    \ with minor changes."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-plugin-error-0.1.2-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/jonschlinkert/plugin-error.git@896ae7a976e234eba8ff2d50f9edde031c55dd3d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/plugin-error@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/plugin-error"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plugin-error"
  summary: "Error handling for vinyl plugins. Just an abstraction of what's in gulp-util\
    \ with minor changes."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-plugin-error-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/plugin-error/-/plugin-error-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/plugin-error@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/plugin-error"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "plugin-error"
  summary: "Error handling for vinyl plugins. Just an abstraction of what's in gulp-util\
    \ with minor changes."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-process-nextick-args-2.0.0"
  copyrightText: "Copyright (c) 2015 Calvin Metcalf"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/process-nextick-args@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/calvinmetcalf/process-nextick-args"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "process-nextick-args"
  summary: "process.nextTick but always with args"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-process-nextick-args-2.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Calvin Metcalf"
  downloadLocation: "git+https://github.com/calvinmetcalf/process-nextick-args.git@8407900951af3e7651fca50f127f0e4ddc01ad55"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/process-nextick-args@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/calvinmetcalf/process-nextick-args"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "process-nextick-args"
  summary: "process.nextTick but always with args"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-process-nextick-args-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Calvin Metcalf"
  downloadLocation: "https://registry.npmjs.org/process-nextick-args/-/process-nextick-args-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/process-nextick-args@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/calvinmetcalf/process-nextick-args"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "process-nextick-args"
  summary: "process.nextTick but always with args"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-psl-1.1.31"
  copyrightText: "Copyright (c) 2017 Lupo Montero <lupomontero@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/psl@1.1.31"
  filesAnalyzed: false
  homepage: "https://github.com/wrangr/psl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "psl"
  summary: "Domain name parser based on the Public Suffix List"
  versionInfo: "1.1.31"
- SPDXID: "SPDXRef-Package-NPM-psl-1.1.31-vcs"
  copyrightText: "Copyright (c) 2017 Lupo Montero <lupomontero@gmail.com>"
  downloadLocation: "git+ssh://github.com/wrangr/psl.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/psl@1.1.31"
  filesAnalyzed: false
  homepage: "https://github.com/wrangr/psl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "psl"
  summary: "Domain name parser based on the Public Suffix List"
  versionInfo: "1.1.31"
- SPDXID: "SPDXRef-Package-NPM-psl-1.1.31-source-artifact"
  copyrightText: "Copyright (c) 2017 Lupo Montero <lupomontero@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/psl/-/psl-1.1.31.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/psl@1.1.31"
  filesAnalyzed: false
  homepage: "https://github.com/wrangr/psl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "psl"
  summary: "Domain name parser based on the Public Suffix List"
  versionInfo: "1.1.31"
- SPDXID: "SPDXRef-Package-NPM-pump-2.0.1"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pump-2.0.1-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/pump.git@4c93a460459fd970dd963fd9600c75b0e90404c2"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pump-2.0.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/pump/-/pump-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pump@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pump#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pump"
  summary: "pipe streams together and close all of them if one of them closes"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-pumpify-1.5.1"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pumpify@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pumpify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "pumpify"
  summary: "Combine an array of streams into a single duplex stream using pump and\
    \ duplexify"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-pumpify-1.5.1-vcs"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/pumpify.git@10f2659c137e291648c7179f69cfe50c3a726a2b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pumpify@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pumpify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pumpify"
  summary: "Combine an array of streams into a single duplex stream using pump and\
    \ duplexify"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-pumpify-1.5.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/pumpify/-/pumpify-1.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/pumpify@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/pumpify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "pumpify"
  summary: "Combine an array of streams into a single duplex stream using pump and\
    \ duplexify"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/bestiejs/punycode.js.git@0fbadd6e81f3a0ce06c38998040d6db6bdfbc5c9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-1.4.1-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/punycode/-/punycode-1.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@1.4.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "1.4.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-2.1.1"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@2.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-2.1.1-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/bestiejs/punycode.js.git@68df855dc42d1086ada161331b3074468e8d848d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@2.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-punycode-2.1.1-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/punycode/-/punycode-2.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/punycode@2.1.1"
  filesAnalyzed: false
  homepage: "https://mths.be/punycode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "punycode"
  summary: "A robust Punycode converter that fully complies to RFC 3492 and RFC 5891,\
    \ and works on nearly all JavaScript platforms."
  versionInfo: "2.1.1"
- SPDXID: "SPDXRef-Package-NPM-q-1.5.1"
  copyrightText: "Copyright (c) 2008-2011 Pivotal Labs\nCopyright (c) 2011 Google\
    \ Inc.\nCopyright 2007-2009 Tyler Close\nCopyright 2009-2017 Kris Kowal\nCopyright\
    \ 2009-2017 Kristopher Michael Kowal\nCopyright 2009-2017 Kristopher Michael Kowal\
    \ and contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/q@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/kriskowal/q"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "q"
  summary: "A library for promises (CommonJS/Promises/A,B,D)"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-q-1.5.1-vcs"
  copyrightText: "Copyright (c) 2008-2011 Pivotal Labs\nCopyright (c) 2011 Google\
    \ Inc.\nCopyright 2007-2009 Tyler Close\nCopyright 2009-2017 Kris Kowal\nCopyright\
    \ 2009-2017 Kristopher Michael Kowal\nCopyright 2009-2017 Kristopher Michael Kowal\
    \ and contributors"
  downloadLocation: "git+https://github.com/kriskowal/q.git@c2f5a6f35456389a806acca50bfd929cbe30c4cb"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/q@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/kriskowal/q"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "q"
  summary: "A library for promises (CommonJS/Promises/A,B,D)"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-q-1.5.1-source-artifact"
  copyrightText: "Copyright (c) 2008-2011 Pivotal Labs\nCopyright (c) 2011 Google\
    \ Inc.\nCopyright 2007-2009 Tyler Close\nCopyright 2009-2017 Kris Kowal\nCopyright\
    \ 2009-2017 Kristopher Michael Kowal\nCopyright 2009-2017 Kristopher Michael Kowal\
    \ and contributors"
  downloadLocation: "https://registry.npmjs.org/q/-/q-1.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/q@1.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/kriskowal/q"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "q"
  summary: "A library for promises (CommonJS/Promises/A,B,D)"
  versionInfo: "1.5.1"
- SPDXID: "SPDXRef-Package-NPM-qs-6.5.2"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.5.2"
- SPDXID: "SPDXRef-Package-NPM-qs-6.5.2-vcs"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors"
  downloadLocation: "git+https://github.com/ljharb/qs.git@eaabd05558b657c75a137caf2eb030e8e856b82f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.5.2"
- SPDXID: "SPDXRef-Package-NPM-qs-6.5.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Nathan LaFreniere and other contributors"
  downloadLocation: "https://registry.npmjs.org/qs/-/qs-6.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.5.2"
- SPDXID: "SPDXRef-Package-NPM-querystringify-2.1.0"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/querystringify@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/querystringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "querystringify"
  summary: "Querystringify - Small, simple but powerful query string parser."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-querystringify-2.1.0-vcs"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "git+https://github.com/unshiftio/querystringify.git@e619535472a7e77312a244402df6dd1f60e365e4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/querystringify@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/querystringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "querystringify"
  summary: "Querystringify - Small, simple but powerful query string parser."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-querystringify-2.1.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "https://registry.npmjs.org/querystringify/-/querystringify-2.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/querystringify@2.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/querystringify"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "querystringify"
  summary: "Querystringify - Small, simple but powerful query string parser."
  versionInfo: "2.1.0"
- SPDXID: "SPDXRef-Package-NPM-queue-4.5.1"
  copyrightText: "Copyright (c) 2014 Jesse Tane <jesse.tane@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/queue@4.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/jessetane/queue#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "queue"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "4.5.1"
- SPDXID: "SPDXRef-Package-NPM-queue-4.5.1-vcs"
  copyrightText: "Copyright (c) 2014 Jesse Tane <jesse.tane@gmail.com>"
  downloadLocation: "git+https://github.com/jessetane/queue.git@c76211c5055bbba5e8e7ed59ed5272051136cc2b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/queue@4.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/jessetane/queue#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "queue"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "4.5.1"
- SPDXID: "SPDXRef-Package-NPM-queue-4.5.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Jesse Tane <jesse.tane@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/queue/-/queue-4.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/queue@4.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/jessetane/queue#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "queue"
  summary: "asynchronous function queue with adjustable concurrency"
  versionInfo: "4.5.1"
- SPDXID: "SPDXRef-Package-NPM-read-1.0.7"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/read#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "read"
  summary: "read(1) for node programs"
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-read-1.0.7-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/read.git@b14516b9236c40140fd0666567f5d0c588a09a62"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/read#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read"
  summary: "read(1) for node programs"
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-read-1.0.7-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/read/-/read-1.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/read@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/read#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "read"
  summary: "read(1) for node programs"
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@1.0.34"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "readable-stream"
  summary: "Streams2, a user-land copy of the stream library from Node.js v0.10.x"
  versionInfo: "1.0.34"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-1.0.34-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/isaacs/readable-stream.git@1227c7b66deedb1dc5284a89425854d5f7ad9576"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@1.0.34"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams2, a user-land copy of the stream library from Node.js v0.10.x"
  versionInfo: "1.0.34"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-1.0.34-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/readable-stream/-/readable-stream-1.0.34.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@1.0.34"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams2, a user-land copy of the stream library from Node.js v0.10.x"
  versionInfo: "1.0.34"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@2.3.6"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "2.3.6"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-2.3.6-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/readable-stream.git@b3cf9b1f46eaa1865930ae03b96d7a4a570746f0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@2.3.6"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "2.3.6"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-2.3.6-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/readable-stream/-/readable-stream-2.3.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@2.3.6"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "2.3.6"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-3.1.1"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-3.1.1-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/readable-stream.git@1df8b0cf67af5c3f154d37d88085f4b9385a4738"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-readable-stream-3.1.1-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/readable-stream/-/readable-stream-3.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/readable-stream@3.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/readable-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "readable-stream"
  summary: "Streams3, a user-land copy of the stream library from Node.js"
  versionInfo: "3.1.1"
- SPDXID: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-bom-buffer@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/remove-bom-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "remove-bom-buffer"
  summary: "Remove a byte order mark (BOM) from a buffer."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0-vcs"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/remove-bom-buffer.git@287783d0d6bdfd8f8bb863ecc5493002f2e55594"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-bom-buffer@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/remove-bom-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "remove-bom-buffer"
  summary: "Remove a byte order mark (BOM) from a buffer."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015-2017 Jon Schlinkert\nCopyright (c) 2017 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/remove-bom-buffer/-/remove-bom-buffer-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-bom-buffer@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/remove-bom-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "remove-bom-buffer"
  summary: "Remove a byte order mark (BOM) from a buffer."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-bom-stream@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/remove-bom-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "remove-bom-stream"
  summary: "Remove a UTF8 BOM at the start of the stream."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0-vcs"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/remove-bom-stream.git@fb8c2e7aa8ce7935a147c08f8fbec66a70d65ef8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-bom-stream@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/remove-bom-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "remove-bom-stream"
  summary: "Remove a UTF8 BOM at the start of the stream."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/remove-bom-stream/-/remove-bom-stream-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-bom-stream@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/remove-bom-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "remove-bom-stream"
  summary: "Remove a UTF8 BOM at the start of the stream."
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-trailing-separator@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/darsain/remove-trailing-separator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "remove-trailing-separator"
  summary: "Removes separators from the end of the string."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/darsain/remove-trailing-separator.git@f4e8acca09106efeef5a5164f1ad2192fe97fd69"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-trailing-separator@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/darsain/remove-trailing-separator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "remove-trailing-separator"
  summary: "Removes separators from the end of the string."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/remove-trailing-separator/-/remove-trailing-separator-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/remove-trailing-separator@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/darsain/remove-trailing-separator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "remove-trailing-separator"
  summary: "Removes separators from the end of the string."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-replace-ext-0.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/replace-ext@0.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/wearefractal/replace-ext"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "replace-ext"
  summary: "Replaces a file extension with another one"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-replace-ext-0.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/wearefractal/replace-ext.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/replace-ext@0.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/wearefractal/replace-ext"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "replace-ext"
  summary: "Replaces a file extension with another one"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-replace-ext-0.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/replace-ext/-/replace-ext-0.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/replace-ext@0.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/wearefractal/replace-ext"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "replace-ext"
  summary: "Replaces a file extension with another one"
  versionInfo: "0.0.1"
- SPDXID: "SPDXRef-Package-NPM-replace-ext-1.0.0"
  copyrightText: "Copyright (c) 2014 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/replace-ext@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/replace-ext#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "replace-ext"
  summary: "Replaces a file extension with another one"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-replace-ext-1.0.0-vcs"
  copyrightText: "Copyright (c) 2014 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/replace-ext.git@adaec75e316f1c375dc7a2cb51c7b762b135cc0e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/replace-ext@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/replace-ext#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "replace-ext"
  summary: "Replaces a file extension with another one"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-replace-ext-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/replace-ext/-/replace-ext-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/replace-ext@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/replace-ext#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "replace-ext"
  summary: "Replaces a file extension with another one"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.88.0"
  copyrightText: "Copyright 2010-2012 Mikeal Rogers"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.88.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "Apache-2.0"
  licenseDeclared: "Apache-2.0"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.88.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.88.0-vcs"
  copyrightText: "Copyright 2010-2012 Mikeal Rogers"
  downloadLocation: "git+https://github.com/request/request.git@642024036379239a7fa29c27ef7bb4dd3fa3b3a4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.88.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.88.0"
- SPDXID: "SPDXRef-Package-NPM-request-2.88.0-source-artifact"
  copyrightText: "Copyright 2010-2012 Mikeal Rogers"
  downloadLocation: "https://registry.npmjs.org/request/-/request-2.88.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/request@2.88.0"
  filesAnalyzed: false
  homepage: "https://github.com/request/request#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "Simplified HTTP request client."
  versionInfo: "2.88.0"
- SPDXID: "SPDXRef-Package-NPM-requires-port-1.0.0"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/requires-port@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/requires-port"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "requires-port"
  summary: "Check if a protocol requires a certain port number to be added to an URL."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-requires-port-1.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "git+https://github.com/unshiftio/requires-port.git@3a552b935dd2ddba8f2ddf9096932f0f2024edfd"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/requires-port@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/requires-port"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "requires-port"
  summary: "Check if a protocol requires a certain port number to be added to an URL."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-requires-port-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "https://registry.npmjs.org/requires-port/-/requires-port-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/requires-port@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/requires-port"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "requires-port"
  summary: "Check if a protocol requires a certain port number to be added to an URL."
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-options-1.1.0"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve-options@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/resolve-options#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "resolve-options"
  summary: "Resolve an options object based on configuration."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-options-1.1.0-vcs"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/resolve-options.git@0ef703616063c32751b66085732abfe5306d91a6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve-options@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/resolve-options#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve-options"
  summary: "Resolve an options object based on configuration."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-resolve-options-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/resolve-options/-/resolve-options-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/resolve-options@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/resolve-options#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "resolve-options"
  summary: "Resolve an options object based on configuration."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.6.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.6.3"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.6.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/rimraf.git@9442819908e52f2c32620e8fa609d7a5d472cc2c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.6.3"
- SPDXID: "SPDXRef-Package-NPM-rimraf-2.6.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/rimraf/-/rimraf-2.6.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/rimraf@2.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/rimraf#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "rimraf"
  summary: "A deep deletion module for node (like `rm -rf`)"
  versionInfo: "2.6.3"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.1.2"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.1.2-vcs"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "git+https://github.com/feross/safe-buffer.git@649435cc8e2d1f3ecdc7caf323f1cb1187307a16"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.1.2"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.1.2-source-artifact"
  copyrightText: "Copyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)"
  downloadLocation: "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "git+https://github.com/ChALkeR/safer-buffer.git@e8ac214944eda30e1e6c6b7d7e7f6a21cf7dce7c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
  copyrightText: "Copyright (c) 2018 Nikita Skovoroda <chalkerx@gmail.com>"
  downloadLocation: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-semver-5.6.0"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.6.0"
- SPDXID: "SPDXRef-Package-NPM-semver-5.6.0-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter"
  downloadLocation: "git+https://github.com/npm/node-semver.git@46727afbe21b8d14641a0d1c4c7ee58bd053f922"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.6.0"
- SPDXID: "SPDXRef-Package-NPM-semver-5.6.0-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright Isaac\
    \ Z. Schlueter"
  downloadLocation: "https://registry.npmjs.org/semver/-/semver-5.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/semver@5.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-semver#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "semver"
  summary: "The semantic version parser used by npm."
  versionInfo: "5.6.0"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.6.1"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2011, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.6.1-vcs"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2011, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "git+ssh://github.com/mozilla/source-map.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-source-map-0.6.1-source-artifact"
  copyrightText: "Copyright (c) 2009-2011 Mozilla Foundation and contributors\nCopyright\
    \ 2009-2011 Mozilla Foundation and contributors\nCopyright 2009-2011, 2014 Mozilla\
    \ Foundation and contributors\nCopyright 2011 The Closure Compiler Authors"
  downloadLocation: "https://registry.npmjs.org/source-map/-/source-map-0.6.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map@0.6.1"
  filesAnalyzed: false
  homepage: "https://github.com/mozilla/source-map"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map"
  summary: "Generates and consumes source maps"
  versionInfo: "0.6.1"
- SPDXID: "SPDXRef-Package-NPM-source-map-support-0.5.10"
  copyrightText: "Copyright (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2014\
    \ Evan Wallace"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map-support@0.5.10"
  filesAnalyzed: false
  homepage: "https://github.com/evanw/node-source-map-support#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "source-map-support"
  summary: "Fixes stack traces for files with source maps"
  versionInfo: "0.5.10"
- SPDXID: "SPDXRef-Package-NPM-source-map-support-0.5.10-vcs"
  copyrightText: "Copyright (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2014\
    \ Evan Wallace"
  downloadLocation: "git+https://github.com/evanw/node-source-map-support.git@80643a622cdedf03d150b34911f859c97d1c5fe8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map-support@0.5.10"
  filesAnalyzed: false
  homepage: "https://github.com/evanw/node-source-map-support#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map-support"
  summary: "Fixes stack traces for files with source maps"
  versionInfo: "0.5.10"
- SPDXID: "SPDXRef-Package-NPM-source-map-support-0.5.10-source-artifact"
  copyrightText: "Copyright (c) 2010-2012 The Dojo Foundation\nCopyright (c) 2014\
    \ Evan Wallace"
  downloadLocation: "https://registry.npmjs.org/source-map-support/-/source-map-support-0.5.10.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/source-map-support@0.5.10"
  filesAnalyzed: false
  homepage: "https://github.com/evanw/node-source-map-support#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "source-map-support"
  summary: "Fixes stack traces for files with source maps"
  versionInfo: "0.5.10"
- SPDXID: "SPDXRef-Package-NPM-split-0.3.3"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split@0.3.3"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/split"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "split"
  summary: "split a Text Stream into a Line Stream"
  versionInfo: "0.3.3"
- SPDXID: "SPDXRef-Package-NPM-split-0.3.3-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/split.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split@0.3.3"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/split"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "split"
  summary: "split a Text Stream into a Line Stream"
  versionInfo: "0.3.3"
- SPDXID: "SPDXRef-Package-NPM-split-0.3.3-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/split/-/split-0.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split@0.3.3"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/split"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "split"
  summary: "split a Text Stream into a Line Stream"
  versionInfo: "0.3.3"
- SPDXID: "SPDXRef-Package-NPM-split-1.0.1"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split@1.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/split"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "split"
  summary: "split a Text Stream into a Line Stream"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-split-1.0.1-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/split.git@b567eb4768dfb1d2153e19702438626059ac9f37"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split@1.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/split"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "split"
  summary: "split a Text Stream into a Line Stream"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-split-1.0.1-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/split/-/split-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/split@1.0.1"
  filesAnalyzed: false
  homepage: "http://github.com/dominictarr/split"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "split"
  summary: "split a Text Stream into a Line Stream"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "BSD-3-Clause"
  licenseDeclared: "BSD-3-Clause"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3-vcs"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "git+https://github.com/alexei/sprintf.js.git@747b806c2dab5b64d5c9958c42884946a187c3b1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sprintf-js-1.0.3-source-artifact"
  copyrightText: "Copyright (c) 2007-2014 Alexandru Marasteanu"
  downloadLocation: "https://registry.npmjs.org/sprintf-js/-/sprintf-js-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sprintf-js@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/alexei/sprintf.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sprintf-js"
  summary: "JavaScript sprintf implementation"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.16.1"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2011, 2015-2018 Joyent, Inc.\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.16.1"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.16.1"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.16.1-vcs"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2011, 2015-2018 Joyent, Inc.\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "git+https://github.com/joyent/node-sshpk.git@1aece0d1df155e60e4cb0ae42cb3ed7aa043e174"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.16.1"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.16.1"
- SPDXID: "SPDXRef-Package-NPM-sshpk-1.16.1-source-artifact"
  copyrightText: "(c) (c)\nCopyright (c) 1989, 1991 Free Software Foundation, Inc.\n\
    Copyright (c) 1991 by Lucent Technologies\nCopyright (c) 1996-1999 Netscape Communications\
    \ Corporation\nCopyright (c) 1998-2001, 2005-2006 the Initial Developer\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright 2008 Sun Microsystems, Inc.\nCopyright 2011\
    \ Joyent, Inc.\nCopyright 2011, 2015-2018 Joyent, Inc.\ncopyrighted by the Free\
    \ Software Foundation"
  downloadLocation: "https://registry.npmjs.org/sshpk/-/sshpk-1.16.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/sshpk@1.16.1"
  filesAnalyzed: false
  homepage: "https://github.com/arekinath/node-sshpk#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "sshpk"
  summary: "A library for finding and using SSH public keys"
  versionInfo: "1.16.1"
- SPDXID: "SPDXRef-Package-NPM-stat-mode-0.2.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stat-mode@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/stat-mode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stat-mode"
  summary: "Offers convenient getters and setters for the stat `mode`"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-stat-mode-0.2.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/TooTallNate/stat-mode.git@c5fda09e051af3b314d18a72d41571f548da3700"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stat-mode@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/stat-mode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stat-mode"
  summary: "Offers convenient getters and setters for the stat `mode`"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-stat-mode-0.2.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/stat-mode/-/stat-mode-0.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stat-mode@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/stat-mode"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stat-mode"
  summary: "Offers convenient getters and setters for the stat `mode`"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-stream-combiner-0.0.4"
  copyrightText: "Copyright (c) 2012 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-combiner@0.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/stream-combiner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stream-combiner"
  summary: "<img src=https://secure.travis-ci.org/dominictarr/stream-combiner.png?branch=master>"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Package-NPM-stream-combiner-0.0.4-vcs"
  copyrightText: "Copyright (c) 2012 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/stream-combiner.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-combiner@0.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/stream-combiner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-combiner"
  summary: "<img src=https://secure.travis-ci.org/dominictarr/stream-combiner.png?branch=master>"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Package-NPM-stream-combiner-0.0.4-source-artifact"
  copyrightText: "Copyright (c) 2012 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-combiner@0.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/stream-combiner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-combiner"
  summary: "<img src=https://secure.travis-ci.org/dominictarr/stream-combiner.png?branch=master>"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Package-NPM-stream-combiner-0.2.2"
  copyrightText: "Copyright (c) 2012 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-combiner@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/stream-combiner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stream-combiner"
  summary: "[![npm version](https://img.shields.io/npm/v/stream-combiner.svg)](https://npmjs.org/package/stream-combiner)\
    \  [![Travis CI](https://travis-ci.org/dominictarr/stream-combiner.svg)](https://travis-ci.org/dominictarr/stream-combiner)"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-stream-combiner-0.2.2-vcs"
  copyrightText: "Copyright (c) 2012 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/stream-combiner.git@5a8ab6f1843d08d89801eecd91ff10be65b667a0"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-combiner@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/stream-combiner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-combiner"
  summary: "[![npm version](https://img.shields.io/npm/v/stream-combiner.svg)](https://npmjs.org/package/stream-combiner)\
    \  [![Travis CI](https://travis-ci.org/dominictarr/stream-combiner.svg)](https://travis-ci.org/dominictarr/stream-combiner)"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-stream-combiner-0.2.2-source-artifact"
  copyrightText: "Copyright (c) 2012 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/stream-combiner/-/stream-combiner-0.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-combiner@0.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/stream-combiner"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-combiner"
  summary: "[![npm version](https://img.shields.io/npm/v/stream-combiner.svg)](https://npmjs.org/package/stream-combiner)\
    \  [![Travis CI](https://travis-ci.org/dominictarr/stream-combiner.svg)](https://travis-ci.org/dominictarr/stream-combiner)"
  versionInfo: "0.2.2"
- SPDXID: "SPDXRef-Package-NPM-stream-shift-1.0.0"
  copyrightText: "Copyright (c) 2016 Mathias Buus"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-shift@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/stream-shift"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "stream-shift"
  summary: "Returns the next buffer/object in a stream's readable queue"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-stream-shift-1.0.0-vcs"
  copyrightText: "Copyright (c) 2016 Mathias Buus"
  downloadLocation: "git+https://github.com/mafintosh/stream-shift.git@2ea5f7dcd8ac6babb08324e6e603a3269252a2c4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-shift@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/stream-shift"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-shift"
  summary: "Returns the next buffer/object in a stream's readable queue"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-stream-shift-1.0.0-source-artifact"
  copyrightText: "Copyright (c) 2016 Mathias Buus"
  downloadLocation: "https://registry.npmjs.org/stream-shift/-/stream-shift-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/stream-shift@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/mafintosh/stream-shift"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "stream-shift"
  summary: "Returns the next buffer/object in a stream's readable queue"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-streamfilter-1.0.7"
  copyrightText: "Copyright (c) 2013-2014 Nicolas Froidure, <http://insertafter.com/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamfilter@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/nfroidure/streamfilter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "streamfilter"
  summary: "Filtering streams."
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-streamfilter-1.0.7-vcs"
  copyrightText: "Copyright (c) 2013-2014 Nicolas Froidure, <http://insertafter.com/>"
  downloadLocation: "git+ssh://github.com/nfroidure/streamfilter.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamfilter@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/nfroidure/streamfilter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "streamfilter"
  summary: "Filtering streams."
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-streamfilter-1.0.7-source-artifact"
  copyrightText: "Copyright (c) 2013-2014 Nicolas Froidure, <http://insertafter.com/>"
  downloadLocation: "https://registry.npmjs.org/streamfilter/-/streamfilter-1.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamfilter@1.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/nfroidure/streamfilter"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "streamfilter"
  summary: "Filtering streams."
  versionInfo: "1.0.7"
- SPDXID: "SPDXRef-Package-NPM-streamifier-0.1.1"
  copyrightText: "Copyright (c) 2014 Gabriel Llamas"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamifier@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/gagle/node-streamifier"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "streamifier"
  summary: "Converts a Buffer/String into a readable stream"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-streamifier-0.1.1-vcs"
  copyrightText: "Copyright (c) 2014 Gabriel Llamas"
  downloadLocation: "git+https://github.com/gagle/node-streamifier.git@83e73d3fbc9197b7533e6c4627a35c33ee559e70"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamifier@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/gagle/node-streamifier"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "streamifier"
  summary: "Converts a Buffer/String into a readable stream"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-streamifier-0.1.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Gabriel Llamas"
  downloadLocation: "https://registry.npmjs.org/streamifier/-/streamifier-0.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/streamifier@0.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/gagle/node-streamifier"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "streamifier"
  summary: "Converts a Buffer/String into a readable stream"
  versionInfo: "0.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-0.10.31"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@0.10.31"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/string_decoder"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "0.10.31"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-0.10.31-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/rvagg/string_decoder.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@0.10.31"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "0.10.31"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-0.10.31-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/string_decoder/-/string_decoder-0.10.31.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@0.10.31"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "0.10.31"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.1.1-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/string_decoder.git@18c7f89c894ced5f610505bb006dfde9a3d1ac5e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.1.1-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/string_decoder/-/string_decoder-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.2.0"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.2.0-vcs"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "git+https://github.com/nodejs/string_decoder.git@6e0a9286ed4497badebd4ec6a9a7a4d37793aae8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-string-decoder-1.2.0-source-artifact"
  copyrightText: "Copyright Joyent, Inc. and other Node contributors\nCopyright Node.js\
    \ contributors"
  downloadLocation: "https://registry.npmjs.org/string_decoder/-/string_decoder-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/string_decoder@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/nodejs/string_decoder"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "string_decoder"
  summary: "The string_decoder module from Node core"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-4.4.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@4.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "4.4.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-4.4.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@d2e32f77030ddf583b95b79bc3f6417241472980"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@4.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "4.4.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-4.4.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-4.4.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@4.4.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "4.4.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0-vcs"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "git+https://github.com/chalk/supports-color.git@7759fc135b1be07cb7411178d7b1ac33d367fec8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-supports-color-5.5.0-source-artifact"
  copyrightText: "Copyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)"
  downloadLocation: "https://registry.npmjs.org/supports-color/-/supports-color-5.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/supports-color@5.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/chalk/supports-color#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "supports-color"
  summary: "Detect whether a terminal supports color"
  versionInfo: "5.5.0"
- SPDXID: "SPDXRef-Package-NPM-tar-2.2.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-tar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "tar"
  summary: "tar for node"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-tar-2.2.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/node-tar.git@52237e39d2eb68d22a32d9a98f1d762189fe6a3d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-tar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar"
  summary: "tar for node"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-tar-2.2.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/tar/-/tar-2.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar@2.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/node-tar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar"
  summary: "tar for node"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-tar-4.4.8"
  copyrightText: "(c) Sindre Sorhus\n(c) Sindre Sorhus (https://sindresorhus.com)\n\
    (c) console.log c.shortid https://github.com/npm/npm/commit/$\nCopyright (c) 2000-2006\
    \ The Perl Foundation\nCopyright (c) 2003-2005 Tom Wu\nCopyright (c) 2003-2009\
    \ Tom Wu\nCopyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c) 2007\
    \ Kris Zyp SitePen (www.sitepen.com)\nCopyright (c) 2007, 2013-2014 Michele Bini\n\
    Copyright (c) 2007, 2013-2014 Michele Bini <michele.bini@gmail.com>\nCopyright\
    \ (c) 2009-2013 Jeff Mott\nCopyright (c) 2010-2016 Robert Kieffer and other contributors\n\
    Copyright (c) 2011 Dominic Tarr\nCopyright (c) 2011 Joyent, Inc. and the persons\
    \ identified as document authors\nCopyright (c) 2011 Tim Kosch\nCopyright (c)\
    \ 2011 Yahoo Inc.\nCopyright (c) 2011-2012 Mark Cavage\nCopyright (c) 2011-2012,\
    \ 2014 Ron Garret\nCopyright (c) 2011-2014 Walmart and other contributors\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright (c) 2012 Mark Cavage\nCopyright (c) 2012 Michael\
    \ Hart (michael.hart.au@gmail.com)\nCopyright (c) 2012-2013 Joyent Inc.\nCopyright\
    \ (c) 2012-2014 Eran Hammer <eran@hammer.io>\nCopyright (c) 2012-2014 Eran Hammer\
    \ and other contributors\nCopyright (c) 2013 Deoxxa Development\nCopyright (c)\
    \ 2013 Dominic Tarr\nCopyright (c) 2013 Forbes Lindesay\nCopyright (c) 2013 Meryn\
    \ Stol\nCopyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright (c) 2013\
    \ Trent Mick\nCopyright (c) 2013, 2015 Julian Gruber <julian@juliangruber.com>\n\
    Copyright (c) 2013-2015 Viacheslav Lotsmanov\nCopyright (c) 2014 Hugh Kennedy\n\
    Copyright (c) 2014 Jeremie Miller\nCopyright (c) 2014 Jonathan Ong\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014 Mega Limited\n\
    Copyright (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) 2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014-2015 Mathias Buus\n\
    Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\nCopyright (c) 2015 Douglas\
    \ Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>\n\
    Copyright (c) 2015 Evgeny Poberezkin\nCopyright (c) 2015 IndigoUnited\nCopyright\
    \ (c) 2015 Kyle E. Mitchell and other contributors\nCopyright (c) 2015 Rebecca\
    \ Turner\nCopyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)\n\
    Copyright (c) 2015 Salesforce.com, Inc.\nCopyright (c) 2015 Sam Mikes\nCopyright\
    \ (c) 2015 npm, Inc\nCopyright (c) 2016 Contributors\nCopyright (c) 2016 Espen\
    \ Hovlandsdal\nCopyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)\nCopyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac Z.\
    \ Schlueter and Contributors\nCopyright (c) Isaac Z. Schlueter, Ben Noordhuis,\
    \ and Contributors\nCopyright (c) Mathias Pettersson and Brian Hammond Gubblebum\
    \ Blocky\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n\
    Copyright (c) Tjarda Koster, https://jelloween.deviantart.com\nCopyright (c) Vsevolod\
    \ Strukchinsky <floatdrop@gmail.com>\nCopyright (c) npm, Inc. and Contributors\n\
    Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2010 James\
    \ Halliday (mail@substack.net)\nCopyright 2010-2012 Mikeal Rogers\nCopyright 2011\
    \ Mark Cavage <mcavage@gmail.com>\nCopyright 2012, 2015-2016 Joyent Inc\nCopyright\
    \ 2015 Joyent, Inc. module.exports Verifier Verifier\nCopyright 2016 Domenic Denicola\
    \ <d@domenic.me>\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick\nCopyright\
    \ Isaac Z. Schlueter\nCopyright Joyent, Inc. and other Node contributors\nCopyright\
    \ Mathias Bynens <https://mathiasbynens.be/>\nCopyright Node.js contributors\n\
    copyright (c) 2013 Jake Luer, jake@alogicalparadox.com\ncopyright ahmadnassri.com\
    \ (https://www.ahmadnassri.com/)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar@4.4.8"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-tar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "tar"
  summary: "tar for node"
  versionInfo: "4.4.8"
- SPDXID: "SPDXRef-Package-NPM-tar-4.4.8-vcs"
  copyrightText: "(c) Sindre Sorhus\n(c) Sindre Sorhus (https://sindresorhus.com)\n\
    (c) console.log c.shortid https://github.com/npm/npm/commit/$\nCopyright (c) 2000-2006\
    \ The Perl Foundation\nCopyright (c) 2003-2005 Tom Wu\nCopyright (c) 2003-2009\
    \ Tom Wu\nCopyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c) 2007\
    \ Kris Zyp SitePen (www.sitepen.com)\nCopyright (c) 2007, 2013-2014 Michele Bini\n\
    Copyright (c) 2007, 2013-2014 Michele Bini <michele.bini@gmail.com>\nCopyright\
    \ (c) 2009-2013 Jeff Mott\nCopyright (c) 2010-2016 Robert Kieffer and other contributors\n\
    Copyright (c) 2011 Dominic Tarr\nCopyright (c) 2011 Joyent, Inc. and the persons\
    \ identified as document authors\nCopyright (c) 2011 Tim Kosch\nCopyright (c)\
    \ 2011 Yahoo Inc.\nCopyright (c) 2011-2012 Mark Cavage\nCopyright (c) 2011-2012,\
    \ 2014 Ron Garret\nCopyright (c) 2011-2014 Walmart and other contributors\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright (c) 2012 Mark Cavage\nCopyright (c) 2012 Michael\
    \ Hart (michael.hart.au@gmail.com)\nCopyright (c) 2012-2013 Joyent Inc.\nCopyright\
    \ (c) 2012-2014 Eran Hammer <eran@hammer.io>\nCopyright (c) 2012-2014 Eran Hammer\
    \ and other contributors\nCopyright (c) 2013 Deoxxa Development\nCopyright (c)\
    \ 2013 Dominic Tarr\nCopyright (c) 2013 Forbes Lindesay\nCopyright (c) 2013 Meryn\
    \ Stol\nCopyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright (c) 2013\
    \ Trent Mick\nCopyright (c) 2013, 2015 Julian Gruber <julian@juliangruber.com>\n\
    Copyright (c) 2013-2015 Viacheslav Lotsmanov\nCopyright (c) 2014 Hugh Kennedy\n\
    Copyright (c) 2014 Jeremie Miller\nCopyright (c) 2014 Jonathan Ong\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014 Mega Limited\n\
    Copyright (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) 2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014-2015 Mathias Buus\n\
    Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\nCopyright (c) 2015 Douglas\
    \ Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>\n\
    Copyright (c) 2015 Evgeny Poberezkin\nCopyright (c) 2015 IndigoUnited\nCopyright\
    \ (c) 2015 Kyle E. Mitchell and other contributors\nCopyright (c) 2015 Rebecca\
    \ Turner\nCopyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)\n\
    Copyright (c) 2015 Salesforce.com, Inc.\nCopyright (c) 2015 Sam Mikes\nCopyright\
    \ (c) 2015 npm, Inc\nCopyright (c) 2016 Contributors\nCopyright (c) 2016 Espen\
    \ Hovlandsdal\nCopyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)\nCopyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac Z.\
    \ Schlueter and Contributors\nCopyright (c) Isaac Z. Schlueter, Ben Noordhuis,\
    \ and Contributors\nCopyright (c) Mathias Pettersson and Brian Hammond Gubblebum\
    \ Blocky\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n\
    Copyright (c) Tjarda Koster, https://jelloween.deviantart.com\nCopyright (c) Vsevolod\
    \ Strukchinsky <floatdrop@gmail.com>\nCopyright (c) npm, Inc. and Contributors\n\
    Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2010 James\
    \ Halliday (mail@substack.net)\nCopyright 2010-2012 Mikeal Rogers\nCopyright 2011\
    \ Mark Cavage <mcavage@gmail.com>\nCopyright 2012, 2015-2016 Joyent Inc\nCopyright\
    \ 2015 Joyent, Inc. module.exports Verifier Verifier\nCopyright 2016 Domenic Denicola\
    \ <d@domenic.me>\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick\nCopyright\
    \ Isaac Z. Schlueter\nCopyright Joyent, Inc. and other Node contributors\nCopyright\
    \ Mathias Bynens <https://mathiasbynens.be/>\nCopyright Node.js contributors\n\
    copyright (c) 2013 Jake Luer, jake@alogicalparadox.com\ncopyright ahmadnassri.com\
    \ (https://www.ahmadnassri.com/)"
  downloadLocation: "git+https://github.com/npm/node-tar.git@074c89b1e639485468706af3c141a68ef8826728"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar@4.4.8"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-tar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar"
  summary: "tar for node"
  versionInfo: "4.4.8"
- SPDXID: "SPDXRef-Package-NPM-tar-4.4.8-source-artifact"
  copyrightText: "(c) Sindre Sorhus\n(c) Sindre Sorhus (https://sindresorhus.com)\n\
    (c) console.log c.shortid https://github.com/npm/npm/commit/$\nCopyright (c) 2000-2006\
    \ The Perl Foundation\nCopyright (c) 2003-2005 Tom Wu\nCopyright (c) 2003-2009\
    \ Tom Wu\nCopyright (c) 2004 Sam Hocevar <sam@hocevar.net>\nCopyright (c) 2007\
    \ Kris Zyp SitePen (www.sitepen.com)\nCopyright (c) 2007, 2013-2014 Michele Bini\n\
    Copyright (c) 2007, 2013-2014 Michele Bini <michele.bini@gmail.com>\nCopyright\
    \ (c) 2009-2013 Jeff Mott\nCopyright (c) 2010-2016 Robert Kieffer and other contributors\n\
    Copyright (c) 2011 Dominic Tarr\nCopyright (c) 2011 Joyent, Inc. and the persons\
    \ identified as document authors\nCopyright (c) 2011 Tim Kosch\nCopyright (c)\
    \ 2011 Yahoo Inc.\nCopyright (c) 2011-2012 Mark Cavage\nCopyright (c) 2011-2012,\
    \ 2014 Ron Garret\nCopyright (c) 2011-2014 Walmart and other contributors\nCopyright\
    \ (c) 2012 Joyent, Inc.\nCopyright (c) 2012 Mark Cavage\nCopyright (c) 2012 Michael\
    \ Hart (michael.hart.au@gmail.com)\nCopyright (c) 2012-2013 Joyent Inc.\nCopyright\
    \ (c) 2012-2014 Eran Hammer <eran@hammer.io>\nCopyright (c) 2012-2014 Eran Hammer\
    \ and other contributors\nCopyright (c) 2013 Deoxxa Development\nCopyright (c)\
    \ 2013 Dominic Tarr\nCopyright (c) 2013 Forbes Lindesay\nCopyright (c) 2013 Meryn\
    \ Stol\nCopyright (c) 2013 Ted Unangst <tedu@openbsd.org>\nCopyright (c) 2013\
    \ Trent Mick\nCopyright (c) 2013, 2015 Julian Gruber <julian@juliangruber.com>\n\
    Copyright (c) 2013-2015 Viacheslav Lotsmanov\nCopyright (c) 2014 Hugh Kennedy\n\
    Copyright (c) 2014 Jeremie Miller\nCopyright (c) 2014 Jonathan Ong\nCopyright\
    \ (c) 2014 Jonathan Ong <me@jongleberry.com>\nCopyright (c) 2014 Mega Limited\n\
    Copyright (c) 2014 Nathan LaFreniere and other contributors\nCopyright (c) 2014\
    \ TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014-2015 Mathias Buus\n\
    Copyright (c) 2015 Ahmad Nassri <ahmad@ahmadnassri.com>\nCopyright (c) 2015 Douglas\
    \ Christopher Wilson\nCopyright (c) 2015 Douglas Christopher Wilson <doug@somethingdoug.com>\n\
    Copyright (c) 2015 Evgeny Poberezkin\nCopyright (c) 2015 IndigoUnited\nCopyright\
    \ (c) 2015 Kyle E. Mitchell and other contributors\nCopyright (c) 2015 Rebecca\
    \ Turner\nCopyright (c) 2015 Rod Vagg\nCopyright (c) 2015 Rod Vagg rvagg (https://twitter.com/rvagg)\n\
    Copyright (c) 2015 Salesforce.com, Inc.\nCopyright (c) 2015 Sam Mikes\nCopyright\
    \ (c) 2015 npm, Inc\nCopyright (c) 2016 Contributors\nCopyright (c) 2016 Espen\
    \ Hovlandsdal\nCopyright (c) Feross Aboukhadijeh\nCopyright (c) Feross Aboukhadijeh\
    \ (http://feross.org)\nCopyright (c) Isaac Z. Schlueter\nCopyright (c) Isaac Z.\
    \ Schlueter and Contributors\nCopyright (c) Isaac Z. Schlueter, Ben Noordhuis,\
    \ and Contributors\nCopyright (c) Mathias Pettersson and Brian Hammond Gubblebum\
    \ Blocky\nCopyright (c) Sindre Sorhus <sindresorhus@gmail.com> (sindresorhus.com)\n\
    Copyright (c) Tjarda Koster, https://jelloween.deviantart.com\nCopyright (c) Vsevolod\
    \ Strukchinsky <floatdrop@gmail.com>\nCopyright (c) npm, Inc. and Contributors\n\
    Copyright 1997 Niels Provos <provos@physnet.uni-hamburg.de>\nCopyright 2010 James\
    \ Halliday (mail@substack.net)\nCopyright 2010-2012 Mikeal Rogers\nCopyright 2011\
    \ Mark Cavage <mcavage@gmail.com>\nCopyright 2012, 2015-2016 Joyent Inc\nCopyright\
    \ 2015 Joyent, Inc. module.exports Verifier Verifier\nCopyright 2016 Domenic Denicola\
    \ <d@domenic.me>\nCopyright 2016 Joyent, Inc.\nCopyright 2016 Trent Mick\nCopyright\
    \ Isaac Z. Schlueter\nCopyright Joyent, Inc. and other Node contributors\nCopyright\
    \ Mathias Bynens <https://mathiasbynens.be/>\nCopyright Node.js contributors\n\
    copyright (c) 2013 Jake Luer, jake@alogicalparadox.com\ncopyright ahmadnassri.com\
    \ (https://www.ahmadnassri.com/)"
  downloadLocation: "https://registry.npmjs.org/tar/-/tar-4.4.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tar@4.4.8"
  filesAnalyzed: false
  homepage: "https://github.com/npm/node-tar#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar"
  summary: "tar for node"
  versionInfo: "4.4.8"
- SPDXID: "SPDXRef-Package-NPM-through-2.3.8"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through@2.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/through"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "through"
  summary: "simplified stream construction"
  versionInfo: "2.3.8"
- SPDXID: "SPDXRef-Package-NPM-through-2.3.8-vcs"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "git+https://github.com/dominictarr/through.git@2c5a6f9a0cc54da759b6e10964f2081c358e49dc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through@2.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/through"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through"
  summary: "simplified stream construction"
  versionInfo: "2.3.8"
- SPDXID: "SPDXRef-Package-NPM-through-2.3.8-source-artifact"
  copyrightText: "Copyright (c) 2011 Dominic Tarr"
  downloadLocation: "https://registry.npmjs.org/through/-/through-2.3.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through@2.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/dominictarr/through"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through"
  summary: "simplified stream construction"
  versionInfo: "2.3.8"
- SPDXID: "SPDXRef-Package-NPM-through2-0.6.5"
  copyrightText: "Copyright (c) 2013 Rod Vagg rvagg (https://twitter.com/rvagg)\n\
    Copyright 2013 Rod Vagg"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2@0.6.5"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/through2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "through2"
  summary: "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing\
    \ noise"
  versionInfo: "0.6.5"
- SPDXID: "SPDXRef-Package-NPM-through2-0.6.5-vcs"
  copyrightText: "Copyright (c) 2013 Rod Vagg rvagg (https://twitter.com/rvagg)\n\
    Copyright 2013 Rod Vagg"
  downloadLocation: "git+https://github.com/rvagg/through2.git@ba4a87875f2c82323c10023e36f4ae4b386c1bf8"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2@0.6.5"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/through2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through2"
  summary: "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing\
    \ noise"
  versionInfo: "0.6.5"
- SPDXID: "SPDXRef-Package-NPM-through2-0.6.5-source-artifact"
  copyrightText: "Copyright (c) 2013 Rod Vagg rvagg (https://twitter.com/rvagg)\n\
    Copyright 2013 Rod Vagg"
  downloadLocation: "https://registry.npmjs.org/through2/-/through2-0.6.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2@0.6.5"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/through2"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through2"
  summary: "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing\
    \ noise"
  versionInfo: "0.6.5"
- SPDXID: "SPDXRef-Package-NPM-through2-2.0.5"
  copyrightText: "Copyright (c) Rod Vagg\nCopyright (c) Rod Vagg rvagg (https://twitter.com/rvagg)\
    \ and additional contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/through2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "through2"
  summary: "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing\
    \ noise"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-through2-2.0.5-vcs"
  copyrightText: "Copyright (c) Rod Vagg\nCopyright (c) Rod Vagg rvagg (https://twitter.com/rvagg)\
    \ and additional contributors"
  downloadLocation: "git+https://github.com/rvagg/through2.git@72a3cefc0ff1ad5cc178be04eb927f40166226f1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/through2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through2"
  summary: "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing\
    \ noise"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-through2-2.0.5-source-artifact"
  copyrightText: "Copyright (c) Rod Vagg\nCopyright (c) Rod Vagg rvagg (https://twitter.com/rvagg)\
    \ and additional contributors"
  downloadLocation: "https://registry.npmjs.org/through2/-/through2-2.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2@2.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/rvagg/through2#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through2"
  summary: "A tiny wrapper around Node streams2 Transform to avoid explicit subclassing\
    \ noise"
  versionInfo: "2.0.5"
- SPDXID: "SPDXRef-Package-NPM-through2-filter-3.0.0"
  copyrightText: "Copyright (c) Bryce B. Baril <bryce@ravenwall.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2-filter@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/brycebaril/through2-filter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "through2-filter"
  summary: "A through2 to create an Array.prototype.filter analog for streams."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-through2-filter-3.0.0-vcs"
  copyrightText: "Copyright (c) Bryce B. Baril <bryce@ravenwall.com>"
  downloadLocation: "git+ssh://github.com/brycebaril/through2-filter.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2-filter@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/brycebaril/through2-filter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through2-filter"
  summary: "A through2 to create an Array.prototype.filter analog for streams."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-through2-filter-3.0.0-source-artifact"
  copyrightText: "Copyright (c) Bryce B. Baril <bryce@ravenwall.com>"
  downloadLocation: "https://registry.npmjs.org/through2-filter/-/through2-filter-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/through2-filter@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/brycebaril/through2-filter#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "through2-filter"
  summary: "A through2 to create an Array.prototype.filter analog for streams."
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-tmp-0.0.29"
  copyrightText: "Copyright (c) 2011-2015 KARASZI Istvan <github@spam.raszi.hu>\n\
    Copyright (c) 2014 KARASZI Istvan"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tmp@0.0.29"
  filesAnalyzed: false
  homepage: "http://github.com/raszi/node-tmp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tmp"
  summary: "Temporary file and directory creator"
  versionInfo: "0.0.29"
- SPDXID: "SPDXRef-Package-NPM-tmp-0.0.29-vcs"
  copyrightText: "Copyright (c) 2011-2015 KARASZI Istvan <github@spam.raszi.hu>\n\
    Copyright (c) 2014 KARASZI Istvan"
  downloadLocation: "git+https://github.com/raszi/node-tmp.git@e31c67620ff1277545e1e1bb30537ae89bf5c9c6"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tmp@0.0.29"
  filesAnalyzed: false
  homepage: "http://github.com/raszi/node-tmp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tmp"
  summary: "Temporary file and directory creator"
  versionInfo: "0.0.29"
- SPDXID: "SPDXRef-Package-NPM-tmp-0.0.29-source-artifact"
  copyrightText: "Copyright (c) 2011-2015 KARASZI Istvan <github@spam.raszi.hu>\n\
    Copyright (c) 2014 KARASZI Istvan"
  downloadLocation: "https://registry.npmjs.org/tmp/-/tmp-0.0.29.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tmp@0.0.29"
  filesAnalyzed: false
  homepage: "http://github.com/raszi/node-tmp"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tmp"
  summary: "Temporary file and directory creator"
  versionInfo: "0.0.29"
- SPDXID: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2"
  copyrightText: "Copyright (c) 2015-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-absolute-glob@2.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/to-absolute-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "to-absolute-glob"
  summary: "Make a glob pattern absolute, ensuring that negative globs and patterns\
    \ with trailing slashes are correctly handled."
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2-vcs"
  copyrightText: "Copyright (c) 2015-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "git+https://github.com/jonschlinkert/to-absolute-glob.git@5c698041f85268bc6e6934917040d0717233741f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-absolute-glob@2.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/to-absolute-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-absolute-glob"
  summary: "Make a glob pattern absolute, ensuring that negative globs and patterns\
    \ with trailing slashes are correctly handled."
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2-source-artifact"
  copyrightText: "Copyright (c) 2015-2016 Jon Schlinkert\nCopyright (c) 2016 Jon Schlinkert\
    \ (https://github.com/jonschlinkert)"
  downloadLocation: "https://registry.npmjs.org/to-absolute-glob/-/to-absolute-glob-2.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-absolute-glob@2.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/jonschlinkert/to-absolute-glob"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-absolute-glob"
  summary: "Make a glob pattern absolute, ensuring that negative globs and patterns\
    \ with trailing slashes are correctly handled."
  versionInfo: "2.0.2"
- SPDXID: "SPDXRef-Package-NPM-to-through-2.0.0"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-through@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/to-through#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "to-through"
  summary: "Wrap a ReadableStream in a TransformStream."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-to-through-2.0.0-vcs"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/to-through.git@535a3896be9b8afb9a435199eb153b089dccd55e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-through@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/to-through#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-through"
  summary: "Wrap a ReadableStream in a TransformStream."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-to-through-2.0.0-source-artifact"
  copyrightText: "Copyright (c) 2017 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/to-through/-/to-through-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/to-through@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/to-through#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "to-through"
  summary: "Wrap a ReadableStream in a TransformStream."
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  copyrightText: "(c) assert.equal c.domain, foonet.net\n(c) assert.equal c.domain,\
    \ kyoto.jp\n(c) assert.equal c.domain, www.example.com\n(c) assert.equal c.domain,\
    \ www.foonet.net\nCopyright (c) 2015 Salesforce.com, Inc.\nCopyright (c) 2015,\
    \ 2018 Salesforce.com, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.4.3-vcs"
  copyrightText: "(c) assert.equal c.domain, foonet.net\n(c) assert.equal c.domain,\
    \ kyoto.jp\n(c) assert.equal c.domain, www.example.com\n(c) assert.equal c.domain,\
    \ www.foonet.net\nCopyright (c) 2015 Salesforce.com, Inc.\nCopyright (c) 2015,\
    \ 2018 Salesforce.com, Inc."
  downloadLocation: "git+https://github.com/salesforce/tough-cookie.git@671ad413b38d7464352886772f57a7ec417d4760"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-tough-cookie-2.4.3-source-artifact"
  copyrightText: "(c) assert.equal c.domain, foonet.net\n(c) assert.equal c.domain,\
    \ kyoto.jp\n(c) assert.equal c.domain, www.example.com\n(c) assert.equal c.domain,\
    \ www.foonet.net\nCopyright (c) 2015 Salesforce.com, Inc.\nCopyright (c) 2015,\
    \ 2018 Salesforce.com, Inc."
  downloadLocation: "https://registry.npmjs.org/tough-cookie/-/tough-cookie-2.4.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tough-cookie@2.4.3"
  filesAnalyzed: false
  homepage: "https://github.com/salesforce/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "RFC6265 Cookies and Cookie Jar for node.js"
  versionInfo: "2.4.3"
- SPDXID: "SPDXRef-Package-NPM-tunnel-0.0.4"
  copyrightText: "Copyright (c) 2012 Koichi Kobayashi"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel@0.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/koichik/node-tunnel/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tunnel"
  summary: "Node HTTP/HTTPS Agents for tunneling proxies"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Package-NPM-tunnel-0.0.4-vcs"
  copyrightText: "Copyright (c) 2012 Koichi Kobayashi"
  downloadLocation: "git+https://github.com/koichik/node-tunnel.git@f2dfda3c8df1f75c62ab410d239f70b73aa3145b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel@0.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/koichik/node-tunnel/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel"
  summary: "Node HTTP/HTTPS Agents for tunneling proxies"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Package-NPM-tunnel-0.0.4-source-artifact"
  copyrightText: "Copyright (c) 2012 Koichi Kobayashi"
  downloadLocation: "https://registry.npmjs.org/tunnel/-/tunnel-0.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel@0.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/koichik/node-tunnel/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel"
  summary: "Node HTTP/HTTPS Agents for tunneling proxies"
  versionInfo: "0.0.4"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/mikeal/tunnel-agent.git@67df643033258e7cb1388f648ee5f141cd66101b"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tunnel-agent/-/tunnel-agent-0.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tunnel-agent@0.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/mikeal/tunnel-agent#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tunnel-agent"
  summary: "HTTP proxy tunneling agent. Formerly part of mikeal/request, now a standalone\
    \ module."
  versionInfo: "0.6.0"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "Unlicense"
  licenseDeclared: "Unlicense"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dchest/tweetnacl-js.git@cce829e473b1ae299a9373b5140c713ee88f577f"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/tweetnacl/-/tweetnacl-0.14.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/tweetnacl@0.14.5"
  filesAnalyzed: false
  homepage: "https://tweetnacl.js.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tweetnacl"
  summary: "Port of TweetNaCl cryptographic library to JavaScript"
  versionInfo: "0.14.5"
- SPDXID: "SPDXRef-Package-NPM-typed-rest-client-0.9.0"
  copyrightText: "Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typed-rest-client@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/typed-rest-client#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "typed-rest-client"
  summary: "Node Rest and Http Clients with typings for use with TypeScript"
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-typed-rest-client-0.9.0-vcs"
  copyrightText: "Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/typed-rest-client.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typed-rest-client@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/typed-rest-client#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typed-rest-client"
  summary: "Node Rest and Http Clients with typings for use with TypeScript"
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-typed-rest-client-0.9.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/typed-rest-client/-/typed-rest-client-0.9.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typed-rest-client@0.9.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/typed-rest-client#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typed-rest-client"
  summary: "Node Rest and Http Clients with typings for use with TypeScript"
  versionInfo: "0.9.0"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.3.3333"
  copyrightText: "(c) 2016 Company, Inc.\n(c) 2018 by Matt Zabriskie\n(c) Hello World\n\
    (c) Sindre Sorhus\n(c) by W3C\n(c) jQuery Foundation\nCopyright (c) 1991-2017\
    \ Unicode, Inc.\nCopyright (c) 2011 Edgar Tolentino and Pablo Impallari (www.impallari.com\
    \ impallari@gmail.com)\nCopyright (c) 2011 Edgar Tolentino, Pablo Impallari, Igino\
    \ Marini\nCopyright (c) 2011 Igino Marini. (www.ikern.com mail@iginomarini.com)\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2012 Ecma\
    \ International\nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2013, 2015\
    \ present, Facebook, Inc.\nCopyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright (c) 2013-2015, 2018 present, Facebook, Inc.\nCopyright (c) 2014 Facebook,\
    \ Inc.\nCopyright (c) 2014 Ivan Nikulin <ifaaan@gmail.com>\nCopyright (c) 2014\
    \ The Chromium Authors\nCopyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner\
    \ and contributors\nCopyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2015\
    \ Andreas Lubbe\nCopyright (c) 2015 Tiancheng Timoth Gu\nCopyright (c) 2015 Tiancheng\
    \ Timothy Gu\nCopyright (c) 2016 Remind\nCopyright (c) 2018 The Khronos Group\
    \ Inc.\nCopyright (c) 2018 WHATWG\nCopyright (c) Microsoft\nCopyright (c) Microsoft\
    \ Corporation\nCopyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\n\
    Copyright 2004 present Facebook\nCopyright 2009 the Sputnik authors\nCopyright\
    \ 2009-2011, 2014 Mozilla Foundation and contributors\nCopyright 2011 The Closure\
    \ Compiler Authors\nCopyright 2011-2016 Twitter, Inc.\nCopyright 2012-2014 Kit\
    \ Cambridge http://kit.mit-license.org\nCopyright 2013-2015 Panayiotis Lipiridis\n\
    Copyright 2013-2016 present Facebook, Inc.\nCopyright 2014 jQuery Foundation and\
    \ other contributors\nCopyright 2014-2015 Facebook, Inc.\nCopyright 2014-2016\
    \ Simon Lydell\nCopyright 2014-2016 Simon Lydell X11\nCopyright 2015 MyCompany\
    \ Inc.\nCopyright 2016 Creative Tim (http://www.creative-tim.com)\nCopyright 2016\
    \ Dave Gandy\nCopyright 2017 Google Inc., PhantomJS\nCopyright 2017-2018 Google\
    \ Inc.\nCopyright 2017-2018 James Long\nCopyright JS Foundation and other contributors\n\
    Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.3.3333"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "Apache-2.0"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.3.3333"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.3.3333-vcs"
  copyrightText: "(c) 2016 Company, Inc.\n(c) 2018 by Matt Zabriskie\n(c) Hello World\n\
    (c) Sindre Sorhus\n(c) by W3C\n(c) jQuery Foundation\nCopyright (c) 1991-2017\
    \ Unicode, Inc.\nCopyright (c) 2011 Edgar Tolentino and Pablo Impallari (www.impallari.com\
    \ impallari@gmail.com)\nCopyright (c) 2011 Edgar Tolentino, Pablo Impallari, Igino\
    \ Marini\nCopyright (c) 2011 Igino Marini. (www.ikern.com mail@iginomarini.com)\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2012 Ecma\
    \ International\nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2013, 2015\
    \ present, Facebook, Inc.\nCopyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright (c) 2013-2015, 2018 present, Facebook, Inc.\nCopyright (c) 2014 Facebook,\
    \ Inc.\nCopyright (c) 2014 Ivan Nikulin <ifaaan@gmail.com>\nCopyright (c) 2014\
    \ The Chromium Authors\nCopyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner\
    \ and contributors\nCopyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2015\
    \ Andreas Lubbe\nCopyright (c) 2015 Tiancheng Timoth Gu\nCopyright (c) 2015 Tiancheng\
    \ Timothy Gu\nCopyright (c) 2016 Remind\nCopyright (c) 2018 The Khronos Group\
    \ Inc.\nCopyright (c) 2018 WHATWG\nCopyright (c) Microsoft\nCopyright (c) Microsoft\
    \ Corporation\nCopyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\n\
    Copyright 2004 present Facebook\nCopyright 2009 the Sputnik authors\nCopyright\
    \ 2009-2011, 2014 Mozilla Foundation and contributors\nCopyright 2011 The Closure\
    \ Compiler Authors\nCopyright 2011-2016 Twitter, Inc.\nCopyright 2012-2014 Kit\
    \ Cambridge http://kit.mit-license.org\nCopyright 2013-2015 Panayiotis Lipiridis\n\
    Copyright 2013-2016 present Facebook, Inc.\nCopyright 2014 jQuery Foundation and\
    \ other contributors\nCopyright 2014-2015 Facebook, Inc.\nCopyright 2014-2016\
    \ Simon Lydell\nCopyright 2014-2016 Simon Lydell X11\nCopyright 2015 MyCompany\
    \ Inc.\nCopyright 2016 Creative Tim (http://www.creative-tim.com)\nCopyright 2016\
    \ Dave Gandy\nCopyright 2017 Google Inc., PhantomJS\nCopyright 2017-2018 Google\
    \ Inc.\nCopyright 2017-2018 James Long\nCopyright JS Foundation and other contributors\n\
    Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "git+https://github.com/Microsoft/TypeScript.git@b145eaf160e6b2729aaacb89856bc2346f85ac4c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.3.3333"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.3.3333"
- SPDXID: "SPDXRef-Package-NPM-typescript-3.3.3333-source-artifact"
  copyrightText: "(c) 2016 Company, Inc.\n(c) 2018 by Matt Zabriskie\n(c) Hello World\n\
    (c) Sindre Sorhus\n(c) by W3C\n(c) jQuery Foundation\nCopyright (c) 1991-2017\
    \ Unicode, Inc.\nCopyright (c) 2011 Edgar Tolentino and Pablo Impallari (www.impallari.com\
    \ impallari@gmail.com)\nCopyright (c) 2011 Edgar Tolentino, Pablo Impallari, Igino\
    \ Marini\nCopyright (c) 2011 Igino Marini. (www.ikern.com mail@iginomarini.com)\n\
    Copyright (c) 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2012 Ecma\
    \ International\nCopyright (c) 2012-2013 TJ Holowaychuk\nCopyright (c) 2013, 2015\
    \ present, Facebook, Inc.\nCopyright (c) 2013-2014 Yusuke Suzuki <utatane.tea@gmail.com>\n\
    Copyright (c) 2013-2015, 2018 present, Facebook, Inc.\nCopyright (c) 2014 Facebook,\
    \ Inc.\nCopyright (c) 2014 Ivan Nikulin <ifaaan@gmail.com>\nCopyright (c) 2014\
    \ The Chromium Authors\nCopyright (c) 2014 Yehuda Katz, Tom Dale, Stefan Penner\
    \ and contributors\nCopyright (c) 2014 present Matt Zabriskie\nCopyright (c) 2015\
    \ Andreas Lubbe\nCopyright (c) 2015 Tiancheng Timoth Gu\nCopyright (c) 2015 Tiancheng\
    \ Timothy Gu\nCopyright (c) 2016 Remind\nCopyright (c) 2018 The Khronos Group\
    \ Inc.\nCopyright (c) 2018 WHATWG\nCopyright (c) Microsoft\nCopyright (c) Microsoft\
    \ Corporation\nCopyright (c) YEAR W3C(r) (MIT, ERCIM, Keio, Beihang). Disclaimers\n\
    Copyright 2004 present Facebook\nCopyright 2009 the Sputnik authors\nCopyright\
    \ 2009-2011, 2014 Mozilla Foundation and contributors\nCopyright 2011 The Closure\
    \ Compiler Authors\nCopyright 2011-2016 Twitter, Inc.\nCopyright 2012-2014 Kit\
    \ Cambridge http://kit.mit-license.org\nCopyright 2013-2015 Panayiotis Lipiridis\n\
    Copyright 2013-2016 present Facebook, Inc.\nCopyright 2014 jQuery Foundation and\
    \ other contributors\nCopyright 2014-2015 Facebook, Inc.\nCopyright 2014-2016\
    \ Simon Lydell\nCopyright 2014-2016 Simon Lydell X11\nCopyright 2015 MyCompany\
    \ Inc.\nCopyright 2016 Creative Tim (http://www.creative-tim.com)\nCopyright 2016\
    \ Dave Gandy\nCopyright 2017 Google Inc., PhantomJS\nCopyright 2017-2018 Google\
    \ Inc.\nCopyright 2017-2018 James Long\nCopyright JS Foundation and other contributors\n\
    Copyright Joyent, Inc. and other Node contributors"
  downloadLocation: "https://registry.npmjs.org/typescript/-/typescript-3.3.3333.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/typescript@3.3.3333"
  filesAnalyzed: false
  homepage: "https://www.typescriptlang.org/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "typescript"
  summary: "TypeScript is a language for application scale JavaScript development"
  versionInfo: "3.3.3333"
- SPDXID: "SPDXRef-Package-NPM-uc.micro-1.0.6"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uc.micro@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/uc.micro#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "uc.micro"
  summary: "Micro subset of unicode data files for markdown-it projects."
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-uc.micro-1.0.6-vcs"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "git+https://github.com/markdown-it/uc.micro.git@4cf1080e1b1765fc7699d0ec7482e3a18fc9e2ee"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uc.micro@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/uc.micro#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uc.micro"
  summary: "Micro subset of unicode data files for markdown-it projects."
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-uc.micro-1.0.6-source-artifact"
  copyrightText: "Copyright Mathias Bynens <https://mathiasbynens.be/>"
  downloadLocation: "https://registry.npmjs.org/uc.micro/-/uc.micro-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uc.micro@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/markdown-it/uc.micro#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uc.micro"
  summary: "Micro subset of unicode data files for markdown-it projects."
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-unc-path-regex-0.1.2"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unc-path-regex@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/regexhq/unc-path-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "unc-path-regex"
  summary: "Regular expression for testing if a file path is a windows UNC file path.\
    \ Can also be used as a component of another regexp via the `.source` property."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-unc-path-regex-0.1.2-vcs"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "git+https://github.com/regexhq/unc-path-regex.git@8962715152d8438fac975f90ac218017b41fea20"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unc-path-regex@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/regexhq/unc-path-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unc-path-regex"
  summary: "Regular expression for testing if a file path is a windows UNC file path.\
    \ Can also be used as a component of another regexp via the `.source` property."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-unc-path-regex-0.1.2-source-artifact"
  copyrightText: "Copyright (c) 2015 Jon Schlinkert"
  downloadLocation: "https://registry.npmjs.org/unc-path-regex/-/unc-path-regex-0.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unc-path-regex@0.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/regexhq/unc-path-regex"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unc-path-regex"
  summary: "Regular expression for testing if a file path is a windows UNC file path.\
    \ Can also be used as a component of another regexp via the `.source` property."
  versionInfo: "0.1.2"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.8.3"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) <prathe@gmail.com>\n(c) Vasily Polovnyov <vast@whiteants.net>\n\
    Copyright (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright 2011-2015 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright jQuery Foundation and other contributors\ncopyright Google 2012Roboto"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.8.3"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.8.3-vcs"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) <prathe@gmail.com>\n(c) Vasily Polovnyov <vast@whiteants.net>\n\
    Copyright (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright 2011-2015 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright jQuery Foundation and other contributors\ncopyright Google 2012Roboto"
  downloadLocation: "git+https://github.com/jashkenas/underscore.git@e4743ab712b8ab42ad4ccb48b155034d02394e4d"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.8.3"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.8.3-source-artifact"
  copyrightText: "(c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) <prathe@gmail.com>\n(c) Vasily Polovnyov <vast@whiteants.net>\n\
    Copyright (c) 2009-2015 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors\nCopyright 2011-2015 John-David Dalton <http://allyoucanleet.com/>\n\
    Copyright jQuery Foundation and other contributors\ncopyright Google 2012Roboto"
  downloadLocation: "https://registry.npmjs.org/underscore/-/underscore-1.8.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.8.3"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.8.3"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.9.1"
  copyrightText: "(c) 2009-2018 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) Vasily Polovnyov <vast@whiteants.net>\nCopyright (c)\
    \ 2009-2018 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright 2006 Google Inc. https://code.google.com/p/google-diff-match-patch\n\
    Copyright jQuery Foundation and other contributors\ncopyright Google 2012Roboto"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.9.1"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.9.1"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.9.1-vcs"
  copyrightText: "(c) 2009-2018 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) Vasily Polovnyov <vast@whiteants.net>\nCopyright (c)\
    \ 2009-2018 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright 2006 Google Inc. https://code.google.com/p/google-diff-match-patch\n\
    Copyright jQuery Foundation and other contributors\ncopyright Google 2012Roboto"
  downloadLocation: "git+https://github.com/jashkenas/underscore.git@ae037f7c41323807ae6f1533c45512e6d31a1574"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.9.1"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.9.1"
- SPDXID: "SPDXRef-Package-NPM-underscore-1.9.1-source-artifact"
  copyrightText: "(c) 2009-2018 Jeremy Ashkenas, DocumentCloud and Investigative Reporters\
    \ & Editors Underscore\n(c) Vasily Polovnyov <vast@whiteants.net>\nCopyright (c)\
    \ 2009-2018 Jeremy Ashkenas, DocumentCloud and Investigative Reporters & Editors\n\
    Copyright 2006 Google Inc. https://code.google.com/p/google-diff-match-patch\n\
    Copyright jQuery Foundation and other contributors\ncopyright Google 2012Roboto"
  downloadLocation: "https://registry.npmjs.org/underscore/-/underscore-1.9.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/underscore@1.9.1"
  filesAnalyzed: false
  homepage: "http://underscorejs.org"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "underscore"
  summary: "JavaScript's functional programming helper library."
  versionInfo: "1.9.1"
- SPDXID: "SPDXRef-Package-NPM-unique-stream-2.3.1"
  copyrightText: "Copyright 2014 Eugene Ware"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unique-stream@2.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/eugeneware/unique-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "unique-stream"
  summary: "node.js through stream that emits a unique stream of objects based on\
    \ criteria"
  versionInfo: "2.3.1"
- SPDXID: "SPDXRef-Package-NPM-unique-stream-2.3.1-vcs"
  copyrightText: "Copyright 2014 Eugene Ware"
  downloadLocation: "git+https://github.com/eugeneware/unique-stream.git@8c20fce4c5cd58a13334a30b09a027195a93a6a9"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unique-stream@2.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/eugeneware/unique-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unique-stream"
  summary: "node.js through stream that emits a unique stream of objects based on\
    \ criteria"
  versionInfo: "2.3.1"
- SPDXID: "SPDXRef-Package-NPM-unique-stream-2.3.1-source-artifact"
  copyrightText: "Copyright 2014 Eugene Ware"
  downloadLocation: "https://registry.npmjs.org/unique-stream/-/unique-stream-2.3.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unique-stream@2.3.1"
  filesAnalyzed: false
  homepage: "https://github.com/eugeneware/unique-stream#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unique-stream"
  summary: "node.js through stream that emits a unique stream of objects based on\
    \ criteria"
  versionInfo: "2.3.1"
- SPDXID: "SPDXRef-Package-NPM-uri-js-4.2.2"
  copyrightText: "(c) 2011 Gary Court\nCopyright (c) 2008 Ariel Flesler\nCopyright\
    \ (c) 2009 John Resig, Jorn Zaefferer\nCopyright 2011 Gary Court"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-js@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/garycourt/uri-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-2-Clause"
  name: "uri-js"
  summary: "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving\
    \ library for JavaScript."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-uri-js-4.2.2-vcs"
  copyrightText: "(c) 2011 Gary Court\nCopyright (c) 2008 Ariel Flesler\nCopyright\
    \ (c) 2009 John Resig, Jorn Zaefferer\nCopyright 2011 Gary Court"
  downloadLocation: "git+ssh://github.com/garycourt/uri-js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-js@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/garycourt/uri-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uri-js"
  summary: "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving\
    \ library for JavaScript."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-uri-js-4.2.2-source-artifact"
  copyrightText: "(c) 2011 Gary Court\nCopyright (c) 2008 Ariel Flesler\nCopyright\
    \ (c) 2009 John Resig, Jorn Zaefferer\nCopyright 2011 Gary Court"
  downloadLocation: "https://registry.npmjs.org/uri-js/-/uri-js-4.2.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uri-js@4.2.2"
  filesAnalyzed: false
  homepage: "https://github.com/garycourt/uri-js"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uri-js"
  summary: "An RFC 3986/3987 compliant, scheme extendable URI/IRI parsing/validating/resolving\
    \ library for JavaScript."
  versionInfo: "4.2.2"
- SPDXID: "SPDXRef-Package-NPM-url-join-1.1.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-join@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jfromaniello/url-join#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "url-join"
  summary: "Join urls and normalize as in path.join."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-url-join-1.1.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jfromaniello/url-join.git@3144ba1acbfcee988d6abb3b2be1df532f0e151c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-join@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jfromaniello/url-join#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "url-join"
  summary: "Join urls and normalize as in path.join."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-url-join-1.1.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/url-join/-/url-join-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-join@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/jfromaniello/url-join#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "url-join"
  summary: "Join urls and normalize as in path.join."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-url-parse-1.4.4"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-parse@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/url-parse#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "url-parse"
  summary: "Small footprint URL parser that works seamlessly across Node.js and browser\
    \ environments"
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-url-parse-1.4.4-vcs"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "git+https://github.com/unshiftio/url-parse.git@bc9da1ec19a86199be663a7f0ba40091834d73f7"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-parse@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/url-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "url-parse"
  summary: "Small footprint URL parser that works seamlessly across Node.js and browser\
    \ environments"
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-url-parse-1.4.4-source-artifact"
  copyrightText: "Copyright (c) 2015 Unshift.io, Arnout Kazemier"
  downloadLocation: "https://registry.npmjs.org/url-parse/-/url-parse-1.4.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/url-parse@1.4.4"
  filesAnalyzed: false
  homepage: "https://github.com/unshiftio/url-parse#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "url-parse"
  summary: "Small footprint URL parser that works seamlessly across Node.js and browser\
    \ environments"
  versionInfo: "1.4.4"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2-vcs"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "git+https://github.com/TooTallNate/util-deprecate.git@475fb6857cd23fafff20c1be846c1350abf8e6d4"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-util-deprecate-1.0.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Nathan Rajlich <nathan@tootallnate.net>"
  downloadLocation: "https://registry.npmjs.org/util-deprecate/-/util-deprecate-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/util-deprecate@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/TooTallNate/util-deprecate"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "util-deprecate"
  summary: "The Node.js `util.deprecate()` function with browser support"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.3.2"
  copyrightText: "Copyright (c) 1999-2009 Paul Johnston Other contributors Greg Holt,\
    \ Andrew Kepert, Ydnar, Lostinet\nCopyright (c) 2010-2016 Robert Kieffer and other\
    \ contributors\nCopyright 2011 Sebastian Tschan https://blueimp.net"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/kelektiv/node-uuid#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.3.2"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.3.2-vcs"
  copyrightText: "Copyright (c) 1999-2009 Paul Johnston Other contributors Greg Holt,\
    \ Andrew Kepert, Ydnar, Lostinet\nCopyright (c) 2010-2016 Robert Kieffer and other\
    \ contributors\nCopyright 2011 Sebastian Tschan https://blueimp.net"
  downloadLocation: "git+https://github.com/kelektiv/node-uuid.git@fe4ae79c55af2c7cbf2bb39d3bcb6716d5367091"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/kelektiv/node-uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.3.2"
- SPDXID: "SPDXRef-Package-NPM-uuid-3.3.2-source-artifact"
  copyrightText: "Copyright (c) 1999-2009 Paul Johnston Other contributors Greg Holt,\
    \ Andrew Kepert, Ydnar, Lostinet\nCopyright (c) 2010-2016 Robert Kieffer and other\
    \ contributors\nCopyright 2011 Sebastian Tschan https://blueimp.net"
  downloadLocation: "https://registry.npmjs.org/uuid/-/uuid-3.3.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/uuid@3.3.2"
  filesAnalyzed: false
  homepage: "https://github.com/kelektiv/node-uuid#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "uuid"
  summary: "RFC4122 (v1, v4, and v5) UUIDs"
  versionInfo: "3.3.2"
- SPDXID: "SPDXRef-Package-NPM-value-or-function-3.0.0"
  copyrightText: "Copyright (c) 2015 Blaine Bublitz, Eric Schoffstall and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/value-or-function@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/value-or-function#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "value-or-function"
  summary: "Normalize a value or function, applying extra args to the function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-value-or-function-3.0.0-vcs"
  copyrightText: "Copyright (c) 2015 Blaine Bublitz, Eric Schoffstall and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/value-or-function.git@44e5b5808a46a6e22fee66ad2508d2d1a0e1477c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/value-or-function@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/value-or-function#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "value-or-function"
  summary: "Normalize a value or function, applying extra args to the function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-value-or-function-3.0.0-source-artifact"
  copyrightText: "Copyright (c) 2015 Blaine Bublitz, Eric Schoffstall and other contributors"
  downloadLocation: "https://registry.npmjs.org/value-or-function/-/value-or-function-3.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/value-or-function@3.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/value-or-function#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "value-or-function"
  summary: "Normalize a value or function, applying extra args to the function"
  versionInfo: "3.0.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0"
  copyrightText: "Copyright (c) 2014 Joyent, Inc.\nCopyright (c) 2016 Joyent, Inc."
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0-vcs"
  copyrightText: "Copyright (c) 2014 Joyent, Inc.\nCopyright (c) 2016 Joyent, Inc."
  downloadLocation: "git+https://github.com/davepacheco/node-verror.git@ecddeda07827742bd2c598033a02f4c42a6fdc26"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-verror-1.10.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Joyent, Inc.\nCopyright (c) 2016 Joyent, Inc."
  downloadLocation: "https://registry.npmjs.org/verror/-/verror-1.10.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/verror@1.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/davepacheco/node-verror"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "verror"
  summary: "richer JavaScript errors"
  versionInfo: "1.10.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-0.4.6"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@0.4.6"
  filesAnalyzed: false
  homepage: "http://github.com/wearefractal/vinyl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vinyl"
  summary: "A virtual file format"
  versionInfo: "0.4.6"
- SPDXID: "SPDXRef-Package-NPM-vinyl-0.4.6-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/wearefractal/vinyl.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@0.4.6"
  filesAnalyzed: false
  homepage: "http://github.com/wearefractal/vinyl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl"
  summary: "A virtual file format"
  versionInfo: "0.4.6"
- SPDXID: "SPDXRef-Package-NPM-vinyl-0.4.6-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/vinyl/-/vinyl-0.4.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@0.4.6"
  filesAnalyzed: false
  homepage: "http://github.com/wearefractal/vinyl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl"
  summary: "A virtual file format"
  versionInfo: "0.4.6"
- SPDXID: "SPDXRef-Package-NPM-vinyl-1.2.0"
  copyrightText: "Copyright (c) 2013 Fractal <contact@wearefractal.com>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@1.2.0"
  filesAnalyzed: false
  homepage: "http://github.com/gulpjs/vinyl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vinyl"
  summary: "A virtual file format"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-1.2.0-vcs"
  copyrightText: "Copyright (c) 2013 Fractal <contact@wearefractal.com>"
  downloadLocation: "git+https://github.com/gulpjs/vinyl.git@ba3670add1f2f52827e3807b8783159f30ba4606"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@1.2.0"
  filesAnalyzed: false
  homepage: "http://github.com/gulpjs/vinyl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl"
  summary: "A virtual file format"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-1.2.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Fractal <contact@wearefractal.com>"
  downloadLocation: "https://registry.npmjs.org/vinyl/-/vinyl-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@1.2.0"
  filesAnalyzed: false
  homepage: "http://github.com/gulpjs/vinyl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl"
  summary: "A virtual file format"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-2.2.0"
  copyrightText: "Copyright (c) 2013 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vinyl"
  summary: "Virtual file format."
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-2.2.0-vcs"
  copyrightText: "Copyright (c) 2013 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/vinyl.git@09c5bf424cca072c2ee63a7d3c68d885923f173c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl"
  summary: "Virtual file format."
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-2.2.0-source-artifact"
  copyrightText: "Copyright (c) 2013 Blaine Bublitz <blaine.bublitz@gmail.com> , Eric\
    \ Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/vinyl/-/vinyl-2.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl@2.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl"
  summary: "Virtual file format."
  versionInfo: "2.2.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  copyrightText: "Copyright (c) 2013-2017 Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-fs@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vinyl-fs"
  summary: "Vinyl adapter for the file system."
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-vinyl-fs-3.0.3-vcs"
  copyrightText: "Copyright (c) 2013-2017 Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/vinyl-fs.git@7e223749ee2ada1abd3b2fb326178d8ad8f39f2c"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-fs@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl-fs"
  summary: "Vinyl adapter for the file system."
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-vinyl-fs-3.0.3-source-artifact"
  copyrightText: "Copyright (c) 2013-2017 Blaine Bublitz <blaine.bublitz@gmail.com>\
    \ , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/vinyl-fs/-/vinyl-fs-3.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-fs@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl-fs#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl-fs"
  summary: "Vinyl adapter for the file system."
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-source-stream@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/vinyl-source-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vinyl-source-stream"
  summary: "Use conventional text streams at the start of your gulp or vinyl pipelines"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2-vcs"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "git+https://github.com/hughsk/vinyl-source-stream.git@cba63e200e4cf50cd8438830ea24ec87ce6c55cc"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-source-stream@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/vinyl-source-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl-source-stream"
  summary: "Use conventional text streams at the start of your gulp or vinyl pipelines"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2-source-artifact"
  copyrightText: "Copyright (c) 2014 Hugh Kennedy"
  downloadLocation: "https://registry.npmjs.org/vinyl-source-stream/-/vinyl-source-stream-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-source-stream@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/hughsk/vinyl-source-stream"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl-source-stream"
  summary: "Use conventional text streams at the start of your gulp or vinyl pipelines"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  copyrightText: "Copyright (c) 2014 Florian Reiterer\nCopyright (c) 2017 Blaine Bublitz\
    \ <blaine.bublitz@gmail.com> , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-sourcemap@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl-sourcemap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vinyl-sourcemap"
  summary: "Add/write sourcemaps to/from Vinyl files."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0-vcs"
  copyrightText: "Copyright (c) 2014 Florian Reiterer\nCopyright (c) 2017 Blaine Bublitz\
    \ <blaine.bublitz@gmail.com> , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "git+https://github.com/gulpjs/vinyl-sourcemap.git@4121a96458f1f78709411b083655c520a679e49e"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-sourcemap@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl-sourcemap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl-sourcemap"
  summary: "Add/write sourcemaps to/from Vinyl files."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Florian Reiterer\nCopyright (c) 2017 Blaine Bublitz\
    \ <blaine.bublitz@gmail.com> , Eric Schoffstall <yo@contra.io> and other contributors"
  downloadLocation: "https://registry.npmjs.org/vinyl-sourcemap/-/vinyl-sourcemap-1.1.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vinyl-sourcemap@1.1.0"
  filesAnalyzed: false
  homepage: "https://github.com/gulpjs/vinyl-sourcemap#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vinyl-sourcemap"
  summary: "Add/write sourcemaps to/from Vinyl files."
  versionInfo: "1.1.0"
- SPDXID: "SPDXRef-Package-NPM-vsce-1.57.1"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer\nCopyright (c)\
    \ 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014 Josh Wolfe\nCopyright\
    \ (c) 2014 KARASZI Istvan\nCopyright (c) 2015 Microsoft\nCopyright (c) Isaac Z.\
    \ Schlueter and Contributors\nCopyright (c) Microsoft Corporation\nCopyright 2012-2015\
    \ The Dojo Foundation <http://dojofoundation.org/>\ncopyright 2009-2015 Jeremy\
    \ Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vsce@1.57.1"
  filesAnalyzed: false
  homepage: "https://code.visualstudio.com"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vsce"
  summary: "VSCode Extension Manager"
  versionInfo: "1.57.1"
- SPDXID: "SPDXRef-Package-NPM-vsce-1.57.1-vcs"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer\nCopyright (c)\
    \ 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014 Josh Wolfe\nCopyright\
    \ (c) 2014 KARASZI Istvan\nCopyright (c) 2015 Microsoft\nCopyright (c) Isaac Z.\
    \ Schlueter and Contributors\nCopyright (c) Microsoft Corporation\nCopyright 2012-2015\
    \ The Dojo Foundation <http://dojofoundation.org/>\ncopyright 2009-2015 Jeremy\
    \ Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "git+https://github.com/Microsoft/vsce.git@ccf030a44197297cbf119e4e6bb80c0bf1313df1"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vsce@1.57.1"
  filesAnalyzed: false
  homepage: "https://code.visualstudio.com"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vsce"
  summary: "VSCode Extension Manager"
  versionInfo: "1.57.1"
- SPDXID: "SPDXRef-Package-NPM-vsce-1.57.1-source-artifact"
  copyrightText: "Copyright (c) 2010 Benjamin Thomas, Robert Kieffer\nCopyright (c)\
    \ 2011 TJ Holowaychuk <tj@vision-media.ca>\nCopyright (c) 2014 Josh Wolfe\nCopyright\
    \ (c) 2014 KARASZI Istvan\nCopyright (c) 2015 Microsoft\nCopyright (c) Isaac Z.\
    \ Schlueter and Contributors\nCopyright (c) Microsoft Corporation\nCopyright 2012-2015\
    \ The Dojo Foundation <http://dojofoundation.org/>\ncopyright 2009-2015 Jeremy\
    \ Ashkenas, DocumentCloud and Investigative Reporters & Editors <http://underscorejs.org/>"
  downloadLocation: "https://registry.npmjs.org/vsce/-/vsce-1.57.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vsce@1.57.1"
  filesAnalyzed: false
  homepage: "https://code.visualstudio.com"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vsce"
  summary: "VSCode Extension Manager"
  versionInfo: "1.57.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-1.1.30"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode@1.1.30"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-extension-vscode#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode"
  summary: "The vscode NPM module provides VS Code extension authors tools to write\
    \ extensions. It provides the vscode.d.ts node module (all accessible API for\
    \ extensions) as well as commands for compiling and testing extensions."
  versionInfo: "1.1.30"
- SPDXID: "SPDXRef-Package-NPM-vscode-1.1.30-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vscode-extension-vscode.git@e81d78a0652c03d871c46335a6abc3b5cacb3868"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode@1.1.30"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-extension-vscode#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode"
  summary: "The vscode NPM module provides VS Code extension authors tools to write\
    \ extensions. It provides the vscode.d.ts node module (all accessible API for\
    \ extensions) as well as commands for compiling and testing extensions."
  versionInfo: "1.1.30"
- SPDXID: "SPDXRef-Package-NPM-vscode-1.1.30-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vscode/-/vscode-1.1.30.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode@1.1.30"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-extension-vscode#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode"
  summary: "The vscode NPM module provides VS Code extension authors tools to write\
    \ extensions. It provides the vscode.d.ts node module (all accessible API for\
    \ extensions) as well as commands for compiling and testing extensions."
  versionInfo: "1.1.30"
- SPDXID: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-jsonrpc@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode-jsonrpc"
  summary: "A json rpc implementation over streams"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vscode-languageserver-node.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-jsonrpc@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-jsonrpc"
  summary: "A json rpc implementation over streams"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vscode-jsonrpc/-/vscode-jsonrpc-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-jsonrpc@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-jsonrpc"
  summary: "A json rpc implementation over streams"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright (c)\
    \ Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageclient@5.3.0-next.1"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode-languageclient"
  summary: "VSCode Language client implementation"
  versionInfo: "5.3.0-next.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright (c)\
    \ Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vscode-languageserver-node.git#client"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageclient@5.3.0-next.1"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-languageclient"
  summary: "VSCode Language client implementation"
  versionInfo: "5.3.0-next.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors\nCopyright (c)\
    \ Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vscode-languageclient/-/vscode-languageclient-5.3.0-next.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageclient@5.3.0-next.1"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-languageclient"
  summary: "VSCode Language client implementation"
  versionInfo: "5.3.0-next.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageserver-protocol@3.15.0-next.1"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode-languageserver-protocol"
  summary: "VSCode Language Server Protocol implementation"
  versionInfo: "3.15.0-next.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vscode-languageserver-node.git#protocol"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageserver-protocol@3.15.0-next.1"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-languageserver-protocol"
  summary: "VSCode Language Server Protocol implementation"
  versionInfo: "3.15.0-next.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vscode-languageserver-protocol/-/vscode-languageserver-protocol-3.15.0-next.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageserver-protocol@3.15.0-next.1"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-languageserver-protocol"
  summary: "VSCode Language Server Protocol implementation"
  versionInfo: "3.15.0-next.1"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageserver-types@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vscode-languageserver-types"
  summary: "Types used by the Language server for node"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vscode-languageserver-node.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageserver-types@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-languageserver-types"
  summary: "Types used by the Language server for node"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vscode-languageserver-types/-/vscode-languageserver-types-3.14.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vscode-languageserver-types@3.14.0"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vscode-languageserver-node#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vscode-languageserver-types"
  summary: "Types used by the Language server for node"
  versionInfo: "3.14.0"
- SPDXID: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  copyrightText: "Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vso-node-api@6.1.2-preview"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vso-node-api#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "vso-node-api"
  summary: "Node client for Visual Studio Online/TFS REST APIs"
  versionInfo: "6.1.2-preview"
- SPDXID: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview-vcs"
  copyrightText: "Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/Microsoft/vso-node-api.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vso-node-api@6.1.2-preview"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vso-node-api#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vso-node-api"
  summary: "Node client for Visual Studio Online/TFS REST APIs"
  versionInfo: "6.1.2-preview"
- SPDXID: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview-source-artifact"
  copyrightText: "Copyright (c) Microsoft\nCopyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/vso-node-api/-/vso-node-api-6.1.2-preview.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vso-node-api@6.1.2-preview"
  filesAnalyzed: false
  homepage: "https://github.com/Microsoft/vso-node-api#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vso-node-api"
  summary: "Node client for Visual Studio Online/TFS REST APIs"
  versionInfo: "6.1.2-preview"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/npm/wrappy.git@71d91b6dc5bdeac37e218c2cf03f9ab55b60d214"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-wrappy-1.0.2-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/wrappy/-/wrappy-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/wrappy@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/npm/wrappy"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "wrappy"
  summary: "Callback wrapping utility"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-xtend-4.0.1"
  copyrightText: "Copyright (c) 2012-2014 Raynos"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/xtend@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/xtend"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "xtend"
  summary: "extend like a boss"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-xtend-4.0.1-vcs"
  copyrightText: "Copyright (c) 2012-2014 Raynos"
  downloadLocation: "git+https://github.com/Raynos/xtend.git@23dc302a89756da89c1897bc732a752317e35390"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/xtend@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/xtend"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "xtend"
  summary: "extend like a boss"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-xtend-4.0.1-source-artifact"
  copyrightText: "Copyright (c) 2012-2014 Raynos"
  downloadLocation: "https://registry.npmjs.org/xtend/-/xtend-4.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/xtend@4.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/xtend"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "xtend"
  summary: "extend like a boss"
  versionInfo: "4.0.1"
- SPDXID: "SPDXRef-Package-NPM-yallist-3.0.3"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yallist@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/yallist#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "yallist"
  summary: "Yet Another Linked List"
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-yallist-3.0.3-vcs"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "git+https://github.com/isaacs/yallist.git@47ab1ce288032985c90ee568681b35ad8978be41"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yallist@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/yallist#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yallist"
  summary: "Yet Another Linked List"
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-yallist-3.0.3-source-artifact"
  copyrightText: "Copyright (c) Isaac Z. Schlueter and Contributors"
  downloadLocation: "https://registry.npmjs.org/yallist/-/yallist-3.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yallist@3.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/yallist#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yallist"
  summary: "Yet Another Linked List"
  versionInfo: "3.0.3"
- SPDXID: "SPDXRef-Package-NPM-yauzl-2.10.0"
  copyrightText: "Copyright (c) 2014 Josh Wolfe"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yauzl@2.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/thejoshwolfe/yauzl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "yauzl"
  summary: "yet another unzip library for node"
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-NPM-yauzl-2.10.0-vcs"
  copyrightText: "Copyright (c) 2014 Josh Wolfe"
  downloadLocation: "git+https://github.com/thejoshwolfe/yauzl.git@51010ce4e8c7e6345efe195e1b4150518f37b393"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yauzl@2.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/thejoshwolfe/yauzl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yauzl"
  summary: "yet another unzip library for node"
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-NPM-yauzl-2.10.0-source-artifact"
  copyrightText: "Copyright (c) 2014 Josh Wolfe"
  downloadLocation: "https://registry.npmjs.org/yauzl/-/yauzl-2.10.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yauzl@2.10.0"
  filesAnalyzed: false
  homepage: "https://github.com/thejoshwolfe/yauzl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yauzl"
  summary: "yet another unzip library for node"
  versionInfo: "2.10.0"
- SPDXID: "SPDXRef-Package-NPM-yazl-2.5.1"
  copyrightText: "Copyright (c) 2014 Josh Wolfe"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yazl@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/thejoshwolfe/yazl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "yazl"
  summary: "yet another zip library for node"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-yazl-2.5.1-vcs"
  copyrightText: "Copyright (c) 2014 Josh Wolfe"
  downloadLocation: "git+https://github.com/thejoshwolfe/yazl.git@36b2a6a31a32637dca19b34e7b3295378e78a644"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yazl@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/thejoshwolfe/yazl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yazl"
  summary: "yet another zip library for node"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-yazl-2.5.1-source-artifact"
  copyrightText: "Copyright (c) 2014 Josh Wolfe"
  downloadLocation: "https://registry.npmjs.org/yazl/-/yazl-2.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/yazl@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/thejoshwolfe/yazl"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "yazl"
  summary: "yet another zip library for node"
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-types-caseless-0.12.2"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/caseless@0.12.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "caseless"
  summary: "TypeScript definitions for caseless"
  versionInfo: "0.12.2"
- SPDXID: "SPDXRef-Package-NPM-types-caseless-0.12.2-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/caseless"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/caseless@0.12.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "TypeScript definitions for caseless"
  versionInfo: "0.12.2"
- SPDXID: "SPDXRef-Package-NPM-types-caseless-0.12.2-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/caseless/-/caseless-0.12.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/caseless@0.12.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "caseless"
  summary: "TypeScript definitions for caseless"
  versionInfo: "0.12.2"
- SPDXID: "SPDXRef-Package-NPM-types-form-data-2.2.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/form-data@2.2.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "form-data"
  summary: "TypeScript definitions for form-data"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-types-form-data-2.2.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/form-data@2.2.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "TypeScript definitions for form-data"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-types-form-data-2.2.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/form-data/-/form-data-2.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/form-data@2.2.1"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "form-data"
  summary: "TypeScript definitions for form-data"
  versionInfo: "2.2.1"
- SPDXID: "SPDXRef-Package-NPM-types-mkdirp-0.5.2"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/mkdirp@0.5.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mkdirp"
  summary: "TypeScript definitions for mkdirp"
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-types-mkdirp-0.5.2-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/mkdirp@0.5.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "TypeScript definitions for mkdirp"
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-types-mkdirp-0.5.2-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/mkdirp/-/mkdirp-0.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/mkdirp@0.5.2"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mkdirp"
  summary: "TypeScript definitions for mkdirp"
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-types-node-11.9.5"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@11.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "11.9.5"
- SPDXID: "SPDXRef-Package-NPM-types-node-11.9.5-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git#types/node"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@11.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "11.9.5"
- SPDXID: "SPDXRef-Package-NPM-types-node-11.9.5-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/node/-/node-11.9.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/node@11.9.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/node"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "node"
  summary: "TypeScript definitions for Node.js"
  versionInfo: "11.9.5"
- SPDXID: "SPDXRef-Package-NPM-types-request-2.48.1"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/request@2.48.1"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/request"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "request"
  summary: "TypeScript definitions for request"
  versionInfo: "2.48.1"
- SPDXID: "SPDXRef-Package-NPM-types-request-2.48.1-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/request@2.48.1"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/request"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "TypeScript definitions for request"
  versionInfo: "2.48.1"
- SPDXID: "SPDXRef-Package-NPM-types-request-2.48.1-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/request/-/request-2.48.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/request@2.48.1"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/request"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "request"
  summary: "TypeScript definitions for request"
  versionInfo: "2.48.1"
- SPDXID: "SPDXRef-Package-NPM-types-tar-4.0.0"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tar@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tar"
  summary: "TypeScript definitions for tar"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-tar-4.0.0-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tar@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar"
  summary: "TypeScript definitions for tar"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-tar-4.0.0-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/tar/-/tar-4.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tar@4.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tar"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tar"
  summary: "TypeScript definitions for tar"
  versionInfo: "4.0.0"
- SPDXID: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tough-cookie@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "tough-cookie"
  summary: "TypeScript definitions for tough-cookie"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-vcs"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "git+https://github.com/DefinitelyTyped/DefinitelyTyped.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tough-cookie@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "TypeScript definitions for tough-cookie"
  versionInfo: "2.3.5"
- SPDXID: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-source-artifact"
  copyrightText: "Copyright (c) Microsoft Corporation"
  downloadLocation: "https://registry.npmjs.org/@types/tough-cookie/-/tough-cookie-2.3.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/%40types/tough-cookie@2.3.5"
  filesAnalyzed: false
  homepage: "https://github.com/DefinitelyTyped/DefinitelyTyped/tree/master/types/tough-cookie"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tough-cookie"
  summary: "TypeScript definitions for tough-cookie"
  versionInfo: "2.3.5"
relationships:
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.9.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-js-4.2.2"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-6.9.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ajv-6.9.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-6.9.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-cyan-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-wrap-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-ansi-cyan-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-cyan-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-cyan-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-cyan-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-red-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-wrap-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-ansi-red-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-red-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-red-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-red-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ansi-wrap-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-wrap-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ansi-wrap-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-wrap-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-append-buffer-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-equal-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-append-buffer-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-append-buffer-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-append-buffer-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-append-buffer-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-argparse-1.0.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-arr-diff-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-flatten-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-arr-diff-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-slice-0.2.3"
- spdxElementId: "SPDXRef-Package-NPM-arr-diff-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-diff-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-arr-diff-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-diff-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-arr-flatten-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-flatten-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-arr-flatten-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-flatten-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-arr-union-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-union-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-arr-union-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-union-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-differ-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-differ-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-differ-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-differ-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-slice-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-slice-0.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-slice-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-slice-0.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-union-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-uniq-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-array-union-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-union-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-union-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-union-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-uniq-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-uniq-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-uniq-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-uniq-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-arrify-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arrify-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-arrify-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-arrify-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asn1-0.2.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-assert-plus-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-asynckit-0.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-aws4-1.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.8.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-aws4-1.8.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.8.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-balanced-match-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-block-stream-0.0.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-block-stream-0.0.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-block-stream-0.0.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-block-stream-0.0.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-block-stream-0.0.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-boolbase-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-boolbase-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-boolbase-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-boolbase-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-balanced-match-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-browser-stdout-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-browser-stdout-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-browser-stdout-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-browser-stdout-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-buffer-crc32-0.2.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-crc32-0.2.13-vcs"
- spdxElementId: "SPDXRef-Package-NPM-buffer-crc32-0.2.13"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-crc32-0.2.13-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-buffer-equal-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-equal-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-buffer-equal-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-equal-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-buffer-from-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-buffer-from-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-caseless-0.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-caseless-0.12.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-styles-3.2.1"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chalk-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-css-select-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-entities-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.11"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse5-3.0.3"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-chownr-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chownr-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-chownr-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-chownr-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-buffer-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-buffer-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-buffer-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-buffer-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-stats-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-stats-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-clone-stats-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-clone-stats-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cloneable-readable-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cloneable-readable-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-color-convert-1.9.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-convert-1.9.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-color-name-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-color-name-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-color-name-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-combined-stream-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.11.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.11.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.19.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.19.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-commander-2.19.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.19.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-concat-map-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-concat-map-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-concat-map-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-convert-source-map-1.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-convert-source-map-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-convert-source-map-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-convert-source-map-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-convert-source-map-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-core-util-is-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-css-select-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-css-what-2.1.3"
- spdxElementId: "SPDXRef-Package-NPM-css-select-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domutils-1.5.1"
- spdxElementId: "SPDXRef-Package-NPM-css-select-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-boolbase-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-css-select-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-nth-check-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-css-select-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-css-select-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-css-select-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-css-select-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-css-what-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-css-what-2.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-css-what-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-css-what-2.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dashdash-1.14.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-deep-assign-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-obj-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-deep-assign-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-deep-assign-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-deep-assign-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-deep-assign-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-define-properties-1.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-define-properties-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-define-properties-1.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-delayed-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-delayed-stream-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-denodeify-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-denodeify-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-denodeify-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-denodeify-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-diff-3.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-3.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-diff-3.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-3.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-entities-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dom-serializer-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-dom-serializer-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-domelementtype-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-domelementtype-1.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-domhandler-2.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-domhandler-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domhandler-2.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-domhandler-2.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domhandler-2.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domutils-1.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domutils-1.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dom-serializer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.7.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domutils-1.7.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-domutils-1.7.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-domutils-1.7.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-duplexer-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-duplexer-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-duplexify-3.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-duplexify-3.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-duplexify-3.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-duplexify-3.7.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-shift-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-duplexify-3.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexify-3.7.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-duplexify-3.7.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexify-3.7.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-end-of-stream-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-entities-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-entities-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-entities-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-entities-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-from-0.1.7"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-stream-0.1.0"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-stream-0.0.11"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-0.3.3"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-combiner-0.0.4"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-from-0.1.7"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-stream-0.0.11"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-stream-0.0.7"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-combiner-0.2.2"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-event-stream-3.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extend-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extend-3.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extend-shallow-1.1.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-kind-of-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-extend-shallow-1.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-shallow-1.1.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extend-shallow-1.1.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-shallow-1.1.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-extsprintf-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-deep-equal-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fast-json-stable-stringify-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fd-slicer-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pend-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-fd-slicer-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fd-slicer-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fd-slicer-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fd-slicer-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-flush-write-stream-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-flush-write-stream-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-flush-write-stream-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-flush-write-stream-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-flush-write-stream-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-flush-write-stream-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-forever-agent-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.7"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asynckit-0.4.0"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.22"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-form-data-2.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-from-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-from-0.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-from-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-from-0.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fs-minipass-1.2.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minipass-2.3.5"
- spdxElementId: "SPDXRef-Package-NPM-fs-minipass-1.2.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-minipass-1.2.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fs-minipass-1.2.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-minipass-1.2.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
- spdxElementId: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fstream-1.0.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.1"
- spdxElementId: "SPDXRef-Package-NPM-fstream-1.0.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-fstream-1.0.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
- spdxElementId: "SPDXRef-Package-NPM-fstream-1.0.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.6.3"
- spdxElementId: "SPDXRef-Package-NPM-fstream-1.0.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fstream-1.0.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fstream-1.0.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fstream-1.0.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-getpass-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs.realpath-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-7.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-dirname-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-parent-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-parent-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-negated-glob-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pumpify-1.5.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unique-stream-2.3.1"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-stream-6.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-glob-stream-6.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-stream-6.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.1.15-vcs"
- spdxElementId: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.1.15-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-growl-1.10.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-growl-1.10.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-growl-1.10.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-growl-1.10.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-deep-assign-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-stat-mode-0.2.2"
- spdxElementId: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-chmod-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-chmod-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-multimatch-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-plugin-error-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamfilter-1.0.7"
- spdxElementId: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-filter-5.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-filter-5.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-0.6.5"
- spdxElementId: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-0.4.6"
- spdxElementId: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.4"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-node.extend-1.1.8"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.5"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamifier-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-2.2.1"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-untar-0.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-untar-0.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yauzl-2.10.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yazl-2.5.1"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-event-stream-3.3.4"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-queue-4.5.1"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-har-schema-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-har-schema-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ajv-6.9.2"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-schema-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-5.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-har-validator-5.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-5.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-flag-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-symbols-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-symbols-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-he-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-he-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-he-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-he-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domelementtype-1.3.1"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-entities-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domhandler-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-domutils-1.7.0"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.1.1"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-htmlparser2-3.10.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-htmlparser2-3.10.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-htmlparser2-3.10.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.16.1"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-signature-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inflight-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inflight-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-3.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-3.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-3.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-absolute-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-relative-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-is-absolute-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-windows-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-is-absolute-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-absolute-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-absolute-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-absolute-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-buffer-1.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-1.1.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-buffer-1.1.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-1.1.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-extglob-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-3.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-extglob-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-3.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-glob-3.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-glob-3.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-negated-glob-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-negated-glob-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-negated-glob-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-negated-glob-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-obj-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-obj-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-obj-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-relative-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-unc-path-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-is-relative-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-relative-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-relative-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-relative-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-unc-path-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unc-path-regex-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-is-unc-path-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-unc-path-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-unc-path-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-unc-path-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-utf8-0.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-valid-glob-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-valid-glob-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-valid-glob-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-valid-glob-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-is-windows-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-windows-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-is-windows-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-windows-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isarray-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isarray-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isarray-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-isstream-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-isstream-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsbn-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsbn-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.2.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-0.2.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.2.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-traverse-0.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-schema-0.2.3"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-jsprim-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsprim-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-kind-of-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-kind-of-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-kind-of-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-kind-of-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lazystream-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-lazystream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lazystream-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lazystream-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lazystream-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lead-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-flush-write-stream-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-lead-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lead-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lead-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lead-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-linkify-it-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uc.micro-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-linkify-it-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-linkify-it-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-linkify-it-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-linkify-it-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-lodash-4.17.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-map-stream-0.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-stream-0.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-map-stream-0.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-stream-0.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-map-stream-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-stream-0.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-map-stream-0.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-map-stream-0.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-entities-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-argparse-1.0.10"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-linkify-it-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uc.micro-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mdurl-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-markdown-it-8.4.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-markdown-it-8.4.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-markdown-it-8.4.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mdurl-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mdurl-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mdurl-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mdurl-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.38.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.38.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.38.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.38.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.22"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.38.0"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.22"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.22-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.22"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.22-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-brace-expansion-1.1.11"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimatch-3.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minimist-0.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-0.0.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minimist-0.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-0.0.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minipass-2.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-minipass-2.3.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-3.0.3"
- spdxElementId: "SPDXRef-Package-NPM-minipass-2.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minipass-2.3.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minipass-2.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minipass-2.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-minizlib-1.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minipass-2.3.5"
- spdxElementId: "SPDXRef-Package-NPM-minizlib-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minizlib-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-minizlib-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-minizlib-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimist-0.0.8"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mkdirp-0.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-string-regexp-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-browser-stdout-1.3.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.11.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-3.1.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-diff-3.3.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.2"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-growl-1.10.3"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-he-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-4.4.0"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mocha-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-multimatch-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-multimatch-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-differ-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-multimatch-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-union-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-multimatch-2.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-arrify-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-multimatch-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-multimatch-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-multimatch-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-multimatch-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mute-stream-0.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mute-stream-0.0.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mute-stream-0.0.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mute-stream-0.0.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-node.extend-1.1.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-node.extend-1.1.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-3.3.0"
- spdxElementId: "SPDXRef-Package-NPM-node.extend-1.1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-node.extend-1.1.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-node.extend-1.1.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-node.extend-1.1.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-2.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-normalize-path-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-now-and-later-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-now-and-later-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-now-and-later-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-now-and-later-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-now-and-later-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-nth-check-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-boolbase-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-nth-check-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nth-check-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-nth-check-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-nth-check-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.9.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object-keys-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object-keys-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-define-properties-1.1.3"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-keys-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object.assign-4.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-once-1.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ordered-read-streams-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-os-homedir-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-homedir-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-os-homedir-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-homedir-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-os-tmpdir-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-tmpdir-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-os-tmpdir-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-tmpdir-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-osenv-0.1.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-homedir-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-osenv-0.1.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-tmpdir-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-osenv-0.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-osenv-0.1.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-osenv-0.1.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-osenv-0.1.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parse-semver-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.6.0"
- spdxElementId: "SPDXRef-Package-NPM-parse-semver-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-semver-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parse-semver-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-semver-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parse5-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5"
- spdxElementId: "SPDXRef-Package-NPM-parse5-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse5-3.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parse5-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse5-3.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-dirname-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-dirname-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-dirname-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-dirname-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-is-absolute-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-is-absolute-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pause-stream-0.0.11"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-pause-stream-0.0.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-stream-0.0.11-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pause-stream-0.0.11"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pause-stream-0.0.11-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pend-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pend-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pend-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pend-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-performance-now-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-performance-now-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-cyan-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ansi-red-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-diff-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-arr-union-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-shallow-1.1.4"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-plugin-error-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-plugin-error-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-plugin-error-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-process-nextick-args-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-process-nextick-args-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-psl-1.1.31"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-psl-1.1.31-vcs"
- spdxElementId: "SPDXRef-Package-NPM-psl-1.1.31"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-psl-1.1.31-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pump-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-once-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-pump-2.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-end-of-stream-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-pump-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pump-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-pumpify-1.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-pumpify-1.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexify-3.7.1"
- spdxElementId: "SPDXRef-Package-NPM-pumpify-1.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pump-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-pumpify-1.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pumpify-1.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-pumpify-1.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-pumpify-1.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-punycode-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-punycode-1.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-punycode-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-2.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-punycode-2.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-2.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-q-1.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-q-1.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-q-1.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-q-1.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-querystringify-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-querystringify-2.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-querystringify-2.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-querystringify-2.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-queue-4.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-queue-4.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-queue-4.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-queue-4.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-queue-4.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-read-1.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mute-stream-0.0.8"
- spdxElementId: "SPDXRef-Package-NPM-read-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-1.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-read-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-1.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-0.10.31"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.0.34-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-1.0.34"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.0.34-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isarray-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-process-nextick-args-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-2.3.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-readable-stream-3.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-3.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-buffer-1.1.6"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-utf8-0.2.1"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-replace-ext-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-replace-ext-0.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-replace-ext-0.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-replace-ext-0.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-replace-ext-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-replace-ext-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-replace-ext-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-replace-ext-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws-sign2-0.7.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-aws4-1.8.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-caseless-0.12.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-combined-stream-1.0.7"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extend-3.0.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-forever-agent-0.6.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-form-data-2.3.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.22"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-har-validator-5.1.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-signature-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-typedarray-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-isstream-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stringify-safe-5.0.1"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-oauth-sign-0.9.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-performance-now-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.5.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.3.2"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-request-2.88.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-requires-port-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-requires-port-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-requires-port-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-requires-port-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-resolve-options-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-value-or-function-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-resolve-options-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-options-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-resolve-options-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-options-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.6.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.6.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-rimraf-2.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-rimraf-2.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-semver-5.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.6.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-source-map-0.6.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.6.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-source-map-support-0.5.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-from-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-source-map-support-0.5.10"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-0.6.1"
- spdxElementId: "SPDXRef-Package-NPM-source-map-support-0.5.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-support-0.5.10-vcs"
- spdxElementId: "SPDXRef-Package-NPM-source-map-support-0.5.10"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-support-0.5.10-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-split-0.3.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-split-0.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-0.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-split-0.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-0.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-split-1.0.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-split-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-split-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-split-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sprintf-js-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sprintf-js-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-asn1-0.2.4"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-dashdash-1.14.1"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-getpass-0.1.7"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-jsbn-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ecc-jsbn-0.1.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bcrypt-pbkdf-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.16.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-sshpk-1.16.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-sshpk-1.16.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stat-mode-0.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stat-mode-0.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stat-mode-0.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stat-mode-0.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-combiner-0.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-combiner-0.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-duplexer-0.1.1"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-combiner-0.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stream-combiner-0.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-combiner-0.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-stream-shift-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-shift-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-stream-shift-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-stream-shift-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-streamfilter-1.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-streamfilter-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamfilter-1.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-streamfilter-1.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamfilter-1.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-streamifier-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamifier-0.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-streamifier-0.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-streamifier-0.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-0.10.31"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-0.10.31-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-0.10.31"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-0.10.31-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-string-decoder-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-string-decoder-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-4.4.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-4.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-4.4.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-4.4.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-4.4.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-flag-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-supports-color-5.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-supports-color-5.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tar-2.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.3"
- spdxElementId: "SPDXRef-Package-NPM-tar-2.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-block-stream-0.0.9"
- spdxElementId: "SPDXRef-Package-NPM-tar-2.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fstream-1.0.11"
- spdxElementId: "SPDXRef-Package-NPM-tar-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-2.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tar-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-2.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.1"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chownr-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-minipass-1.2.5"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minipass-2.3.5"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-3.0.3"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minizlib-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-4.4.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tar-4.4.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-4.4.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-through-2.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-through-2.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through-2.3.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-through2-0.6.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-xtend-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-through2-0.6.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-1.0.34"
- spdxElementId: "SPDXRef-Package-NPM-through2-0.6.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-0.6.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-through2-0.6.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-0.6.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-through2-2.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-through2-2.0.5"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-xtend-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-through2-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-through2-2.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-through2-filter-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-through2-filter-3.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-xtend-4.0.1"
- spdxElementId: "SPDXRef-Package-NPM-through2-filter-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-filter-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-through2-filter-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-filter-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tmp-0.0.29"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-os-tmpdir-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-tmp-0.0.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tmp-0.0.29-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tmp-0.0.29"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tmp-0.0.29-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-negated-glob-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-absolute-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-absolute-glob-2.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-to-through-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-to-through-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-through-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-to-through-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-through-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-psl-1.1.31"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-1.4.1"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.4.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tough-cookie-2.4.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tough-cookie-2.4.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-0.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-0.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-0.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-0.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.1.2"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tunnel-agent-0.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-agent-0.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-tweetnacl-0.14.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-tweetnacl-0.14.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-typed-rest-client-0.9.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-0.0.4"
- spdxElementId: "SPDXRef-Package-NPM-typed-rest-client-0.9.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.8.3"
- spdxElementId: "SPDXRef-Package-NPM-typed-rest-client-0.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typed-rest-client-0.9.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-typed-rest-client-0.9.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typed-rest-client-0.9.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-caseless-0.12.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-caseless-0.12.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-caseless-0.12.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-caseless-0.12.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-form-data-2.2.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5"
- spdxElementId: "SPDXRef-Package-NPM-types-form-data-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-form-data-2.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-form-data-2.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-form-data-2.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-mkdirp-0.5.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5"
- spdxElementId: "SPDXRef-Package-NPM-types-mkdirp-0.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-mkdirp-0.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-mkdirp-0.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-mkdirp-0.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-node-11.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-node-11.9.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-request-2.48.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5"
- spdxElementId: "SPDXRef-Package-NPM-types-request-2.48.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-caseless-0.12.2"
- spdxElementId: "SPDXRef-Package-NPM-types-request-2.48.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-form-data-2.2.1"
- spdxElementId: "SPDXRef-Package-NPM-types-request-2.48.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
- spdxElementId: "SPDXRef-Package-NPM-types-request-2.48.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-request-2.48.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-request-2.48.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-request-2.48.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-tar-4.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5"
- spdxElementId: "SPDXRef-Package-NPM-types-tar-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tar-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-tar-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tar-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tough-cookie-2.3.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-typescript-3.3.3333"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.3.3333-vcs"
- spdxElementId: "SPDXRef-Package-NPM-typescript-3.3.3333"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.3.3333-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uc.micro-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uc.micro-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uc.micro-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uc.micro-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-unc-path-regex-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unc-path-regex-0.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-unc-path-regex-0.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unc-path-regex-0.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-underscore-1.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.8.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-underscore-1.8.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.8.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-underscore-1.9.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.9.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-underscore-1.9.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.9.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-unique-stream-2.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-json-stable-stringify-without-jsonify-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-unique-stream-2.3.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-filter-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-unique-stream-2.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unique-stream-2.3.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-unique-stream-2.3.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unique-stream-2.3.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uri-js-4.2.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-punycode-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-uri-js-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-js-4.2.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uri-js-4.2.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uri-js-4.2.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-url-join-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-join-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-url-join-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-join-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-1.4.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-querystringify-2.1.0"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-1.4.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-requires-port-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-1.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-parse-1.4.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-url-parse-1.4.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-parse-1.4.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-util-deprecate-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-util-deprecate-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-uuid-3.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.3.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-uuid-3.3.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-uuid-3.3.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-value-or-function-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-value-or-function-3.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-value-or-function-3.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-value-or-function-3.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-assert-plus-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-core-util-is-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-extsprintf-1.4.0"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-verror-1.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-verror-1.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-0.4.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-0.4.6"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-0.4.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-0.4.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-0.4.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-0.4.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-replace-ext-0.0.1"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-buffer-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-clone-stats-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cloneable-readable-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-trailing-separator-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-replace-ext-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-2.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-2.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-2.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-readable-stream-2.3.6"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fs-mkdirp-stream-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-stream-6.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-pumpify-1.5.1"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-is-valid-glob-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lazystream-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lead-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object.assign-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-stream-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-resolve-options-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-value-or-function-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-to-through-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-fs-3.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-fs-3.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-through2-2.0.5"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-0.4.6"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-2.2.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-graceful-fs-4.1.15"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-remove-bom-buffer-3.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-append-buffer-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-convert-source-map-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-normalize-path-2.1.1"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-now-and-later-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-sourcemap-1.1.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.6.0"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-chalk-2.4.2"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cheerio-1.0.0-rc.2"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-lodash-4.17.11"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-commander-2.19.0"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-denodeify-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-minimatch-3.0.4"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-markdown-it-8.4.2"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-osenv-0.1.5"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parse-semver-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-read-1.0.7"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tmp-0.0.29"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-join-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yauzl-2.10.0"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-yazl-2.5.1"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vsce-1.57.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vsce-1.57.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vsce-1.57.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.6.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-glob-7.1.3"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-chmod-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-filter-5.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-gunzip-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-remote-src-vscode-0.5.1"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-untar-0.0.7"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-gulp-vinyl-zip-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-fs-3.0.3"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mocha-4.1.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-source-map-support-0.5.10"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-url-parse-1.4.4"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vinyl-source-stream-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-1.1.30-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vscode-1.1.30"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-1.1.30-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-semver-5.6.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-jsonrpc-4.0.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageserver-protocol-3.15.0-next.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageserver-types-3.14.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-q-1.5.1"
- spdxElementId: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tunnel-0.0.4"
- spdxElementId: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-typed-rest-client-0.9.0"
- spdxElementId: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-underscore-1.9.1"
- spdxElementId: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vso-node-api-6.1.2-preview-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-wrappy-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-wrappy-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-wrappy-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-xtend-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-xtend-4.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-xtend-4.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-xtend-4.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yallist-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-3.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yallist-3.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yallist-3.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yauzl-2.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fd-slicer-1.1.0"
- spdxElementId: "SPDXRef-Package-NPM-yauzl-2.10.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-crc32-0.2.13"
- spdxElementId: "SPDXRef-Package-NPM-yauzl-2.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yauzl-2.10.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yauzl-2.10.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yauzl-2.10.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-yazl-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-buffer-crc32-0.2.13"
- spdxElementId: "SPDXRef-Package-NPM-yazl-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yazl-2.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-yazl-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-yazl-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mkdirp-0.5.1"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-request-2.88.0"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-tar-4.4.8"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-languageclient-5.3.0-next.1"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-typescript-3.3.3333"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vsce-1.57.1"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vscode-1.1.30"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-mkdirp-0.5.2"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-node-11.9.5"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-request-2.48.1"
- spdxElementId: "SPDXRef-Project-Yarn-cdt-vscode-0.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-types-tar-4.0.0"
