---
SPDXID: "SPDXRef-DOCUMENT"
spdxVersion: "SPDX-2.2"
creationInfo:
  created: "2023-11-28T15:46:52Z"
  creators:
  - "Tool: OSS Review Toolkit - cc543c9380-dirty"
  licenseListVersion: "3.19"
name: "Unnamed document"
dataLicense: "CC0-1.0"
documentNamespace: "spdx://9b3cc75c-bfe2-479a-bd9d-e7ec99648900"
documentDescribes:
- "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireExtension.IECrossfireExtension.vcxproj"
- "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireExtension.IECrossfireExtensionPS.vcxproj"
- "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireServer.IECrossfireServer.vcxproj"
- "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireServer.IECrossfireServerPS.vcxproj"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-bundles-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-development-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-docs-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-features-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-jsdt-parent-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-nashorn-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-nodejs-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-org.eclipse.webtools.jsdt.site-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-tests-3.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium-0.5.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug-0.4.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.core-0.5.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.js-0.1.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.jsdtbridge-0.5.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.ui-0.6.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.wip.eclipse-0.5.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.wipbackend.dev-0.5.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.wipbackend.protocol-1-0-0.5.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.core-2.0.500-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.core-3.2.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.crossfire-1.0.500-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.rhino-1.0.500-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.rhino.debugger-1.0.600-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.rhino.ui-1.0.700-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.transport-1.0.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.ui-1.1.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.manipulation-1.0.601-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.support.firefox-1.0.501-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.support.ie-1.0.601-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.ui-2.1.600-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.astview-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.chrome-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.ie-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.jsd2-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.node-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.opera-0.1.1-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.jseview-1.1.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.standalone.ui-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.unittests-0.0.1-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.docs-org.eclipse.wst.jsdt.doc-2.1.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.chromium.debug.feature-0.6.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.chromium-sdk.feature-0.6.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.chromium-tests.feature-0.6.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.feature-1.6.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.feature-2.4.400-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.nodejs.feature-1.1.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt-sdk.feature-2.4.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt-tests.feature-2.2.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nashorn-org.eclipse.wst.jsdt.nashorn.api-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nashorn-org.eclipse.wst.jsdt.nashorn.extension-1.0.2-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.bower-1.0.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.cli-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.common-1.0.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.grunt-1.0.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.gulp-1.0.200-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.node-1.1.100-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.node.common-1.0.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.npm-1.0.300-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.chromium.debug.core.tests-0.5.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.chromium.tests-0.5.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.core.tests.compiler-2.0.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.core.tests.model-2.0.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.debug.core.tests-1.1.0-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.debug.rhino.tests-1.0.701-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.integration.tests-1.0.1-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.js.common.tests-1.0.201-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.js.node.common.tests-1.0.1-SNAPSHOT"
- "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.ui.tests-1.2.1-SNAPSHOT"
- "SPDXRef-Project-NPM-gulptest-0.0.0"
- "SPDXRef-Project-NPM-jsdt-node-test-project-1.0.0"
- "SPDXRef-Project-NPM-test.name"
packages:
- SPDXID: "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireExtension.IECrossfireExtension.vcxproj"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "development/org.eclipse.wst.jsdt.debug.ie/IECrossfireExtension/IECrossfireExtension.vcxproj"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireExtension.IECrossfireExtensionPS.vcxproj"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "development/org.eclipse.wst.jsdt.debug.ie/IECrossfireExtension/IECrossfireExtensionPS.vcxproj"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireServer.IECrossfireServer.vcxproj"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "development/org.eclipse.wst.jsdt.debug.ie/IECrossfireServer/IECrossfireServer.vcxproj"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-DotNet-development.org.eclipse.wst.jsdt.debug.ie.IECrossfireServer.IECrossfireServerPS.vcxproj"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "development/org.eclipse.wst.jsdt.debug.ie/IECrossfireServer/IECrossfireServerPS.vcxproj"
  summary: "NONE"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-bundles-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bundles"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-development-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "development"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-docs-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "docs"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-features-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "features"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-jsdt-parent-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "jsdt-parent"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-nashorn-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nashorn"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-nodejs-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "nodejs"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-org.eclipse.webtools.jsdt.site-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.webtools.jsdt.site"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt-tests-3.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "tests"
  summary: "NONE"
  versionInfo: "3.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium-0.5.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium"
  summary: "NONE"
  versionInfo: "0.5.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug-0.4.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug"
  summary: "NONE"
  versionInfo: "0.4.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.core-0.5.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug.core"
  summary: "NONE"
  versionInfo: "0.5.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.js-0.1.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug.js"
  summary: "NONE"
  versionInfo: "0.1.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.jsdtbridge-0.5.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug.jsdtbridge"
  summary: "NONE"
  versionInfo: "0.5.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.debug.ui-0.6.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug.ui"
  summary: "NONE"
  versionInfo: "0.6.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.wip.eclipse-0.5.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.wip.eclipse"
  summary: "NONE"
  versionInfo: "0.5.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.wipbackend.dev-0.5.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.wipbackend.dev"
  summary: "NONE"
  versionInfo: "0.5.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.chromium.wipbackend.protocol-1-0-0.5.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.wipbackend.protocol_1_0"
  summary: "NONE"
  versionInfo: "0.5.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.core-2.0.500-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.core"
  summary: "NONE"
  versionInfo: "2.0.500-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.core-3.2.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.core"
  summary: "NONE"
  versionInfo: "3.2.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.crossfire-1.0.500-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.crossfire"
  summary: "NONE"
  versionInfo: "1.0.500-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.rhino-1.0.500-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.rhino"
  summary: "NONE"
  versionInfo: "1.0.500-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.rhino.debugger-1.0.600-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.rhino.debugger"
  summary: "NONE"
  versionInfo: "1.0.600-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.rhino.ui-1.0.700-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.rhino.ui"
  summary: "NONE"
  versionInfo: "1.0.700-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.transport-1.0.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.transport"
  summary: "NONE"
  versionInfo: "1.0.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.debug.ui-1.1.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.ui"
  summary: "NONE"
  versionInfo: "1.1.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.manipulation-1.0.601-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.manipulation"
  summary: "NONE"
  versionInfo: "1.0.601-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.support.firefox-1.0.501-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.support.firefox"
  summary: "NONE"
  versionInfo: "1.0.501-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.support.ie-1.0.601-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.support.ie"
  summary: "NONE"
  versionInfo: "1.0.601-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.bundles-org.eclipse.wst.jsdt.ui-2.1.600-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.ui"
  summary: "NONE"
  versionInfo: "2.1.600-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.astview-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.astview"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.chrome-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.chrome"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.ie-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.ie"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.jsd2-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.jsd2"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.node-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.node"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.debug.opera-0.1.1-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.opera"
  summary: "NONE"
  versionInfo: "0.1.1-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.jseview-1.1.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.jseview"
  summary: "NONE"
  versionInfo: "1.1.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.standalone.ui-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.standalone.ui"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.development-org.eclipse.wst.jsdt.unittests-0.0.1-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.unittests"
  summary: "NONE"
  versionInfo: "0.0.1-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.docs-org.eclipse.wst.jsdt.doc-2.1.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.doc"
  summary: "NONE"
  versionInfo: "2.1.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.chromium.debug.feature-0.6.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug.feature"
  summary: "NONE"
  versionInfo: "0.6.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.chromium-sdk.feature-0.6.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium_sdk.feature"
  summary: "NONE"
  versionInfo: "0.6.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.chromium-tests.feature-0.6.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium_tests.feature"
  summary: "NONE"
  versionInfo: "0.6.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.feature-1.6.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.feature"
  summary: "NONE"
  versionInfo: "1.6.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.feature-2.4.400-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.feature"
  summary: "NONE"
  versionInfo: "2.4.400-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt.nodejs.feature-1.1.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.nodejs.feature"
  summary: "NONE"
  versionInfo: "1.1.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt-sdk.feature-2.4.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt_sdk.feature"
  summary: "NONE"
  versionInfo: "2.4.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.features-org.eclipse.wst.jsdt-tests.feature-2.2.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt_tests.feature"
  summary: "NONE"
  versionInfo: "2.2.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nashorn-org.eclipse.wst.jsdt.nashorn.api-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.nashorn.api"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nashorn-org.eclipse.wst.jsdt.nashorn.extension-1.0.2-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.nashorn.extension"
  summary: "NONE"
  versionInfo: "1.0.2-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.bower-1.0.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.bower"
  summary: "NONE"
  versionInfo: "1.0.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.cli-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.cli"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.common-1.0.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.common"
  summary: "NONE"
  versionInfo: "1.0.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.grunt-1.0.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.grunt"
  summary: "NONE"
  versionInfo: "1.0.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.gulp-1.0.200-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.gulp"
  summary: "NONE"
  versionInfo: "1.0.200-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.node-1.1.100-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.node"
  summary: "NONE"
  versionInfo: "1.1.100-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.node.common-1.0.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.node.common"
  summary: "NONE"
  versionInfo: "1.0.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.nodejs-org.eclipse.wst.jsdt.js.npm-1.0.300-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.npm"
  summary: "NONE"
  versionInfo: "1.0.300-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.chromium.debug.core.tests-0.5.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.debug.core.tests"
  summary: "NONE"
  versionInfo: "0.5.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.chromium.tests-0.5.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.chromium.tests"
  summary: "NONE"
  versionInfo: "0.5.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.core.tests.compiler-2.0.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.core.tests.compiler"
  summary: "NONE"
  versionInfo: "2.0.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.core.tests.model-2.0.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.core.tests.model"
  summary: "NONE"
  versionInfo: "2.0.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.debug.core.tests-1.1.0-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.core.tests"
  summary: "NONE"
  versionInfo: "1.1.0-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.debug.rhino.tests-1.0.701-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.debug.rhino.tests"
  summary: "NONE"
  versionInfo: "1.0.701-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.integration.tests-1.0.1-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.integration.tests"
  summary: "NONE"
  versionInfo: "1.0.1-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.js.common.tests-1.0.201-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.common.tests"
  summary: "NONE"
  versionInfo: "1.0.201-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.js.node.common.tests-1.0.1-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.js.node.common.tests"
  summary: "NONE"
  versionInfo: "1.0.1-SNAPSHOT"
- SPDXID: "SPDXRef-Project-Maven-org.eclipse.webtools.jsdt.tests-org.eclipse.wst.jsdt.ui.tests-1.2.1-SNAPSHOT"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "org.eclipse.wst.jsdt.ui.tests"
  summary: "NONE"
  versionInfo: "1.2.1-SNAPSHOT"
- SPDXID: "SPDXRef-Project-NPM-gulptest-0.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "gulptest"
  summary: "NONE"
  versionInfo: "0.0.0"
- SPDXID: "SPDXRef-Project-NPM-jsdt-node-test-project-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "https://github.com/ibuziuk/jsdt-node-test-project#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "EPL-1.0"
  name: "jsdt-node-test-project"
  summary: "NONE"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Project-NPM-test.name"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  filesAnalyzed: false
  homepage: "NONE"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "test name"
  summary: "NONE"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.3.8"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.3.8-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/accepts.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-NPM-accepts-1.3.8-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/accepts/-/accepts-1.3.8.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/accepts@1.3.8"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/accepts#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "accepts"
  summary: "Higher-level content negotiation"
  versionInfo: "1.3.8"
- SPDXID: "SPDXRef-Package-NPM-array-flatten-1.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-flatten@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/blakeembrey/array-flatten"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "array-flatten"
  summary: "Flatten an array of nested arrays into a single flat array"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-array-flatten-1.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/blakeembrey/array-flatten.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-flatten@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/blakeembrey/array-flatten"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-flatten"
  summary: "Flatten an array of nested arrays into a single flat array"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-array-flatten-1.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/array-flatten/-/array-flatten-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/array-flatten@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/blakeembrey/array-flatten"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "array-flatten"
  summary: "Flatten an array of nested arrays into a single flat array"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-body-parser-1.20.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/body-parser@1.20.1"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/body-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "body-parser"
  summary: "Node.js body parsing middleware"
  versionInfo: "1.20.1"
- SPDXID: "SPDXRef-Package-NPM-body-parser-1.20.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/expressjs/body-parser.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/body-parser@1.20.1"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/body-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "body-parser"
  summary: "Node.js body parsing middleware"
  versionInfo: "1.20.1"
- SPDXID: "SPDXRef-Package-NPM-body-parser-1.20.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/body-parser/-/body-parser-1.20.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/body-parser@1.20.1"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/body-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "body-parser"
  summary: "Node.js body parsing middleware"
  versionInfo: "1.20.1"
- SPDXID: "SPDXRef-Package-NPM-bytes-3.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@3.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "3.1.2"
- SPDXID: "SPDXRef-Package-NPM-bytes-3.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/visionmedia/bytes.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@3.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "3.1.2"
- SPDXID: "SPDXRef-Package-NPM-bytes-3.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/bytes/-/bytes-3.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/bytes@3.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/bytes.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "bytes"
  summary: "Utility to parse a string bytes to bytes and vice-versa"
  versionInfo: "3.1.2"
- SPDXID: "SPDXRef-Package-NPM-call-bind-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/call-bind@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/call-bind#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "call-bind"
  summary: "Robustly `.call.bind()` a function"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-call-bind-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/call-bind.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/call-bind@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/call-bind#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "call-bind"
  summary: "Robustly `.call.bind()` a function"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-call-bind-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/call-bind/-/call-bind-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/call-bind@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/call-bind#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "call-bind"
  summary: "Robustly `.call.bind()` a function"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-content-disposition-0.5.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-disposition@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-disposition#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "content-disposition"
  summary: "Create and parse Content-Disposition header"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-content-disposition-0.5.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/content-disposition.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-disposition@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-disposition#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "content-disposition"
  summary: "Create and parse Content-Disposition header"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-content-disposition-0.5.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/content-disposition/-/content-disposition-0.5.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-disposition@0.5.4"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-disposition#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "content-disposition"
  summary: "Create and parse Content-Disposition header"
  versionInfo: "0.5.4"
- SPDXID: "SPDXRef-Package-NPM-content-type-1.0.5"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-type@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-type#readme"
  licenseConcluded: "MIT"
  licenseDeclared: "MIT"
  name: "content-type"
  summary: "Create and parse HTTP Content-Type header"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-content-type-1.0.5-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/content-type.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-type@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "content-type"
  summary: "Create and parse HTTP Content-Type header"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-content-type-1.0.5-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/content-type/-/content-type-1.0.5.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/content-type@1.0.5"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/content-type#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "content-type"
  summary: "Create and parse HTTP Content-Type header"
  versionInfo: "1.0.5"
- SPDXID: "SPDXRef-Package-NPM-cookie-0.5.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie@0.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/cookie#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cookie"
  summary: "HTTP server cookie parsing and serialization"
  versionInfo: "0.5.0"
- SPDXID: "SPDXRef-Package-NPM-cookie-0.5.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/cookie.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie@0.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/cookie#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie"
  summary: "HTTP server cookie parsing and serialization"
  versionInfo: "0.5.0"
- SPDXID: "SPDXRef-Package-NPM-cookie-0.5.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/cookie/-/cookie-0.5.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie@0.5.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/cookie#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie"
  summary: "HTTP server cookie parsing and serialization"
  versionInfo: "0.5.0"
- SPDXID: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-signature@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/node-cookie-signature"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "cookie-signature"
  summary: "Sign and unsign cookies"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-cookie-signature-1.0.6-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/visionmedia/node-cookie-signature.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-signature@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/node-cookie-signature"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie-signature"
  summary: "Sign and unsign cookies"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-cookie-signature-1.0.6-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/cookie-signature/-/cookie-signature-1.0.6.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/cookie-signature@1.0.6"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/node-cookie-signature"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "cookie-signature"
  summary: "Sign and unsign cookies"
  versionInfo: "1.0.6"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/visionmedia/debug.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-debug-2.6.9-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/debug/-/debug-2.6.9.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/debug@2.6.9"
  filesAnalyzed: false
  homepage: "https://github.com/visionmedia/debug#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "debug"
  summary: "small debugging utility"
  versionInfo: "2.6.9"
- SPDXID: "SPDXRef-Package-NPM-depd-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-depd-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/dougwilson/nodejs-depd.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-depd-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/depd/-/depd-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/depd@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/dougwilson/nodejs-depd#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "depd"
  summary: "Deprecate all the things"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-destroy-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/destroy@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/destroy#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "destroy"
  summary: "destroy a stream if possible"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-destroy-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/stream-utils/destroy.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/destroy@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/destroy#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "destroy"
  summary: "destroy a stream if possible"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-destroy-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/destroy/-/destroy-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/destroy@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/destroy#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "destroy"
  summary: "destroy a stream if possible"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-ee-first-1.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ee-first@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonathanong/ee-first"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ee-first"
  summary: "return the first event in a set of ee/event pairs"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-ee-first-1.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jonathanong/ee-first.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ee-first@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonathanong/ee-first"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ee-first"
  summary: "return the first event in a set of ee/event pairs"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-ee-first-1.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ee-first/-/ee-first-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ee-first@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/jonathanong/ee-first"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ee-first"
  summary: "return the first event in a set of ee/event pairs"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-encodeurl-1.0.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/encodeurl@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/encodeurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "encodeurl"
  summary: "Encode a URL to a percent-encoded form, excluding already-encoded sequences"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-encodeurl-1.0.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/pillarjs/encodeurl.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/encodeurl@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/encodeurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "encodeurl"
  summary: "Encode a URL to a percent-encoded form, excluding already-encoded sequences"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-encodeurl-1.0.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/encodeurl/-/encodeurl-1.0.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/encodeurl@1.0.2"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/encodeurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "encodeurl"
  summary: "Encode a URL to a percent-encoded form, excluding already-encoded sequences"
  versionInfo: "1.0.2"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "escape-html"
  summary: "Escape string for use in HTML"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/component/escape-html.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-html"
  summary: "Escape string for use in HTML"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-escape-html-1.0.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/escape-html/-/escape-html-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/escape-html@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/component/escape-html"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "escape-html"
  summary: "Escape string for use in HTML"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-etag-1.8.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/etag@1.8.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/etag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "etag"
  summary: "Create simple HTTP ETags"
  versionInfo: "1.8.1"
- SPDXID: "SPDXRef-Package-NPM-etag-1.8.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/etag.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/etag@1.8.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/etag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "etag"
  summary: "Create simple HTTP ETags"
  versionInfo: "1.8.1"
- SPDXID: "SPDXRef-Package-NPM-etag-1.8.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/etag/-/etag-1.8.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/etag@1.8.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/etag#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "etag"
  summary: "Create simple HTTP ETags"
  versionInfo: "1.8.1"
- SPDXID: "SPDXRef-Package-NPM-express-4.18.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/express@4.18.2"
  filesAnalyzed: false
  homepage: "http://expressjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "express"
  summary: "Fast, unopinionated, minimalist web framework"
  versionInfo: "4.18.2"
- SPDXID: "SPDXRef-Package-NPM-express-4.18.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/expressjs/express.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/express@4.18.2"
  filesAnalyzed: false
  homepage: "http://expressjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "express"
  summary: "Fast, unopinionated, minimalist web framework"
  versionInfo: "4.18.2"
- SPDXID: "SPDXRef-Package-NPM-express-4.18.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/express/-/express-4.18.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/express@4.18.2"
  filesAnalyzed: false
  homepage: "http://expressjs.com/"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "express"
  summary: "Fast, unopinionated, minimalist web framework"
  versionInfo: "4.18.2"
- SPDXID: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/finalhandler@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/finalhandler#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "finalhandler"
  summary: "Node.js final http responder"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-finalhandler-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/pillarjs/finalhandler.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/finalhandler@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/finalhandler#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "finalhandler"
  summary: "Node.js final http responder"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-finalhandler-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/finalhandler/-/finalhandler-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/finalhandler@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/finalhandler#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "finalhandler"
  summary: "Node.js final http responder"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-forwarded-0.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forwarded@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/forwarded#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "forwarded"
  summary: "Parse HTTP X-Forwarded-For header"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-forwarded-0.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/forwarded.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forwarded@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/forwarded#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forwarded"
  summary: "Parse HTTP X-Forwarded-For header"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-forwarded-0.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/forwarded/-/forwarded-0.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/forwarded@0.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/forwarded#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "forwarded"
  summary: "Parse HTTP X-Forwarded-For header"
  versionInfo: "0.2.0"
- SPDXID: "SPDXRef-Package-NPM-fresh-0.5.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fresh@0.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/fresh#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "fresh"
  summary: "HTTP response freshness testing"
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-fresh-0.5.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/fresh.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fresh@0.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/fresh#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fresh"
  summary: "HTTP response freshness testing"
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-fresh-0.5.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/fresh/-/fresh-0.5.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/fresh@0.5.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/fresh#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "fresh"
  summary: "HTTP response freshness testing"
  versionInfo: "0.5.2"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/Raynos/function-bind.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/function-bind/-/function-bind-1.1.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/function-bind@1.1.1"
  filesAnalyzed: false
  homepage: "https://github.com/Raynos/function-bind"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "function-bind"
  summary: "Implementation of Function.prototype.bind"
  versionInfo: "1.1.1"
- SPDXID: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-intrinsic@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/get-intrinsic#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "get-intrinsic"
  summary: "Get and robustly cache all JS language-level intrinsics at first require\
    \ time"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-get-intrinsic-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/get-intrinsic.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-intrinsic@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/get-intrinsic#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-intrinsic"
  summary: "Get and robustly cache all JS language-level intrinsics at first require\
    \ time"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-get-intrinsic-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/get-intrinsic/-/get-intrinsic-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/get-intrinsic@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/get-intrinsic#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "get-intrinsic"
  summary: "Get and robustly cache all JS language-level intrinsics at first require\
    \ time"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/tarruda/has.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/has/-/has-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/tarruda/has"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has"
  summary: "Object.prototype.hasOwnProperty.call shortcut"
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/inspect-js/has-symbols.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-has-symbols-1.0.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/has-symbols/-/has-symbols-1.0.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/has-symbols@1.0.3"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/has-symbols#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "has-symbols"
  summary: "Determine if the JS environment has Symbol support. Supports spec, or\
    \ shams."
  versionInfo: "1.0.3"
- SPDXID: "SPDXRef-Package-NPM-http-errors-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-errors@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/http-errors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "http-errors"
  summary: "Create HTTP error objects"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-http-errors-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/http-errors.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-errors@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/http-errors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-errors"
  summary: "Create HTTP error objects"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-http-errors-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/http-errors/-/http-errors-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/http-errors@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/http-errors#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "http-errors"
  summary: "Create HTTP error objects"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.24"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.24"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.24"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.24-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ashtuchkin/iconv-lite.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.24"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.24"
- SPDXID: "SPDXRef-Package-NPM-iconv-lite-0.4.24-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.4.24.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/iconv-lite@0.4.24"
  filesAnalyzed: false
  homepage: "https://github.com/ashtuchkin/iconv-lite"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "iconv-lite"
  summary: "Convert character encodings in pure javascript."
  versionInfo: "0.4.24"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/isaacs/inherits.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/inherits/-/inherits-2.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/inherits@2.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/isaacs/inherits#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "inherits"
  summary: "Browser-friendly inheritance fully compatible with standard node.js inherits()"
  versionInfo: "2.0.4"
- SPDXID: "SPDXRef-Package-NPM-ipaddr.js-1.9.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ipaddr.js@1.9.1"
  filesAnalyzed: false
  homepage: "https://github.com/whitequark/ipaddr.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ipaddr.js"
  summary: "A library for manipulating IPv4 and IPv6 addresses in JavaScript."
  versionInfo: "1.9.1"
- SPDXID: "SPDXRef-Package-NPM-ipaddr.js-1.9.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/whitequark/ipaddr.js.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ipaddr.js@1.9.1"
  filesAnalyzed: false
  homepage: "https://github.com/whitequark/ipaddr.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ipaddr.js"
  summary: "A library for manipulating IPv4 and IPv6 addresses in JavaScript."
  versionInfo: "1.9.1"
- SPDXID: "SPDXRef-Package-NPM-ipaddr.js-1.9.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ipaddr.js/-/ipaddr.js-1.9.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ipaddr.js@1.9.1"
  filesAnalyzed: false
  homepage: "https://github.com/whitequark/ipaddr.js#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ipaddr.js"
  summary: "A library for manipulating IPv4 and IPv6 addresses in JavaScript."
  versionInfo: "1.9.1"
- SPDXID: "SPDXRef-Package-NPM-media-typer-0.3.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/media-typer@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/media-typer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "media-typer"
  summary: "Simple RFC 6838 media type parser and formatter"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-media-typer-0.3.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/media-typer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/media-typer@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/media-typer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "media-typer"
  summary: "Simple RFC 6838 media type parser and formatter"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-media-typer-0.3.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/media-typer/-/media-typer-0.3.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/media-typer@0.3.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/media-typer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "media-typer"
  summary: "Simple RFC 6838 media type parser and formatter"
  versionInfo: "0.3.0"
- SPDXID: "SPDXRef-Package-NPM-merge-descriptors-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/merge-descriptors@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/component/merge-descriptors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "merge-descriptors"
  summary: "Merge objects using descriptors"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-merge-descriptors-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/component/merge-descriptors.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/merge-descriptors@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/component/merge-descriptors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "merge-descriptors"
  summary: "Merge objects using descriptors"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-merge-descriptors-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/merge-descriptors/-/merge-descriptors-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/merge-descriptors@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/component/merge-descriptors"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "merge-descriptors"
  summary: "Merge objects using descriptors"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-methods-1.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/methods@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/methods"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "methods"
  summary: "HTTP methods that node supports"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-methods-1.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/methods.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/methods@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/methods"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "methods"
  summary: "HTTP methods that node supports"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-methods-1.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/methods/-/methods-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/methods@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/methods"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "methods"
  summary: "HTTP methods that node supports"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/broofa/node-mime.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-1.6.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/mime/-/mime-1.6.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime@1.6.0"
  filesAnalyzed: false
  homepage: "https://github.com/broofa/node-mime#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime"
  summary: "A comprehensive library for mime-type mapping"
  versionInfo: "1.6.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.52.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.52.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.52.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.52.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/mime-db.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.52.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.52.0"
- SPDXID: "SPDXRef-Package-NPM-mime-db-1.52.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/mime-db/-/mime-db-1.52.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-db@1.52.0"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-db#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-db"
  summary: "Media Type Database"
  versionInfo: "1.52.0"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.35"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.35"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.35"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.35-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/mime-types.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.35"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.35"
- SPDXID: "SPDXRef-Package-NPM-mime-types-2.1.35-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/mime-types/-/mime-types-2.1.35.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/mime-types@2.1.35"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/mime-types#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "mime-types"
  summary: "The ultimate javascript content-type utility."
  versionInfo: "2.1.35"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/zeit/ms.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/zeit/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny milisecond conversion utility"
  versionInfo: "2.0.0"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/vercel/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/vercel/ms.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/vercel/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-NPM-ms-2.1.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/ms/-/ms-2.1.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/ms@2.1.3"
  filesAnalyzed: false
  homepage: "https://github.com/vercel/ms#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "ms"
  summary: "Tiny millisecond conversion utility"
  versionInfo: "2.1.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.6.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.6.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.6.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/negotiator.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.6.3"
- SPDXID: "SPDXRef-Package-NPM-negotiator-0.6.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/negotiator/-/negotiator-0.6.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/negotiator@0.6.3"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/negotiator#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "negotiator"
  summary: "HTTP content negotiation"
  versionInfo: "0.6.3"
- SPDXID: "SPDXRef-Package-NPM-object-inspect-1.12.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-inspect@1.12.3"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/object-inspect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "object-inspect"
  summary: "string representations of objects in node and the browser"
  versionInfo: "1.12.3"
- SPDXID: "SPDXRef-Package-NPM-object-inspect-1.12.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/inspect-js/object-inspect.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-inspect@1.12.3"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/object-inspect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-inspect"
  summary: "string representations of objects in node and the browser"
  versionInfo: "1.12.3"
- SPDXID: "SPDXRef-Package-NPM-object-inspect-1.12.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/object-inspect/-/object-inspect-1.12.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/object-inspect@1.12.3"
  filesAnalyzed: false
  homepage: "https://github.com/inspect-js/object-inspect"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "object-inspect"
  summary: "string representations of objects in node and the browser"
  versionInfo: "1.12.3"
- SPDXID: "SPDXRef-Package-NPM-on-finished-2.4.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-finished@2.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-finished#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "on-finished"
  summary: "Execute a callback when a request closes, finishes, or errors"
  versionInfo: "2.4.1"
- SPDXID: "SPDXRef-Package-NPM-on-finished-2.4.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/on-finished.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-finished@2.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-finished#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "on-finished"
  summary: "Execute a callback when a request closes, finishes, or errors"
  versionInfo: "2.4.1"
- SPDXID: "SPDXRef-Package-NPM-on-finished-2.4.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/on-finished/-/on-finished-2.4.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/on-finished@2.4.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/on-finished#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "on-finished"
  summary: "Execute a callback when a request closes, finishes, or errors"
  versionInfo: "2.4.1"
- SPDXID: "SPDXRef-Package-NPM-parseurl-1.3.3"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parseurl@1.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/parseurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "parseurl"
  summary: "parse a url with memoization"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-parseurl-1.3.3-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/pillarjs/parseurl.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parseurl@1.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/parseurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parseurl"
  summary: "parse a url with memoization"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-parseurl-1.3.3-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/parseurl/-/parseurl-1.3.3.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/parseurl@1.3.3"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/parseurl#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "parseurl"
  summary: "parse a url with memoization"
  versionInfo: "1.3.3"
- SPDXID: "SPDXRef-Package-NPM-path-to-regexp-0.1.7"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-to-regexp@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/component/path-to-regexp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "path-to-regexp"
  summary: "Express style path to RegExp utility"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-path-to-regexp-0.1.7-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/component/path-to-regexp.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-to-regexp@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/component/path-to-regexp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-to-regexp"
  summary: "Express style path to RegExp utility"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-path-to-regexp-0.1.7-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/path-to-regexp/-/path-to-regexp-0.1.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/path-to-regexp@0.1.7"
  filesAnalyzed: false
  homepage: "https://github.com/component/path-to-regexp#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "path-to-regexp"
  summary: "Express style path to RegExp utility"
  versionInfo: "0.1.7"
- SPDXID: "SPDXRef-Package-NPM-proxy-addr-2.0.7"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/proxy-addr@2.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/proxy-addr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "proxy-addr"
  summary: "Determine address of proxied request"
  versionInfo: "2.0.7"
- SPDXID: "SPDXRef-Package-NPM-proxy-addr-2.0.7-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/proxy-addr.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/proxy-addr@2.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/proxy-addr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "proxy-addr"
  summary: "Determine address of proxied request"
  versionInfo: "2.0.7"
- SPDXID: "SPDXRef-Package-NPM-proxy-addr-2.0.7-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/proxy-addr/-/proxy-addr-2.0.7.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/proxy-addr@2.0.7"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/proxy-addr#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "proxy-addr"
  summary: "Determine address of proxied request"
  versionInfo: "2.0.7"
- SPDXID: "SPDXRef-Package-NPM-qs-6.11.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "BSD-3-Clause"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.11.0"
- SPDXID: "SPDXRef-Package-NPM-qs-6.11.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/qs.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.11.0"
- SPDXID: "SPDXRef-Package-NPM-qs-6.11.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/qs/-/qs-6.11.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/qs@6.11.0"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/qs"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "qs"
  summary: "A querystring parser that supports nesting and arrays, with a depth limit"
  versionInfo: "6.11.0"
- SPDXID: "SPDXRef-Package-NPM-range-parser-1.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/range-parser@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/range-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "range-parser"
  summary: "Range header field string parser"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-range-parser-1.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/range-parser.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/range-parser@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/range-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "range-parser"
  summary: "Range header field string parser"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-range-parser-1.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/range-parser/-/range-parser-1.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/range-parser@1.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/range-parser#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "range-parser"
  summary: "Range header field string parser"
  versionInfo: "1.2.1"
- SPDXID: "SPDXRef-Package-NPM-raw-body-2.5.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/raw-body@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/raw-body#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "raw-body"
  summary: "Get and validate the raw body of a readable stream."
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-raw-body-2.5.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/stream-utils/raw-body.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/raw-body@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/raw-body#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "raw-body"
  summary: "Get and validate the raw body of a readable stream."
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-raw-body-2.5.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/raw-body/-/raw-body-2.5.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/raw-body@2.5.1"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/raw-body#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "raw-body"
  summary: "Get and validate the raw body of a readable stream."
  versionInfo: "2.5.1"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.1"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/feross/safe-buffer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.1"
- SPDXID: "SPDXRef-Package-NPM-safe-buffer-5.2.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/safe-buffer/-/safe-buffer-5.2.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safe-buffer@5.2.1"
  filesAnalyzed: false
  homepage: "https://github.com/feross/safe-buffer"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safe-buffer"
  summary: "Safer Node.js Buffer API"
  versionInfo: "5.2.1"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ChALkeR/safer-buffer.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/safer-buffer/-/safer-buffer-2.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/safer-buffer@2.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/ChALkeR/safer-buffer#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "safer-buffer"
  summary: "Modern Buffer API polyfill without footguns"
  versionInfo: "2.1.2"
- SPDXID: "SPDXRef-Package-NPM-send-0.18.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/send@0.18.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/send#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "send"
  summary: "Better streaming static file server with Range and conditional-GET support"
  versionInfo: "0.18.0"
- SPDXID: "SPDXRef-Package-NPM-send-0.18.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/pillarjs/send.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/send@0.18.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/send#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "send"
  summary: "Better streaming static file server with Range and conditional-GET support"
  versionInfo: "0.18.0"
- SPDXID: "SPDXRef-Package-NPM-send-0.18.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/send/-/send-0.18.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/send@0.18.0"
  filesAnalyzed: false
  homepage: "https://github.com/pillarjs/send#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "send"
  summary: "Better streaming static file server with Range and conditional-GET support"
  versionInfo: "0.18.0"
- SPDXID: "SPDXRef-Package-NPM-serve-static-1.15.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-static@1.15.0"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-static#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "serve-static"
  summary: "Serve static files"
  versionInfo: "1.15.0"
- SPDXID: "SPDXRef-Package-NPM-serve-static-1.15.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/expressjs/serve-static.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-static@1.15.0"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-static#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-static"
  summary: "Serve static files"
  versionInfo: "1.15.0"
- SPDXID: "SPDXRef-Package-NPM-serve-static-1.15.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/serve-static/-/serve-static-1.15.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/serve-static@1.15.0"
  filesAnalyzed: false
  homepage: "https://github.com/expressjs/serve-static#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "serve-static"
  summary: "Serve static files"
  versionInfo: "1.15.0"
- SPDXID: "SPDXRef-Package-NPM-setprototypeof-1.2.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/setprototypeof@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/wesleytodd/setprototypeof"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "ISC"
  name: "setprototypeof"
  summary: "A small polyfill for Object.setprototypeof"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-setprototypeof-1.2.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/wesleytodd/setprototypeof.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/setprototypeof@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/wesleytodd/setprototypeof"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "setprototypeof"
  summary: "A small polyfill for Object.setprototypeof"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-setprototypeof-1.2.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/setprototypeof/-/setprototypeof-1.2.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/setprototypeof@1.2.0"
  filesAnalyzed: false
  homepage: "https://github.com/wesleytodd/setprototypeof"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "setprototypeof"
  summary: "A small polyfill for Object.setprototypeof"
  versionInfo: "1.2.0"
- SPDXID: "SPDXRef-Package-NPM-side-channel-1.0.4"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/side-channel@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/side-channel#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "side-channel"
  summary: "Store information about any JS value in a side channel. Uses WeakMap if\
    \ available."
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-side-channel-1.0.4-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/ljharb/side-channel.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/side-channel@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/side-channel#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "side-channel"
  summary: "Store information about any JS value in a side channel. Uses WeakMap if\
    \ available."
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-side-channel-1.0.4-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/side-channel/-/side-channel-1.0.4.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/side-channel@1.0.4"
  filesAnalyzed: false
  homepage: "https://github.com/ljharb/side-channel#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "side-channel"
  summary: "Store information about any JS value in a side channel. Uses WeakMap if\
    \ available."
  versionInfo: "1.0.4"
- SPDXID: "SPDXRef-Package-NPM-statuses-2.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-statuses-2.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/statuses.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-statuses-2.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/statuses/-/statuses-2.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/statuses@2.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/statuses#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "statuses"
  summary: "HTTP status utility"
  versionInfo: "2.0.1"
- SPDXID: "SPDXRef-Package-NPM-toidentifier-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/toidentifier@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/component/toidentifier#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "toidentifier"
  summary: "Convert a string of words to a JavaScript identifier"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-toidentifier-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/component/toidentifier.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/toidentifier@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/component/toidentifier#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "toidentifier"
  summary: "Convert a string of words to a JavaScript identifier"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-toidentifier-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/toidentifier/-/toidentifier-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/toidentifier@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/component/toidentifier#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "toidentifier"
  summary: "Convert a string of words to a JavaScript identifier"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-type-is-1.6.18"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-is@1.6.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/type-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "type-is"
  summary: "Infer the content-type of a request."
  versionInfo: "1.6.18"
- SPDXID: "SPDXRef-Package-NPM-type-is-1.6.18-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/type-is.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-is@1.6.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/type-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "type-is"
  summary: "Infer the content-type of a request."
  versionInfo: "1.6.18"
- SPDXID: "SPDXRef-Package-NPM-type-is-1.6.18-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/type-is/-/type-is-1.6.18.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/type-is@1.6.18"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/type-is#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "type-is"
  summary: "Infer the content-type of a request."
  versionInfo: "1.6.18"
- SPDXID: "SPDXRef-Package-NPM-unpipe-1.0.0"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unpipe@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/unpipe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "unpipe"
  summary: "Unpipe a stream from all destinations"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unpipe-1.0.0-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/stream-utils/unpipe.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unpipe@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/unpipe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unpipe"
  summary: "Unpipe a stream from all destinations"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-unpipe-1.0.0-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/unpipe/-/unpipe-1.0.0.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/unpipe@1.0.0"
  filesAnalyzed: false
  homepage: "https://github.com/stream-utils/unpipe"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "unpipe"
  summary: "Unpipe a stream from all destinations"
  versionInfo: "1.0.0"
- SPDXID: "SPDXRef-Package-NPM-utils-merge-1.0.1"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/utils-merge@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jaredhanson/utils-merge#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "utils-merge"
  summary: "merge() utility function"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-utils-merge-1.0.1-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jaredhanson/utils-merge.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/utils-merge@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jaredhanson/utils-merge#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "utils-merge"
  summary: "merge() utility function"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-utils-merge-1.0.1-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/utils-merge/-/utils-merge-1.0.1.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/utils-merge@1.0.1"
  filesAnalyzed: false
  homepage: "https://github.com/jaredhanson/utils-merge#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "utils-merge"
  summary: "merge() utility function"
  versionInfo: "1.0.1"
- SPDXID: "SPDXRef-Package-NPM-vary-1.1.2"
  copyrightText: "NONE"
  downloadLocation: "NONE"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "MIT"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vary-1.1.2-vcs"
  copyrightText: "NONE"
  downloadLocation: "git+https://github.com/jshttp/vary.git"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.1.2"
- SPDXID: "SPDXRef-Package-NPM-vary-1.1.2-source-artifact"
  copyrightText: "NONE"
  downloadLocation: "https://registry.npmjs.org/vary/-/vary-1.1.2.tgz"
  externalRefs:
  - referenceCategory: "PACKAGE_MANAGER"
    referenceType: "purl"
    referenceLocator: "pkg:npm/vary@1.1.2"
  filesAnalyzed: false
  homepage: "https://github.com/jshttp/vary#readme"
  licenseConcluded: "NOASSERTION"
  licenseDeclared: "NOASSERTION"
  name: "vary"
  summary: "Manipulate the HTTP Vary header"
  versionInfo: "1.1.2"
relationships:
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.6.3"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.3.8-vcs"
- spdxElementId: "SPDXRef-Package-NPM-accepts-1.3.8"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.3.8-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-array-flatten-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-flatten-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-array-flatten-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-flatten-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-3.1.2"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.24"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.4.1"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.11.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-raw-body-2.5.1"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-body-parser-1.20.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-body-parser-1.20.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-body-parser-1.20.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-bytes-3.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-3.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-bytes-3.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-3.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-call-bind-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-call-bind-1.0.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-call-bind-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-call-bind-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-call-bind-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-call-bind-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-content-disposition-0.5.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.1"
- spdxElementId: "SPDXRef-Package-NPM-content-disposition-0.5.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-disposition-0.5.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-content-disposition-0.5.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-disposition-0.5.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-content-type-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5-vcs"
- spdxElementId: "SPDXRef-Package-NPM-content-type-1.0.5"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cookie-0.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.5.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cookie-0.5.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.5.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6-vcs"
- spdxElementId: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9-vcs"
- spdxElementId: "SPDXRef-Package-NPM-debug-2.6.9"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-depd-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-depd-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-destroy-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-destroy-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ee-first-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ee-first-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ee-first-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ee-first-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-encodeurl-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-encodeurl-1.0.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-encodeurl-1.0.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-encodeurl-1.0.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-escape-html-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-escape-html-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-etag-1.8.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.8.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-etag-1.8.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.8.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-accepts-1.3.8"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-array-flatten-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-body-parser-1.20.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-type-1.0.5"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-setprototypeof-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.4.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.11.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-content-disposition-0.5.4"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-0.5.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-cookie-signature-1.0.6"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-encodeurl-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.8.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-finalhandler-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.5.2"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-merge-descriptors-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-methods-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-to-regexp-0.1.7"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-proxy-addr-2.0.7"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.18.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-static-1.15.0"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.1.2"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-express-4.18.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-express-4.18.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-express-4.18.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.4.1"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-encodeurl-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-finalhandler-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-finalhandler-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-finalhandler-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-forwarded-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forwarded-0.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-forwarded-0.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-forwarded-0.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-fresh-0.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.5.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-fresh-0.5.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.5.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-function-bind-1.1.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-intrinsic-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-intrinsic-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-function-bind-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-has-symbols-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-has-symbols-1.0.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-has-symbols-1.0.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-setprototypeof-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-toidentifier-1.0.1"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-http-errors-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.24"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.24-vcs"
- spdxElementId: "SPDXRef-Package-NPM-iconv-lite-0.4.24"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.24-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-inherits-2.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-inherits-2.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ipaddr.js-1.9.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ipaddr.js-1.9.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ipaddr.js-1.9.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ipaddr.js-1.9.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-media-typer-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-media-typer-0.3.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-media-typer-0.3.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-media-typer-0.3.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-merge-descriptors-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-merge-descriptors-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-merge-descriptors-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-merge-descriptors-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-methods-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-methods-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-methods-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-methods-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-1.6.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.52.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-db-1.52.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.35"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-db-1.52.0"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.35"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35-vcs"
- spdxElementId: "SPDXRef-Package-NPM-mime-types-2.1.35"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-ms-2.1.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-negotiator-0.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.6.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-negotiator-0.6.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-negotiator-0.6.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-object-inspect-1.12.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-inspect-1.12.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-object-inspect-1.12.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-inspect-1.12.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-on-finished-2.4.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ee-first-1.1.1"
- spdxElementId: "SPDXRef-Package-NPM-on-finished-2.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.4.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-on-finished-2.4.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.4.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-parseurl-1.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3-vcs"
- spdxElementId: "SPDXRef-Package-NPM-parseurl-1.3.3"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-path-to-regexp-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-to-regexp-0.1.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-path-to-regexp-0.1.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-path-to-regexp-0.1.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-proxy-addr-2.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-forwarded-0.2.0"
- spdxElementId: "SPDXRef-Package-NPM-proxy-addr-2.0.7"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ipaddr.js-1.9.1"
- spdxElementId: "SPDXRef-Package-NPM-proxy-addr-2.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-proxy-addr-2.0.7-vcs"
- spdxElementId: "SPDXRef-Package-NPM-proxy-addr-2.0.7"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-proxy-addr-2.0.7-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.11.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-side-channel-1.0.4"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.11.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-qs-6.11.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-qs-6.11.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-range-parser-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-range-parser-1.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-bytes-3.1.2"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-iconv-lite-0.4.24"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.5.1"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-raw-body-2.5.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-raw-body-2.5.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-raw-body-2.5.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safe-buffer-5.2.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safe-buffer-5.2.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-safer-buffer-2.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-safer-buffer-2.1.2-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-debug-2.6.9"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-depd-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-destroy-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-http-errors-2.0.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-2.0.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-on-finished-2.4.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-encodeurl-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-etag-1.8.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-fresh-0.5.2"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-range-parser-1.2.1"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-1.6.0"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-ms-2.1.3"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.18.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-send-0.18.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.18.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.15.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-encodeurl-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.15.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-escape-html-1.0.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.15.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-parseurl-1.3.3"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.15.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-send-0.18.0"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.15.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-static-1.15.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-serve-static-1.15.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-serve-static-1.15.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-setprototypeof-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-setprototypeof-1.2.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-setprototypeof-1.2.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-setprototypeof-1.2.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-side-channel-1.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-call-bind-1.0.2"
- spdxElementId: "SPDXRef-Package-NPM-side-channel-1.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-get-intrinsic-1.2.0"
- spdxElementId: "SPDXRef-Package-NPM-side-channel-1.0.4"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-object-inspect-1.12.3"
- spdxElementId: "SPDXRef-Package-NPM-side-channel-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-side-channel-1.0.4-vcs"
- spdxElementId: "SPDXRef-Package-NPM-side-channel-1.0.4"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-side-channel-1.0.4-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-statuses-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-2.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-statuses-2.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-statuses-2.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-toidentifier-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-toidentifier-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-toidentifier-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-toidentifier-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-mime-types-2.1.35"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-media-typer-0.3.0"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18-vcs"
- spdxElementId: "SPDXRef-Package-NPM-type-is-1.6.18"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-type-is-1.6.18-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-unpipe-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0-vcs"
- spdxElementId: "SPDXRef-Package-NPM-unpipe-1.0.0"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-unpipe-1.0.0-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-utils-merge-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.1-vcs"
- spdxElementId: "SPDXRef-Package-NPM-utils-merge-1.0.1"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-utils-merge-1.0.1-source-artifact"
- spdxElementId: "SPDXRef-Package-NPM-vary-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.1.2-vcs"
- spdxElementId: "SPDXRef-Package-NPM-vary-1.1.2"
  relationshipType: "GENERATED_FROM"
  relatedSpdxElement: "SPDXRef-Package-NPM-vary-1.1.2-source-artifact"
- spdxElementId: "SPDXRef-Project-NPM-jsdt-node-test-project-1.0.0"
  relationshipType: "DEPENDS_ON"
  relatedSpdxElement: "SPDXRef-Package-NPM-express-4.18.2"
